Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/701bbccb-a0e2-33f8-a2f8-105ae7199914.roa
File:                     701bbccb-a0e2-33f8-a2f8-105ae7199914.roa (raw, json)
Hash identifier:          NQh6HFQRHiV/KmMx7nW/YdHP8oaGW1se0UCjfmBrbro=
Subject key identifier:   2E:55:85:49:89:AC:A3:6A:CE:78:63:6F:9F:EA:6F:EE:6B:6D:21:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584C11BEB3CD9A2726879A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/701bbccb-a0e2-33f8-a2f8-105ae7199914.roa
Signing time:             Thu 14 Mar 2024 21:51:24 +0000
ROA not before:           Thu 14 Mar 2024 21:51:24 +0000
ROA not after:            Wed 12 Jun 2024 21:51:24 +0000
asID:                     15169
IP address blocks:        104.134.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:c1:1b:eb:3c:d9:a2:72:68:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:24 2024 GMT
            Not After : Jun 12 21:51:24 2024 GMT
        Subject: CN=0ad24222-e6f6-4cd3-83d2-97acafc35b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:9a:5a:3d:72:d1:8b:bd:80:66:ea:d8:9f:
                    86:dd:8c:86:ab:7d:d9:ec:f9:34:b0:7d:4b:d3:9f:
                    a7:18:ab:bf:85:bc:8d:b7:27:b6:1c:b1:52:67:d3:
                    28:70:21:54:1c:2e:35:3a:68:b1:2b:25:68:c2:f5:
                    9f:ed:a8:1b:9b:1d:a0:04:cb:73:26:84:a1:63:d3:
                    a9:e8:25:bf:2b:b5:5a:68:66:08:b9:f6:2c:fd:ab:
                    23:86:c1:de:bc:3f:88:d8:9a:f0:30:35:b3:ec:51:
                    23:97:70:a5:80:9e:c5:51:2b:9f:be:a3:11:69:d2:
                    8b:fc:29:82:87:04:65:fa:aa:a1:3b:8c:6a:b5:6e:
                    1a:1f:ba:dd:90:1b:2d:e7:7a:e3:7f:e9:f7:66:2d:
                    43:63:5f:f2:ff:a4:88:a7:0f:20:04:d3:58:13:fd:
                    ba:55:84:45:92:89:3f:9d:a0:d5:eb:07:5b:5a:26:
                    84:de:32:35:3a:21:91:b6:b5:09:ba:28:a7:3a:ca:
                    29:cb:cc:5b:55:89:03:e0:05:18:90:0e:cf:55:6b:
                    2f:d9:ae:3d:78:ee:98:3f:41:b6:f7:fd:12:be:10:
                    95:04:fa:11:ac:43:17:6d:43:21:f9:d9:46:ce:44:
                    28:7b:4d:9f:e1:0c:0f:9a:d8:be:40:69:19:57:27:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:55:85:49:89:AC:A3:6A:CE:78:63:6F:9F:EA:6F:EE:6B:6D:21:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/701bbccb-a0e2-33f8-a2f8-105ae7199914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:75:27:23:27:3c:6a:2b:78:b1:59:d6:2b:8b:6d:76:46:
         b9:04:40:81:dd:43:12:bc:73:f0:9a:85:e8:2b:fe:6b:a8:cb:
         68:09:1c:19:4d:8f:ab:a7:64:76:bd:2a:9d:d5:0d:32:38:99:
         92:9a:87:e3:c0:0b:42:d2:5d:5d:65:e4:fc:db:5a:9f:9d:91:
         99:e4:b3:3b:de:f6:99:67:20:15:8a:8d:5a:c8:91:61:fc:93:
         14:b9:ea:7c:dd:51:fc:34:cd:13:fe:7b:61:06:d9:95:61:a8:
         36:23:cf:81:d9:f0:fb:5f:0e:d5:fe:74:dd:da:29:12:57:e1:
         89:aa:f4:c9:a2:a1:aa:cd:08:44:43:f3:56:bc:ed:3f:71:6d:
         b3:80:71:bd:ab:9a:f3:65:f2:04:e2:96:a0:22:13:00:4d:29:
         07:d7:69:3a:3b:bc:d2:c5:e3:3a:94:ac:e9:15:a7:bf:05:29:
         16:c4:c6:80:8c:2c:26:3d:dc:b1:d6:4d:72:82:cb:3d:a3:34:
         16:06:4b:ea:dc:27:81:29:bc:ce:96:a2:9f:86:70:8b:47:c3:
         bb:30:1e:d8:54:de:7a:25:2a:55:34:79:d4:f1:e6:d1:b9:65:
         bd:85:a2:d4:dd:25:e3:93:72:53:f4:47:31:2e:35:a9:b7:92:
         c3:2a:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:24 2024 by rpki-client on console-fra.rpki-client.org