Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa
File:                     4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa (raw, json)
Hash identifier:          vxWiiEleFurNt4RBQVZuwsods17AwZZcnCEvuyjeL/E=
Subject key identifier:   4D:10:69:2A:3E:A8:54:B5:F1:2F:29:44:57:AF:C4:5B:D7:9F:BA:A2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453283747BBAF4E1F34BA80B72
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa
Signing time:             Wed 13 Mar 2024 20:01:21 +0000
ROA not before:           Wed 13 Mar 2024 20:01:21 +0000
ROA not after:            Tue 11 Jun 2024 20:01:21 +0000
asID:                     41264
IP address blocks:        104.133.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:74:7b:ba:f4:e1:f3:4b:a8:0b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:01:21 2024 GMT
            Not After : Jun 11 20:01:21 2024 GMT
        Subject: CN=9d3e562e-491f-4a8f-9415-f83c908c83cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:66:79:66:88:70:d7:b9:88:e9:86:30:4f:
                    06:a9:43:67:e8:87:45:87:c1:00:40:b6:e8:57:46:
                    3c:a3:29:91:29:90:ff:b3:56:ea:ce:5c:2d:a6:d8:
                    a0:c4:32:54:ba:d2:47:7f:34:1e:2f:15:0d:8a:f5:
                    2c:a4:a2:9c:a2:b1:94:ba:c9:7f:96:e0:45:6d:60:
                    f3:fa:94:4e:03:61:60:18:cf:b0:db:ee:09:1c:0a:
                    c8:05:a8:1d:bc:b9:31:20:f2:dd:05:56:86:11:5f:
                    19:75:71:af:d0:64:b2:1f:a8:a4:4f:7d:91:82:c3:
                    fd:3c:8c:39:00:cc:b5:e2:bb:f5:81:5b:77:60:5e:
                    e0:b3:40:0c:19:d9:aa:c6:51:37:ae:1d:a6:c0:ec:
                    c1:e0:62:a9:b5:8b:73:3d:f3:46:8c:a7:56:a7:9b:
                    88:4b:ab:8f:69:ca:d8:99:89:8d:c6:00:9a:07:43:
                    53:c5:06:bb:67:1f:7a:4a:3e:36:ba:ae:e6:7b:22:
                    39:4d:bf:1d:1f:60:ae:66:26:c3:20:b6:f6:3e:55:
                    ba:6d:6d:22:d5:4a:4a:98:6a:a3:1a:c7:2d:d1:8d:
                    93:53:da:78:63:74:8c:23:cf:74:cb:d0:fa:5f:6a:
                    a4:38:85:db:50:2c:5d:9a:34:7d:71:8e:23:ae:8c:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:10:69:2A:3E:A8:54:B5:F1:2F:29:44:57:AF:C4:5B:D7:9F:BA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:3d:dc:4d:5c:b6:a0:b2:14:8e:be:17:b0:5d:d5:d6:0f:
         c4:c4:27:b4:33:1c:d2:3b:93:14:b2:a4:a4:ca:27:45:29:67:
         08:00:56:51:e3:89:69:40:15:d1:88:a5:fc:4a:01:41:f8:e3:
         50:f5:ed:9a:7a:ef:b3:bb:29:21:ad:91:5b:80:84:a1:c2:6e:
         1a:2d:23:54:78:6e:f6:0a:a8:57:b5:46:43:3f:57:75:94:96:
         95:d7:12:51:ae:83:c0:9a:6e:da:59:bd:78:be:96:5b:d7:7d:
         83:4d:4b:e2:79:cd:b2:1e:36:f9:ec:41:a6:cd:20:7d:44:ae:
         90:17:11:d0:92:ff:a1:f3:a6:78:47:2c:fa:c4:1f:c0:4a:b8:
         45:ee:da:e7:31:b6:50:32:95:0c:20:d8:1f:f9:7f:ab:46:9a:
         e0:b3:35:9b:32:2c:63:be:c3:c0:2f:13:54:7c:fa:0a:86:d9:
         30:82:70:b0:04:6b:1a:fd:19:ad:ec:39:2f:d6:8b:e7:bd:e5:
         e7:09:ae:b3:a2:c2:a8:cb:65:c8:3a:50:df:86:df:bc:0d:91:
         d2:dd:dc:8b:06:cf:a0:9e:6a:e8:7c:6b:9d:55:0a:47:d8:8b:
         22:c9:ef:00:51:ab:51:ef:bf:72:e1:c9:14:7d:e2:bc:17:73:
         a8:22:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:30 2024 by rpki-client on console-ams.rpki-client.org