Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa
File:                     3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa (raw, json)
Hash identifier:          tHRifw45ggUOcjin9X0QIx19VuZFBE8MSncHDDq9u7c=
Subject key identifier:   7F:80:1C:2F:59:58:19:20:1C:18:99:ED:8E:78:24:1B:7A:E3:00:45
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585620E58007B5F6FCAB700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa
Signing time:             Thu 14 Mar 2024 21:52:40 +0000
ROA not before:           Thu 14 Mar 2024 21:52:40 +0000
ROA not after:            Wed 12 Jun 2024 21:52:40 +0000
asID:                     41264
IP address blocks:        104.133.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:62:0e:58:00:7b:5f:6f:ca:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:40 2024 GMT
            Not After : Jun 12 21:52:40 2024 GMT
        Subject: CN=97e32b13-083f-4ec8-a941-f877043e54d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:a5:33:d2:ed:ac:ae:1e:59:44:89:ed:64:
                    21:6e:8b:a2:b9:3c:a1:f7:b3:89:40:5a:dd:70:ad:
                    83:f2:2d:47:be:b1:01:c0:ec:bd:d4:9a:04:fa:d2:
                    d9:95:c7:12:ee:2c:f7:6b:d3:02:51:7d:ae:01:4f:
                    40:4e:10:03:a3:7e:2e:b4:05:17:bb:81:c1:2d:5f:
                    db:eb:6c:1f:fe:cf:08:29:cc:ce:1b:a1:78:4c:10:
                    d5:c7:b6:cc:dd:e4:00:3a:d8:16:c5:89:47:e1:17:
                    86:8f:25:13:11:78:12:4f:6f:2d:fc:86:6f:ee:b2:
                    21:53:cd:28:07:7f:1d:10:a9:b1:53:8b:1a:1d:cc:
                    73:e9:19:a0:b2:48:c9:b5:3e:27:60:31:76:2f:54:
                    43:e6:01:eb:b3:88:66:26:9e:00:bd:e4:a6:59:7f:
                    9c:dc:86:20:2b:f3:8b:d7:d4:e1:17:9e:7a:c6:15:
                    53:f1:8f:d9:e2:7f:38:09:14:aa:c2:d3:bd:7c:6a:
                    42:06:a6:5c:61:0e:9a:81:fb:73:28:ab:dc:a0:d6:
                    8b:e7:9f:f5:cd:92:bd:1f:0e:35:bd:88:ae:ac:bb:
                    9a:77:e2:ec:85:5f:ae:64:ad:24:31:ce:52:33:88:
                    38:75:d1:4c:14:c0:59:64:29:4d:11:f8:6f:56:e8:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:1C:2F:59:58:19:20:1C:18:99:ED:8E:78:24:1B:7A:E3:00:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:0a:76:19:5c:05:82:82:d8:3d:7e:18:ad:1c:b9:3e:3c:90:
         7c:af:1a:63:45:50:b9:40:64:fd:b6:3b:13:3b:e1:61:f3:b0:
         3d:f0:0b:18:29:42:96:4f:ae:32:70:32:77:60:88:b3:5b:9b:
         36:1f:51:d8:02:e8:f4:52:88:86:bc:c8:51:03:78:60:93:d2:
         bb:9a:fa:48:1e:8d:96:9d:31:f4:7c:98:8a:26:9a:89:08:d4:
         46:8c:3c:4e:61:f2:fd:55:b1:f2:13:5d:35:4a:84:f5:bc:92:
         18:d3:88:2c:ba:0a:e4:78:af:37:5a:88:7c:c8:2b:69:ad:24:
         d6:87:72:37:11:c4:23:af:fd:51:aa:51:a5:83:66:a7:a1:b0:
         5b:e6:e7:e6:a7:2b:26:66:6e:1e:0b:5d:c1:a9:7e:dd:e6:9f:
         20:1a:31:74:e8:6b:7f:de:e3:5a:5c:43:8b:6b:2f:02:58:a5:
         13:77:24:89:e9:00:b0:36:63:db:4f:e7:66:ae:f5:85:29:0a:
         31:c6:c2:f8:9d:2a:ab:4d:b7:ef:38:8a:b7:5d:0e:79:fd:d1:
         62:a0:70:d6:61:b5:80:cb:00:22:bb:2d:f6:d6:94:7a:f8:3b:
         92:02:7d:3c:bc:44:10:50:cf:f2:46:ac:a5:25:73:60:d9:35:
         d4:cf:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:29 2024 by rpki-client on console-ams.rpki-client.org