Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa
File:                     2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa (raw, json)
Hash identifier:          t4w/xyK0Vlo+OjCYcj5hi1lr3C7gu7NZga5NElHB2bE=
Subject key identifier:   D8:B2:F2:41:24:3E:EE:40:B6:5C:FA:34:05:06:BD:C1:03:0E:C4:4F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584532845B4534BE3CA104DCEF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa
Signing time:             Wed 13 Mar 2024 20:03:10 +0000
ROA not before:           Wed 13 Mar 2024 20:03:10 +0000
ROA not after:            Tue 11 Jun 2024 20:03:10 +0000
asID:                     41264
IP address blocks:        104.132.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:5b:45:34:be:3c:a1:04:dc:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:03:10 2024 GMT
            Not After : Jun 11 20:03:10 2024 GMT
        Subject: CN=fa1e21e3-aece-40ac-a1c6-4b6f662b5f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:77:05:12:7a:d1:12:0e:25:1d:44:6a:7e:
                    e1:36:49:bd:3b:18:dc:33:7d:7d:11:b2:9f:92:3d:
                    75:6d:1b:88:cd:37:4e:86:a0:21:50:4b:67:f7:f0:
                    e0:c6:65:00:dd:3a:ec:e5:6e:51:c5:cc:12:e1:c7:
                    3f:39:3c:89:bf:30:a3:e7:e6:16:5e:ab:2d:50:76:
                    d7:0f:5b:2c:c1:da:71:a8:02:f1:87:61:1b:9a:ec:
                    bb:e0:53:08:6a:2f:7d:9d:4f:1c:58:1e:81:e0:dc:
                    05:a9:56:1c:10:4f:bf:5f:68:50:8e:62:74:ea:29:
                    e1:0f:a0:73:54:9a:42:3e:0f:42:bb:7c:ea:c4:a1:
                    96:05:3c:98:71:7d:b8:4f:c0:a0:d8:3f:12:0e:32:
                    03:22:7f:49:79:ac:b0:80:58:c1:f5:05:fa:37:3e:
                    06:a1:9f:cb:22:d6:ce:0a:d9:c0:9f:a6:00:0c:27:
                    ae:30:33:3a:66:a7:75:bd:3f:02:89:92:79:d5:aa:
                    7d:60:39:32:96:cc:d0:7c:b8:62:57:03:f7:ba:70:
                    f9:45:fb:37:88:95:97:0b:d2:56:72:01:93:42:82:
                    db:c4:08:ea:10:9b:42:12:3a:c8:ac:26:4a:cf:67:
                    ce:e0:dd:49:d3:d1:95:0d:ea:ca:b5:09:a7:b0:98:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:F2:41:24:3E:EE:40:B6:5C:FA:34:05:06:BD:C1:03:0E:C4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:83:e7:5d:ad:fa:46:43:60:0c:a2:ed:18:ea:0c:c6:e6:7a:
         a0:2d:c9:27:a3:45:52:4e:3c:e8:bb:b7:16:83:94:5f:a9:a0:
         d8:0f:07:3b:4e:b1:11:7f:dc:fa:cb:d4:87:77:f6:e4:fa:c0:
         0f:a7:6e:96:66:cc:66:e3:6e:73:45:95:92:62:3c:80:8b:27:
         db:63:9a:bc:3c:28:4b:11:dd:6d:ca:aa:56:e2:03:e8:13:c8:
         0e:f7:66:12:1b:74:42:78:1b:c1:d2:4c:b5:52:70:60:5e:67:
         e4:4d:85:47:27:d1:22:e5:4a:6d:aa:75:05:ad:0a:ec:c2:60:
         bd:4b:dd:eb:f3:d5:89:3d:eb:4e:36:dc:0c:45:04:3f:fb:d9:
         7e:96:18:41:ca:03:26:ec:b1:4f:c5:81:d5:eb:ce:9f:7a:9a:
         d0:2e:85:e8:4b:19:a6:6e:5c:0b:88:38:a4:7c:f3:88:8f:b0:
         84:b0:95:8b:09:c4:67:d9:71:90:ec:67:28:df:fb:18:4a:4e:
         96:16:51:a5:7e:20:e8:b4:5d:17:08:ec:22:72:46:9f:1f:60:
         e3:0f:cd:3e:d6:e5:c0:40:fc:9c:2e:ed:50:da:33:96:61:01:
         b6:69:70:1c:7a:47:d8:32:51:93:6e:1e:06:ad:20:fd:8e:15:
         38:a3:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 09:50:03 2024 by rpki-client on console-fra.rpki-client.org