Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa
File:                     2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa (raw, json)
Hash identifier:          s0RNyziaF6W/Qgqo60i1SCsb1DGep6E1PJB1WICVv9U=
Subject key identifier:   26:87:16:84:94:A6:23:48:EE:36:AA:C6:89:2E:59:4F:E9:40:5A:43
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7A1BB5EE18DC83A9360C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa
Signing time:             Mon 18 Mar 2024 22:07:48 +0000
ROA not before:           Mon 18 Mar 2024 22:07:48 +0000
ROA not after:            Sun 16 Jun 2024 22:07:48 +0000
asID:                     41264
IP address blocks:        104.134.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:a1:bb:5e:e1:8d:c8:3a:93:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:07:48 2024 GMT
            Not After : Jun 16 22:07:48 2024 GMT
        Subject: CN=700a786a-e235-4258-8a9b-a8254a7cc9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:4b:11:27:03:35:17:f4:b6:97:fc:c9:51:
                    76:7d:08:a2:91:32:92:e2:63:24:84:f4:e1:41:79:
                    d1:a2:bf:81:1a:34:61:66:59:0a:79:aa:a6:4c:35:
                    4c:0b:05:71:9e:3b:dd:19:3d:48:a1:e4:27:b2:34:
                    5e:3f:3b:5b:52:46:98:f4:3d:2b:f4:64:77:e8:39:
                    0d:07:d6:e2:84:e2:ad:bd:81:56:4a:53:7b:8f:ba:
                    cf:23:ab:6c:f8:17:37:19:62:bb:ee:1b:56:dc:29:
                    20:21:31:83:4d:ba:4d:a6:81:74:3f:84:cc:0d:a3:
                    03:35:cb:69:6f:b0:f3:c7:ef:5b:5d:3f:bd:d1:2c:
                    d9:ca:ab:21:22:a9:3c:73:ed:14:5e:60:9f:8c:3a:
                    00:07:6c:f9:21:ec:be:b6:f4:4e:6d:70:7c:0f:77:
                    39:19:a9:72:2f:be:cf:fa:90:1b:96:f0:88:b1:54:
                    18:50:a9:a6:b6:79:f4:4c:c8:c2:f6:4a:89:4f:59:
                    de:7d:99:02:86:51:3f:11:9d:a0:a8:6c:71:84:0c:
                    ed:83:6b:09:7d:61:41:27:37:27:42:a9:be:8a:56:
                    21:ee:ee:f3:4e:b5:5d:cb:03:53:9d:6c:57:c2:58:
                    08:16:32:e6:3a:39:a4:26:e8:59:2a:fd:86:af:f2:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:16:84:94:A6:23:48:EE:36:AA:C6:89:2E:59:4F:E9:40:5A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:6e:b7:21:f1:99:69:28:da:9a:21:af:f4:90:81:f0:95:
         6a:5b:bb:63:fc:ec:a9:8b:be:68:19:be:71:03:9c:d7:60:22:
         d7:c3:18:9b:9c:57:6c:41:88:5a:e1:d6:b2:4f:6a:09:25:75:
         fc:72:2f:41:93:16:6d:d1:0b:2f:02:e0:f5:56:ef:12:32:01:
         24:8e:d8:d5:06:53:e0:94:c9:17:9c:ba:8d:10:5f:c9:48:ff:
         30:d1:f8:04:41:ee:76:f0:4b:52:4c:43:2c:56:fe:62:2c:fa:
         83:b6:69:5f:73:5b:95:6b:00:10:1d:b9:90:de:fa:4f:40:13:
         2a:d7:47:34:1f:24:86:e4:c9:0a:7f:ab:93:7c:d5:bd:0f:db:
         b7:9c:3b:23:e8:70:63:18:e1:ab:2b:da:bc:4c:06:0d:9f:b7:
         a9:15:ff:14:b9:12:39:e5:e3:e1:1e:66:8b:bb:2d:53:e5:f6:
         69:c1:d0:56:01:f9:d1:7e:70:2c:ad:ad:67:5a:71:ab:90:65:
         7d:c3:f0:09:5e:ca:5e:6f:45:7e:3b:d0:db:ad:20:a9:85:57:
         dc:a6:77:e3:d0:7a:ec:d0:b4:6e:b2:b9:f4:63:f1:a2:a8:6c:
         37:d1:20:93:3d:9f:ab:66:80:d2:51:42:77:b7:35:20:49:da:
         3e:13:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:26 2024 by rpki-client on console-ams.rpki-client.org