Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
File:                     6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa (raw, json)
Hash identifier:          mSZaoccpqEi6XECL0ry/M0LsuC9DVQqYAXi0okKHMqs=
Subject key identifier:   74:95:08:5A:05:F1:7B:E5:A7:EC:80:52:78:D5:A1:28:28:00:E2:52
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858455F045D49FEC7CC5F573A5680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
Signing time:             Fri 29 Mar 2024 18:36:40 +0000
ROA not before:           Fri 29 Mar 2024 18:36:40 +0000
ROA not after:            Thu 27 Jun 2024 18:36:40 +0000
asID:                     41264
IP address blocks:        104.133.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:04:5d:49:fe:c7:cc:5f:57:3a:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 29 18:36:40 2024 GMT
            Not After : Jun 27 18:36:40 2024 GMT
        Subject: CN=8e11263a-c6cf-40d6-abd9-4dc6bb3294f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:07:3b:69:57:0e:f6:99:43:b5:87:3d:ee:
                    b6:a5:0c:1d:f9:c1:79:cb:6a:e5:9d:10:58:35:5b:
                    9d:a7:89:dd:19:0c:f2:08:31:1d:11:f2:43:18:19:
                    7d:eb:6f:3c:bc:61:72:8a:96:cd:f4:9c:8f:6a:7b:
                    40:46:bb:22:2a:28:b5:3d:40:0a:7b:d9:c6:2c:28:
                    b6:fa:a5:fe:4e:02:d6:fd:28:f9:ac:71:23:3c:e8:
                    8c:6c:ba:49:a5:49:1b:0d:f1:a4:ff:65:c6:56:d6:
                    da:ff:c4:e3:e7:a9:e0:69:3e:a6:fe:ed:29:00:3f:
                    09:42:31:16:a6:a2:17:92:8a:3c:6c:4a:c7:23:02:
                    3d:07:9b:de:6b:d5:78:fc:24:a3:52:d0:2a:10:f3:
                    47:b4:ab:23:21:3e:11:34:55:33:13:68:e0:e1:75:
                    30:5c:d5:fb:63:c8:f7:e9:a5:dd:94:84:fe:ae:18:
                    7b:33:8c:d0:f7:6d:dd:c6:88:51:e1:ad:c2:13:cd:
                    02:9e:dd:56:dc:af:8a:bb:3e:be:98:3d:ed:c3:fb:
                    2d:37:04:b5:43:a0:14:d5:3a:b9:9a:0d:2c:ef:48:
                    89:2a:89:a0:ab:e1:ee:58:60:dc:da:0b:96:da:21:
                    d1:d9:7c:6f:6f:55:8c:24:f2:9e:ed:a4:ad:68:0a:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:95:08:5A:05:F1:7B:E5:A7:EC:80:52:78:D5:A1:28:28:00:E2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:14:88:45:af:43:98:b2:a2:49:9f:c5:57:9d:9a:6e:78:
         b7:63:16:0b:3b:bc:38:cf:94:14:e7:3b:5c:42:17:59:da:d9:
         94:f7:bd:a4:74:cf:6b:42:eb:16:b6:f8:5d:b5:04:ac:c6:88:
         65:0f:f6:5c:72:36:b9:5c:2d:9f:fc:c1:ef:c8:34:88:d5:3d:
         cb:d0:14:aa:85:ef:a2:a7:55:ad:70:77:be:34:53:a2:7b:68:
         8c:72:13:ed:c9:c6:5c:9b:7a:6d:23:b7:48:a7:d3:25:af:0d:
         0d:1f:21:2c:83:29:bc:14:a4:5f:f0:a3:7d:d1:b2:61:7c:b8:
         04:af:4e:1c:7b:84:b1:43:53:82:e2:d2:4f:21:8c:a6:16:cc:
         65:9d:73:22:43:38:18:49:92:b1:3b:17:1b:65:1f:e3:72:da:
         3f:de:13:a6:e3:27:aa:bb:c4:6c:f3:fb:e3:57:8c:7a:f1:4d:
         6d:3b:3f:7e:23:89:94:bc:47:d9:42:6d:ef:94:fd:9d:af:91:
         2f:5b:9e:44:9d:bd:b8:84:05:14:4f:43:ad:10:5e:21:6a:f7:
         7f:fd:51:b4:30:96:7f:43:39:55:67:91:30:6c:39:52:8d:6e:
         40:31:4e:70:69:a4:f5:b3:89:8a:cb:58:87:87:a5:e7:d2:d8:
         7e:fb:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:42:34 2024 by rpki-client on console-fra.rpki-client.org