Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bbb784b-e80f-318c-825e-055fa628a787.roa
File:                     3bbb784b-e80f-318c-825e-055fa628a787.roa (raw, json)
Hash identifier:          PjYiK72im3Zh6jxFcBhz06T1rTzEL0uHIXSwISGFgkc=
Subject key identifier:   9E:E1:C1:6F:F4:78:E3:05:BE:9A:42:37:13:A4:78:C3:C3:12:8A:30
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094C87A622A2EF662394880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bbb784b-e80f-318c-825e-055fa628a787.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c8:7a:62:2a:2e:f6:62:39:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=4ae1a8f8-b756-4263-a05c-b1ab3b34fddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:92:c5:51:04:93:b3:94:32:28:4b:1a:82:
                    a2:0c:13:ae:5a:12:60:68:c7:ba:4c:3d:bb:44:43:
                    46:c0:30:ab:3b:0f:51:8c:56:c8:f4:99:93:37:42:
                    ce:87:0a:e5:7b:c4:ff:23:2a:0f:bd:76:6e:ad:af:
                    5b:d5:df:33:07:3c:2f:2f:f9:29:fa:4d:a0:a9:6b:
                    ba:3c:40:ad:64:67:6e:9d:34:41:52:69:15:5d:c2:
                    5d:5b:e6:1f:b4:b3:4d:4c:54:be:75:71:6a:c5:d3:
                    75:44:6c:88:8d:e5:01:9d:87:81:b3:66:72:45:af:
                    7f:b0:e0:2d:df:64:07:36:02:d1:c1:bd:1c:a3:fa:
                    df:e9:fb:1c:07:fd:c8:e9:1a:aa:7a:42:ad:be:17:
                    6a:63:41:1a:d4:a6:cb:06:b6:ef:90:e2:7a:00:bf:
                    f5:0c:da:ba:41:8f:cf:f0:b9:30:bc:77:49:9b:64:
                    17:74:45:79:75:a5:23:69:09:65:7d:46:e4:93:e5:
                    5c:99:b4:ba:a0:9c:5a:b2:c9:5d:7f:58:a0:b5:9b:
                    07:22:3e:4c:1b:c2:86:8e:04:30:32:c9:df:03:0b:
                    cc:65:fb:a3:15:cc:56:81:7f:de:c7:55:ab:cb:25:
                    98:51:9c:7e:44:ed:96:80:ba:b7:ce:01:0b:12:25:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E1:C1:6F:F4:78:E3:05:BE:9A:42:37:13:A4:78:C3:C3:12:8A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bbb784b-e80f-318c-825e-055fa628a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:df:67:13:5b:15:12:76:d3:20:81:09:37:e1:0e:2c:88:13:
         48:eb:d4:fc:32:10:9a:38:f8:c2:a2:3a:c2:c7:93:49:04:01:
         82:83:5a:36:3d:84:a9:06:17:fa:6d:4c:0e:ec:4d:fe:e5:8c:
         a0:66:51:12:98:55:06:6b:54:e1:e4:74:df:e4:b1:1e:02:6b:
         c4:7f:03:ba:ff:ab:06:ae:7d:a8:42:d8:a9:6f:ee:c5:2e:af:
         c7:fe:6b:19:4d:5b:c8:3a:55:12:de:a5:4d:cc:ac:10:9d:9a:
         45:83:b1:12:ba:82:e7:ce:08:f6:a3:a0:82:fd:9e:12:9b:8c:
         d6:22:67:d7:29:f3:61:78:10:60:b4:fc:bd:05:35:65:ee:87:
         dc:90:08:27:9d:80:3e:b6:0e:40:b3:dc:aa:d6:f2:a7:e6:9e:
         3b:51:ec:c6:b6:48:24:68:00:98:87:d3:3c:43:fd:c0:40:a8:
         96:aa:0b:76:d0:18:5c:0b:44:9b:d0:e1:26:80:6e:62:d5:58:
         c3:99:d8:44:a8:e2:f4:80:57:b2:dc:97:1c:3e:69:e0:c7:b3:
         9b:99:11:f6:c7:84:c4:99:e3:9c:6c:df:2c:3e:c7:d4:45:9d:
         12:dc:e0:1b:ad:a7:63:22:25:79:ea:ba:1d:0a:46:1c:78:18:
         82:89:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:43 2024 by rpki-client on console-ams.rpki-client.org