Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa
File:                     24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa (raw, json)
Hash identifier:          Zzl+SwtFiiiDKN3exRQ+dI8LNdc8KQ4J0L/xRHN/d+4=
Subject key identifier:   36:59:63:E6:7B:51:B3:B6:D0:DB:8A:F0:82:22:1D:46:6A:73:B3:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BC407C81EECD93C06CF6C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa
Signing time:             Mon 18 Mar 2024 22:17:07 +0000
ROA not before:           Mon 18 Mar 2024 22:17:07 +0000
ROA not after:            Sun 16 Jun 2024 22:17:07 +0000
asID:                     15169
IP address blocks:        104.134.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:40:7c:81:ee:cd:93:c0:6c:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:17:07 2024 GMT
            Not After : Jun 16 22:17:07 2024 GMT
        Subject: CN=19706598-419a-4866-b6e9-507c02040165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:38:c2:38:38:ff:19:a7:d1:16:64:4e:9f:32:
                    11:8e:02:d8:1f:77:e7:40:8c:cf:86:7f:cf:8d:a0:
                    e7:f4:79:3b:0d:b9:0e:6f:b0:f2:1e:09:41:52:42:
                    86:47:75:a1:75:5f:a3:07:51:33:d8:21:a7:ff:fd:
                    14:12:0a:1f:7a:36:40:6a:5c:83:1a:09:e2:e2:e0:
                    c3:67:c2:a4:31:ff:bc:c5:2e:71:07:5e:4d:15:e3:
                    e0:76:46:07:4b:00:83:14:ae:f8:f2:82:e9:87:7a:
                    37:92:50:af:04:95:cc:79:89:59:54:a9:6d:f1:74:
                    03:47:69:82:0d:5f:4f:c6:92:ef:76:da:91:dc:35:
                    9e:64:13:33:08:fb:42:47:27:01:3c:6c:9a:e6:45:
                    5b:b8:b6:8c:4b:4f:ea:01:4c:b4:be:ca:fd:1f:56:
                    a7:65:6c:de:93:d4:a8:77:df:89:5e:fa:e1:ab:89:
                    b1:63:75:9c:46:f2:b4:86:67:db:bc:fc:82:24:7f:
                    d9:b7:6f:b5:21:ab:85:5c:bb:08:54:65:4e:b6:41:
                    f6:86:af:7d:f0:b5:8d:35:c0:fc:8c:5c:20:15:20:
                    ba:cd:03:30:d4:93:e2:0e:74:97:c3:c4:c8:69:0a:
                    40:2b:03:c3:ea:d4:d6:46:eb:c8:bc:da:95:ae:67:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:63:E6:7B:51:B3:B6:D0:DB:8A:F0:82:22:1D:46:6A:73:B3:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:8a:c9:29:91:85:60:3d:12:30:e9:92:9d:5d:82:ae:e1:
         48:6b:81:bb:e7:43:21:1d:7a:6b:bf:92:be:73:47:a2:c7:2d:
         c1:81:2a:9c:96:92:b9:5d:10:90:c3:4a:30:ab:d7:e9:71:31:
         f6:9d:d1:1a:ef:91:d2:3b:95:23:83:ba:46:8d:6d:27:d1:c4:
         e0:b3:14:46:2d:db:e1:f3:3d:00:4b:38:f4:70:bf:08:81:f8:
         d7:92:42:cd:31:d4:1b:b0:4e:d6:31:12:47:74:ca:91:ef:60:
         30:ff:b5:e8:c4:e1:4a:b6:21:4d:45:65:d7:05:e6:d6:b5:bf:
         4d:5c:74:4a:63:ea:fb:b9:b5:ef:5c:57:45:ab:00:4e:08:29:
         9c:4d:31:f9:a6:0e:a3:5f:14:fb:61:a8:51:e1:f9:f6:37:bd:
         73:8d:71:61:3d:74:00:7f:6c:7f:20:d9:5c:5a:21:1c:c5:d1:
         1d:03:c2:01:49:4a:a4:7e:72:97:6b:4c:de:00:35:9f:62:b8:
         77:75:3a:57:2f:d6:44:b0:0e:08:22:18:db:ac:9c:72:be:03:
         d3:bb:07:f4:33:31:af:f7:b6:b0:a1:38:c5:5f:dc:0d:93:84:
         01:61:ba:44:24:22:e9:5d:14:5c:d0:d9:74:30:31:b4:66:cd:
         4e:35:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:42:31 2024 by rpki-client on console-fra.rpki-client.org