Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa
File:                     5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa (raw, json)
Hash identifier:          DpaR1j8yp1IdrPyT36+L5tknuaTWIH9XubFBRiuNlok=
Subject key identifier:   E6:A4:22:08:0A:07:1F:1A:AE:5D:29:25:B1:70:B1:36:57:06:29:6C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B71A33D4F105DB63F70780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa
Signing time:             Mon 18 Mar 2024 22:06:44 +0000
ROA not before:           Mon 18 Mar 2024 22:06:44 +0000
ROA not after:            Sun 16 Jun 2024 22:06:44 +0000
asID:                     395973
IP address blocks:        104.134.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:1a:33:d4:f1:05:db:63:f7:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:06:44 2024 GMT
            Not After : Jun 16 22:06:44 2024 GMT
        Subject: CN=034e585d-cdad-4301-8d38-3078aeec1d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:db:37:23:8d:44:dc:81:df:e7:fa:b6:c9:ca:
                    51:d3:97:8c:03:f9:1a:ef:a4:6e:e2:c3:67:70:b9:
                    9a:34:7b:47:ea:b4:0f:d9:3d:35:f2:97:65:9b:90:
                    77:dc:9f:3b:bc:3b:13:60:a6:15:64:a7:7d:36:31:
                    48:fd:1e:db:68:a6:81:69:b1:b9:17:3e:50:08:e8:
                    eb:0b:78:fc:d0:ba:ed:6f:f3:3e:26:f4:9a:36:37:
                    79:de:da:60:4f:53:aa:a9:25:10:94:5d:35:ec:eb:
                    d8:3a:1f:c4:44:ef:51:39:75:0b:2c:57:8d:48:9e:
                    c6:5d:d9:c5:44:5b:70:7b:00:69:b0:88:5f:f1:db:
                    cd:09:bc:63:79:2e:76:d9:a4:fc:07:fc:1e:13:b8:
                    08:56:26:33:64:63:e8:e1:1b:8a:65:c9:3d:a0:1d:
                    27:4e:3d:41:33:2c:46:a9:28:6e:5c:83:bd:f2:36:
                    f8:ca:be:77:d6:7e:af:29:7d:ac:15:4b:ba:17:d6:
                    53:12:64:1b:79:47:b8:2c:02:cc:65:13:bf:7a:9d:
                    9b:85:4d:02:8b:f9:65:d6:fc:47:e4:9a:86:ec:bf:
                    bb:58:e4:f1:47:9a:36:bb:66:be:87:a1:a3:9e:a8:
                    d9:47:2a:ea:f9:8f:3a:25:74:5c:dd:ec:74:ff:0f:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:22:08:0A:07:1F:1A:AE:5D:29:25:B1:70:B1:36:57:06:29:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:97:01:f6:b3:32:d5:b4:12:c8:c6:49:2a:b9:93:2e:9b:e6:
         d8:58:02:d9:f1:27:4f:58:c6:28:68:af:5d:bb:aa:bc:dd:5e:
         68:c5:14:74:0b:12:27:7d:c0:07:ca:f4:c7:35:71:ea:3c:cf:
         9e:7a:6b:1d:07:39:ae:94:7a:38:80:2d:f8:fa:9d:8f:63:de:
         f6:76:35:8a:60:cf:a4:d5:d4:90:65:fe:c9:51:7b:cf:16:b1:
         2c:cf:f5:c5:46:fc:b8:e8:19:91:ba:f0:f5:8e:73:55:7f:24:
         f9:9b:d8:33:e9:2a:58:00:92:12:31:f5:ef:71:3a:b8:3c:cb:
         a8:02:a1:56:7c:f6:7e:56:df:8e:de:7d:62:80:00:bc:76:06:
         5f:a0:f4:dc:57:9c:f6:32:5d:a4:ba:0b:45:68:a4:9b:c0:cf:
         e4:24:18:51:6c:0b:4e:6d:89:ce:26:72:25:68:42:ae:12:a1:
         ed:79:85:01:6c:28:84:e9:dc:49:d3:56:3a:b5:ca:86:a4:10:
         48:d9:eb:88:38:3e:59:cc:b1:dc:c2:03:d0:f5:a3:3b:40:3a:
         d6:68:1b:e6:8f:0e:0a:a3:e6:7a:75:20:ac:89:30:f1:ae:58:
         7e:0a:19:53:b0:fa:20:9f:11:12:0d:90:11:2a:1b:09:eb:c4:
         71:a1:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:28:18 2024 by rpki-client on console-fra.rpki-client.org