Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
File:                     31cb2788-4474-3889-9f7f-b65f7a61f692.roa (raw, json)
Hash identifier:          NPEfQ0kPMsBwFo4sdiyNvQGqZsnv5hGY0LIealoP0Ww=
Subject key identifier:   CE:52:39:87:6E:9A:6E:05:2D:3C:3F:AA:68:36:D9:63:8E:4D:B0:7B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535843993DA3FB820238DFD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
Signing time:             Thu 14 Mar 2024 21:50:20 +0000
ROA not before:           Thu 14 Mar 2024 21:50:20 +0000
ROA not after:            Wed 12 Jun 2024 21:50:20 +0000
asID:                     41264
IP address blocks:        104.133.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:39:93:da:3f:b8:20:23:8d:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:50:20 2024 GMT
            Not After : Jun 12 21:50:20 2024 GMT
        Subject: CN=c9928bd4-a4f8-4596-bbd4-15316c298228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:06:9e:b4:75:b7:09:47:fa:f6:0e:1f:95:
                    4b:a5:5b:d9:ba:d4:9d:12:20:dc:85:75:83:3e:0a:
                    a4:19:de:45:36:0c:02:5c:9a:c1:cf:33:c6:30:1c:
                    b4:fb:75:10:d7:a8:df:26:e0:ee:0c:ad:dd:97:a0:
                    de:0c:e2:96:45:31:f4:9d:78:45:74:c2:81:90:19:
                    ec:c9:9f:15:33:08:e6:17:f8:f4:e4:e1:3f:89:af:
                    4c:3a:d5:89:44:40:79:1a:3d:ac:a4:a0:90:ce:0f:
                    4d:e9:67:85:77:ab:a6:3e:49:c4:bb:56:be:d2:47:
                    cc:32:38:35:a4:f1:3c:39:d9:06:51:8e:76:7e:38:
                    17:ce:c0:ac:46:50:cb:56:9f:35:e2:09:cd:11:30:
                    aa:3f:85:53:07:61:00:4d:ed:a3:ce:13:cd:f1:71:
                    47:b0:0a:52:5c:57:3e:d9:4a:fa:7c:6b:45:18:27:
                    78:12:59:4c:47:3d:62:7d:2b:ce:35:26:3c:54:5a:
                    32:8e:51:a2:dd:6c:d1:41:a8:b1:47:38:3e:6e:0d:
                    3b:f4:1c:06:19:d0:0a:45:bd:7c:40:d9:3a:41:82:
                    93:8a:4c:f8:a1:6d:5c:5f:9c:f3:fc:9a:6a:ac:71:
                    34:93:98:d2:38:c3:4a:8b:0d:50:f2:ec:6f:72:46:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:52:39:87:6E:9A:6E:05:2D:3C:3F:AA:68:36:D9:63:8E:4D:B0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:40:cb:d7:ef:8b:bf:d8:b9:b7:ca:43:5d:06:20:93:4d:7e:
         97:eb:a9:8e:ce:97:d2:b1:b7:01:44:77:ec:91:75:1c:64:bf:
         60:87:0c:51:cf:87:af:44:cc:42:ab:97:8b:80:ed:cc:f2:fc:
         54:16:08:ad:4d:4a:43:77:c4:40:6a:ae:c4:b3:dd:6f:77:04:
         f1:15:bf:9d:50:68:ed:7f:db:1c:21:dc:54:8f:5f:1d:49:08:
         ee:df:cc:78:22:08:4a:14:83:6f:0c:a3:fd:7b:9d:59:e9:83:
         a5:f1:94:22:3d:af:9d:04:48:06:58:db:1f:6b:01:bb:49:52:
         a1:17:6e:e2:bf:62:71:04:3c:5b:a6:3f:a9:df:7b:a6:f9:fe:
         c5:3f:ba:e6:6c:3e:98:f9:c8:f9:c7:59:eb:c8:35:d6:11:1e:
         4e:aa:c9:f4:02:09:59:c5:ee:74:d0:54:d4:41:0e:6e:df:94:
         59:cf:98:b7:09:00:27:09:74:a8:29:44:32:3c:65:85:34:73:
         29:17:8f:9e:8e:a8:24:d1:ec:37:f6:9a:73:78:d2:5d:62:96:
         17:35:46:f1:4e:89:06:20:5d:00:c7:43:93:27:33:c4:75:62:
         52:d1:8f:ec:71:87:f3:97:03:a3:69:31:43:56:d3:94:46:92:
         10:eb:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:36 2024 by rpki-client on console-ams.rpki-client.org