Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
File:                     4aa658f5-2331-39df-b727-3a3852595351.roa (raw, json)
Hash identifier:          iNhUwjrxEpAfDy80hQcRAkx+nW8ordjotqrCJW8ZHS8=
Subject key identifier:   AF:D7:E3:72:9A:4C:5F:C3:B3:01:C5:B9:E6:52:AC:42:29:C5:AF:2E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094E25F34E70253BFFF1040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36411
IP address blocks:        104.134.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e2:5f:34:e7:02:53:bf:ff:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=03349db1-923d-40a0-92b8-dab63ebe6e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:d0:24:81:d7:8a:74:a1:ed:78:ae:f8:17:
                    93:75:56:95:b5:8c:da:15:26:46:f1:fb:53:b2:72:
                    e9:4e:88:e9:02:77:5f:d5:39:8d:8c:05:59:07:d7:
                    91:99:fd:5f:98:0d:dc:04:ff:67:99:01:fe:7b:ca:
                    50:5f:6d:67:c8:f8:07:d3:df:f6:cc:b7:ef:8d:64:
                    0b:a3:95:ca:2a:e5:59:6f:78:67:ba:c1:c9:56:97:
                    80:fd:50:a2:5b:15:e9:c2:65:fe:c3:29:55:c7:de:
                    62:a6:80:2f:c1:11:ee:7a:fc:d6:23:58:7d:9c:ac:
                    eb:a8:67:7a:db:63:d7:c3:cf:98:2a:82:dd:76:52:
                    93:f7:4f:f0:31:ea:c6:56:35:09:ab:f1:53:0d:b6:
                    cc:78:e9:b8:69:e7:b8:bd:e7:54:bb:5a:0f:0f:58:
                    35:9b:5d:dc:07:aa:93:07:04:c0:17:12:8c:a3:e9:
                    8b:e7:6f:03:7d:ce:01:f0:59:cf:2c:ae:e1:63:9e:
                    ff:50:e7:56:ab:02:e0:5d:62:1e:a4:4a:91:84:d3:
                    44:59:b8:e0:d0:27:f2:b2:90:f2:1e:c1:f5:e1:e4:
                    25:c8:db:99:73:4f:c5:80:96:ff:4d:46:a3:95:01:
                    a7:22:96:3c:3b:f7:78:e8:2a:a6:f9:5a:d5:67:37:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D7:E3:72:9A:4C:5F:C3:B3:01:C5:B9:E6:52:AC:42:29:C5:AF:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:96:24:39:d5:4a:c0:bb:26:02:71:cc:34:fd:be:60:d7:
         c5:ff:3a:95:99:c4:79:f4:2e:88:ed:1c:be:e6:c2:68:b8:de:
         d9:fe:32:58:3b:90:fd:43:16:83:6c:36:2d:d3:43:62:ce:8b:
         c9:e6:a4:37:ca:a7:24:42:35:01:1f:9c:2c:94:30:74:7f:66:
         b4:bb:b3:4b:4d:20:9f:e7:e3:1d:f1:51:8c:af:4d:af:f0:28:
         58:82:90:52:5a:7f:3a:a3:5a:b8:20:ee:72:6c:5f:71:62:9c:
         7e:62:ba:8b:f6:20:a9:4b:4f:86:28:f0:b0:03:f3:86:69:69:
         2e:b2:c1:91:e7:5a:90:d3:49:04:33:68:6c:47:e6:d6:2b:39:
         46:62:ab:72:9a:8a:da:20:51:ed:eb:16:36:2a:fb:e7:ac:46:
         d1:7c:ab:30:b7:d4:b4:14:6a:9b:5c:b3:38:20:1a:5f:7c:98:
         f5:9d:3c:06:30:01:79:09:cd:1b:4d:17:63:12:9e:9f:55:36:
         fd:d6:09:65:54:d2:1d:3c:6d:2f:72:a2:bf:3d:71:53:83:f4:
         d9:44:fa:a6:c6:fb:67:90:3f:fb:06:8e:a1:2f:26:39:54:4e:
         2a:67:d9:9c:c7:0d:e7:23:8b:db:c2:6d:22:c0:d9:5f:06:11:
         69:d2:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:43 2024 by rpki-client on console-ams.rpki-client.org