Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6caed07d-1d1f-3d1d-aa8e-e435db3cdd26.roa
File:                     6caed07d-1d1f-3d1d-aa8e-e435db3cdd26.roa (raw, json)
Hash identifier:          0A8nuz2Bbipk6caewpxaKVVGbANfWl6CutRSs7lEkDE=
Subject key identifier:   19:7F:D3:AA:DE:E0:6C:ED:43:02:FC:43:CE:31:9B:35:EC:38:71:7B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094F1CE107B05F8758E3280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6caed07d-1d1f-3d1d-aa8e-e435db3cdd26.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f1:ce:10:7b:05:f8:75:8e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=daad4a5a-1cee-4bfa-8e51-52d0ada3def7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:95:06:9b:83:8e:f9:d0:45:12:6b:b9:6c:
                    8d:a5:4c:e4:28:df:9d:dc:80:16:7a:3e:9f:61:ef:
                    e1:a9:4a:d4:3e:3c:f8:92:6b:b7:d7:da:c3:6c:6e:
                    15:bd:65:01:b0:57:fb:e8:4d:a6:63:ff:86:47:1f:
                    ae:0d:19:6b:16:87:97:d5:46:17:de:16:74:10:89:
                    9b:65:64:40:da:3b:b7:e2:e4:dd:2b:e9:12:79:56:
                    af:d2:3c:bd:b0:25:be:d6:43:2c:57:20:a0:7e:c2:
                    c3:0f:ed:d3:28:f5:49:0a:36:e0:a7:54:c9:55:11:
                    8e:50:ac:54:67:88:3a:e3:c8:40:bb:60:97:6a:43:
                    7a:7d:67:9f:df:36:ae:59:01:93:11:cd:35:c5:d3:
                    31:f2:72:bc:94:2c:a2:ff:d0:59:97:c0:29:c5:8e:
                    fe:e4:2a:dd:d6:aa:bc:1a:2b:91:ae:d2:f7:7b:43:
                    af:49:ad:f9:29:6a:04:d5:5a:85:f5:bf:75:66:a5:
                    59:96:98:2f:c1:d9:8b:f9:24:c0:03:13:8c:7a:06:
                    44:c4:0c:ad:e3:ff:e9:c1:61:eb:6a:c6:20:18:c7:
                    ab:a6:e6:7b:2e:f4:d5:9c:79:65:bc:e6:49:c9:32:
                    f0:71:b8:bb:58:f5:94:4d:8a:d4:3b:d3:3b:1e:86:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7F:D3:AA:DE:E0:6C:ED:43:02:FC:43:CE:31:9B:35:EC:38:71:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6caed07d-1d1f-3d1d-aa8e-e435db3cdd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:3d:72:02:7d:48:cb:48:b9:55:d6:a7:fa:2c:03:c6:fa:
         8d:1c:5d:d9:38:b0:ef:c3:b3:97:23:f2:b4:a3:73:fd:bc:60:
         d3:87:44:f4:d0:58:ff:fc:9d:d9:6c:81:da:a8:cb:ec:35:7b:
         31:13:f3:1a:a3:c1:5e:71:46:64:79:4b:d5:e5:f0:d7:e6:5a:
         93:80:c3:99:28:03:e3:2a:68:2a:ca:e2:ae:85:5a:82:92:16:
         61:bd:46:a2:97:6d:46:8f:2c:26:de:18:da:81:88:3c:fb:68:
         54:86:7d:d5:67:1e:83:6b:34:5f:41:72:cd:1a:ef:f0:f0:b3:
         be:9b:18:46:8f:12:c8:99:97:33:9e:07:38:d7:f4:56:27:f0:
         5b:89:72:5e:54:5b:86:e6:d2:69:4c:55:9b:63:e4:11:92:09:
         a5:4e:21:b9:e9:f7:7e:de:38:2e:71:13:88:2e:76:3b:a0:07:
         56:83:b6:8c:10:f6:87:6f:a7:a0:ba:aa:d5:20:de:55:4a:15:
         c5:3b:0b:aa:ad:ef:18:dc:c0:c0:32:b5:c6:a7:63:a7:3f:2a:
         ac:33:5b:a9:e9:44:78:f4:ba:88:2d:b8:7e:f5:ec:28:dd:74:
         f1:30:2b:fc:ab:67:65:30:0e:15:e7:a9:9d:9b:5a:d9:29:8d:
         09:53:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:44 2024 by rpki-client on console-ams.rpki-client.org