Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa
File:                     2e33a78a-a08a-30af-89e7-9b336e2d0057.roa (raw, json)
Hash identifier:          xVY/0osXmTWK+8FR7SqKqvxozGxF98K29XdX8pjpwUw=
Subject key identifier:   82:D2:5F:D5:83:43:E6:42:01:8E:5D:49:7A:0B:03:5D:DC:61:C9:53
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0741F1E60501AFF174D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     395973
IP address blocks:        104.134.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:07:41:f1:e6:05:01:af:f1:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=e0e54d2c-8891-4fde-bde8-720f64963fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:02:10:be:bc:ad:24:86:17:d6:0a:d9:b0:
                    ae:2e:60:78:08:f6:32:f9:6a:fe:79:8f:5b:b7:13:
                    21:39:50:09:f0:05:af:bd:68:4f:01:32:52:07:9c:
                    bc:37:fa:14:90:3d:cd:32:4a:21:e5:66:c0:dd:8f:
                    07:08:88:5c:0e:d5:a6:7e:7d:53:a5:de:29:0e:73:
                    ff:fe:aa:f9:20:16:8a:2e:fb:19:84:9c:2c:6f:41:
                    9f:87:fd:3b:24:ac:fd:6e:58:dc:c3:1b:46:58:6e:
                    7c:01:40:91:9c:0e:f0:70:42:80:ef:c6:77:80:c6:
                    5f:1c:a3:b2:29:10:e8:4e:e5:e1:36:4b:67:a9:11:
                    20:83:af:0d:27:1c:7c:6d:e0:05:29:25:a7:bf:4d:
                    b5:79:17:45:67:38:d6:13:6e:02:b7:78:d1:55:d2:
                    40:ad:cd:13:1a:41:2f:d2:46:6a:94:71:ad:1c:44:
                    5a:2c:46:ad:3f:dd:c6:71:f0:65:91:7e:e6:52:c6:
                    c6:60:a6:ff:f8:05:d2:0e:d4:ff:7f:0f:e0:3f:56:
                    7e:4e:53:2b:a9:7d:4d:59:9f:c0:1d:c2:9a:7c:27:
                    fe:ee:ef:f4:72:c4:e7:a9:0d:0b:a9:b8:15:30:79:
                    3d:77:2f:99:45:39:14:10:0f:8d:0d:3b:50:7b:79:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:5F:D5:83:43:E6:42:01:8E:5D:49:7A:0B:03:5D:DC:61:C9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:18:0f:ad:57:5d:83:dd:2d:9f:2a:eb:68:60:be:a5:a7:72:
         c5:80:72:10:25:69:21:28:4c:55:a6:f9:b5:6a:ec:da:0f:77:
         ef:69:35:79:f0:af:fb:0e:de:64:a4:6e:c8:d2:aa:f3:e1:d2:
         e4:2a:de:b7:ad:9d:67:16:30:42:be:92:e0:c1:0f:d6:42:8c:
         48:4d:82:74:dd:5a:69:de:a4:1d:1e:36:08:6f:af:4a:b5:59:
         fe:79:e3:72:92:59:25:a2:c5:09:f0:f8:6d:b1:fd:45:02:1e:
         42:4e:a4:9b:48:e9:48:21:63:99:40:54:35:47:d3:9b:39:d0:
         76:b7:74:ab:e9:d2:26:8b:a5:04:7d:c8:5d:5e:6a:c3:b4:6f:
         5d:89:a2:38:11:a1:3a:73:7e:ef:83:00:c8:8f:18:17:0d:46:
         83:88:f8:11:84:de:76:a9:2f:fe:ac:00:ed:ca:59:f3:12:7a:
         21:5a:e3:e1:83:4f:2b:61:aa:bf:db:f0:f7:e4:72:32:9a:a4:
         21:93:e6:03:1c:60:f3:6f:ad:f3:6b:3f:02:3d:ca:30:e2:df:
         67:e3:8f:6a:7a:3a:36:44:c1:b4:82:77:1c:82:e1:4f:d6:2a:
         66:ac:e1:3a:bd:66:08:e9:6b:e3:e8:db:94:4b:2f:7a:1a:e9:
         e2:09:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:49 2024 by rpki-client on console-ams.rpki-client.org