Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa
File:                     4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa (raw, json)
Hash identifier:          9OWFwpu7aXpmuvuGfiY6oWSpinL5bkiRtw+CREXaCag=
Subject key identifier:   08:3F:FC:C3:AA:3B:EF:57:DF:BD:68:48:03:09:F3:F9:E4:2E:60:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E42595F2BDA4C0A85AC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e4:25:95:f2:bd:a4:c0:a8:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=1af855f1-0741-4481-8406-a2a57c99ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:70:29:e6:f9:bf:a9:a0:6b:06:ce:6b:af:
                    38:87:af:c1:71:0d:d9:43:31:73:f6:87:37:1d:dc:
                    e7:71:53:86:91:e0:cf:f1:2a:b6:00:5c:ae:03:63:
                    65:e7:17:00:40:0a:99:29:d4:7d:3f:49:b3:af:ef:
                    bd:01:1a:87:78:0a:f8:20:33:84:a7:57:59:6a:4a:
                    93:41:15:a7:a5:92:02:f9:f5:e4:04:c9:48:9d:1c:
                    a1:45:bd:60:3e:e8:d5:86:74:d8:8a:1f:d0:ce:dc:
                    3f:ad:bf:d0:57:3d:7a:b8:7e:4c:51:8d:4d:95:c8:
                    a7:24:dd:94:8f:2b:5c:30:04:c9:14:e3:53:19:32:
                    b2:40:3c:fe:71:f4:89:32:15:6a:01:2d:68:65:11:
                    d1:7a:b7:64:b8:3a:aa:e6:d9:59:ed:4a:3c:f1:4b:
                    be:bb:ae:0e:94:fb:1f:97:6a:65:36:8e:28:06:9a:
                    75:1f:a7:c1:1a:c9:12:e0:e2:c0:f9:fe:84:da:fa:
                    a9:83:4b:05:6d:30:5a:fa:ff:44:17:14:22:07:c5:
                    e9:81:0e:25:ff:dd:60:fd:bf:df:df:43:23:aa:8d:
                    5c:55:68:f9:80:b9:6c:2f:48:60:55:62:3d:4d:06:
                    c2:dc:a1:47:c9:de:03:3b:69:20:3a:1a:51:73:81:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3F:FC:C3:AA:3B:EF:57:DF:BD:68:48:03:09:F3:F9:E4:2E:60:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ca:d2:4a:38:db:82:d0:99:11:fe:a1:36:88:f4:29:4b:0a:
         b3:e7:dd:a6:f4:84:f3:2b:09:f6:7e:0e:49:1f:fa:f1:46:be:
         43:d2:9b:b4:00:af:7e:da:40:c8:fd:1b:ec:4c:bd:db:97:c1:
         4d:b2:93:94:bc:b8:25:44:7f:4a:3f:42:17:e0:a5:26:a6:ef:
         29:b8:95:2e:78:66:2f:80:bd:bc:1e:81:c7:92:35:0d:62:d0:
         32:64:36:0e:46:ab:f5:07:a3:fd:7d:86:87:44:dd:32:0a:d9:
         29:79:5d:84:b0:30:92:8f:85:a2:d1:f8:19:2c:b9:7a:97:ee:
         e8:3e:dd:43:7c:85:d6:9c:e2:39:59:9a:9f:8a:f2:1d:82:7a:
         d3:2f:91:8b:76:51:4b:1f:05:09:08:ef:c6:58:c7:b7:e3:42:
         37:5a:ce:a9:89:ac:c3:a9:64:fc:f5:e5:5b:96:37:f7:2c:be:
         ab:77:2b:fa:cc:33:77:9a:9c:53:80:e0:48:62:47:c8:4b:55:
         f1:86:44:f0:d8:a1:a4:6d:1f:9e:43:a8:e2:74:3e:a7:9e:29:
         2b:4d:ce:7b:0f:cf:cf:c8:60:c8:12:ab:d1:ea:2c:10:95:d3:
         95:3b:21:f1:82:eb:d2:41:5c:16:ec:19:cc:21:36:be:01:88:
         84:e1:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:33 2025 by rpki-client