Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa
File:                     4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa (raw, json)
Hash identifier:          3F8kLhOM99/idYUa2HG6bNiEXscEXYk+ZPoFpYaHBRs=
Subject key identifier:   CF:66:75:47:01:AD:ED:3D:21:C3:86:2F:2A:B9:03:AB:76:48:65:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585EBB25622885D0F2CF928
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa
Signing time:             Thu 14 Mar 2024 21:53:45 +0000
ROA not before:           Thu 14 Mar 2024 21:53:45 +0000
ROA not after:            Wed 12 Jun 2024 21:53:45 +0000
asID:                     15169
IP address blocks:        104.134.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:eb:b2:56:22:88:5d:0f:2c:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:45 2024 GMT
            Not After : Jun 12 21:53:45 2024 GMT
        Subject: CN=d25f36df-a7a4-41eb-9441-50e75debea2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:82:59:27:c5:28:a0:22:c8:b8:0b:cd:7d:
                    3f:de:13:7f:5b:f1:f7:de:10:3a:3b:ef:fc:f8:69:
                    45:a0:d4:91:01:a7:b8:5d:6a:e7:74:0d:47:70:96:
                    59:36:2b:b0:55:20:e1:ed:56:5a:10:72:07:88:f5:
                    8c:20:af:e0:c0:b0:5a:5c:12:0d:94:54:56:6b:b0:
                    e2:4f:1d:9c:82:67:c9:d4:56:6f:76:9c:77:51:2c:
                    d6:58:8b:1a:d1:ef:01:f8:04:f1:ea:83:af:0b:e6:
                    ba:34:16:c3:6a:b4:ed:da:41:d5:0f:84:76:fe:ef:
                    24:94:f9:a2:53:7d:d3:93:47:01:0e:ff:c0:c2:8c:
                    2b:5f:5b:ed:8f:25:81:ef:43:12:22:a0:52:b1:dd:
                    51:c0:fe:90:46:ef:6c:f5:3e:87:15:61:47:89:82:
                    82:15:b6:60:f4:4e:ce:fe:0b:84:97:80:f3:49:92:
                    df:88:92:05:b1:46:55:35:4e:e7:9a:69:2f:b2:42:
                    f4:dc:fb:23:f3:c1:2f:3a:65:e7:17:6a:da:8c:9c:
                    98:f6:88:a2:c6:af:1c:eb:dc:f1:c6:dd:3f:b5:e6:
                    43:11:9a:4f:15:f0:cf:80:fe:e2:86:6a:d4:fe:7b:
                    df:40:bd:25:84:9a:f6:13:bf:67:43:ff:9c:81:84:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:75:47:01:AD:ED:3D:21:C3:86:2F:2A:B9:03:AB:76:48:65:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:14:c8:56:84:60:6a:83:01:f7:61:b1:8c:2e:ae:ee:b8:
         66:f9:50:ae:61:6c:a3:e0:ae:fd:18:a0:98:e9:27:77:1e:d1:
         fa:cd:73:29:17:ab:b0:0e:7a:91:4e:5f:8a:40:49:70:10:69:
         98:ef:c9:71:4a:fc:7b:7a:3d:c8:cc:5c:04:64:a9:a5:3f:f4:
         4a:ee:83:d5:df:aa:2c:2b:3b:07:e5:de:5e:f0:72:13:95:38:
         cd:55:6c:d0:a5:d1:dc:1f:55:09:2a:b0:39:5f:54:1f:d3:01:
         5e:77:f3:09:e4:b2:3e:84:2e:4f:24:06:2c:fd:05:f6:d0:14:
         72:c7:d3:22:4d:77:fd:07:cd:09:c2:59:88:dd:25:7c:c9:10:
         49:c5:1f:a5:5f:a4:c6:aa:37:e7:9e:7f:e9:64:e3:ce:4d:d2:
         46:09:a6:2e:89:e0:97:99:ef:02:32:43:6d:3e:02:ca:13:32:
         cc:4d:81:99:c9:39:8a:a0:08:d1:f1:da:db:ce:c8:4e:39:34:
         dc:7f:ed:c7:25:1b:3f:fe:ab:94:1a:5f:6f:b3:61:9b:77:49:
         ad:2c:0a:22:ed:de:a6:94:0d:fe:1e:46:83:d3:36:a1:db:1d:
         ae:f5:0f:91:4f:6e:b1:8a:79:f8:1c:0d:6e:69:47:35:96:c2:
         6c:bd:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 10:23:40 2024 by rpki-client on console-ams.rpki-client.org