Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa
File:                     713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa (raw, json)
Hash identifier:          rZzXcqnVHeaLlsLCZ3ohbL8yW3nngyjatiDvy9LUmSw=
Subject key identifier:   B4:A8:2C:7D:A1:A5:E8:58:4B:04:BE:E4:4C:DB:03:C5:DA:5A:FC:79
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7BFCC21EF44012EB24680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa
Signing time:             Mon 18 Mar 2024 22:08:02 +0000
ROA not before:           Mon 18 Mar 2024 22:08:02 +0000
ROA not after:            Sun 16 Jun 2024 22:08:02 +0000
asID:                     395973
IP address blocks:        104.134.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:bf:cc:21:ef:44:01:2e:b2:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:08:02 2024 GMT
            Not After : Jun 16 22:08:02 2024 GMT
        Subject: CN=ed71610e-cb55-46b3-b909-8f2f5eb162f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:eb:0d:e1:ef:0b:5e:d8:64:4e:c7:c2:71:f0:
                    ff:e2:d2:07:da:03:35:5c:ab:ce:72:05:70:76:d7:
                    4e:b8:07:19:33:b2:b2:5e:c4:95:ba:8b:64:bf:c0:
                    47:26:15:9e:9a:c3:58:a7:2c:aa:4b:60:80:13:cb:
                    e4:39:fe:ed:51:ea:cc:b4:a3:4a:47:1e:c4:7a:6f:
                    92:44:90:9a:64:fa:8b:0e:dd:9f:fc:6a:25:c9:95:
                    a7:8c:a5:0d:5f:f2:7b:26:e1:09:47:2f:43:c0:42:
                    02:fb:c6:6b:eb:1a:20:9b:25:54:fe:a3:4b:8c:e7:
                    70:5d:4f:8b:17:13:ee:17:e5:d1:1f:1e:0f:be:72:
                    4a:55:8c:a7:00:51:09:59:70:4a:7e:8d:b7:f1:fc:
                    47:bc:f6:a7:e9:5b:1e:38:26:05:5b:e8:dd:0a:98:
                    87:68:d8:cf:6b:38:b1:7a:ca:c9:5c:c5:5e:47:14:
                    0c:7c:8e:01:66:2c:7f:59:cf:24:bf:ec:aa:6e:c3:
                    2e:52:8d:4b:42:7c:33:9c:40:52:49:38:d1:8c:3f:
                    69:e8:4a:4b:de:19:28:02:a5:b8:a5:4f:02:b7:73:
                    25:d5:9c:c3:a5:be:38:e4:57:5a:84:65:8e:69:6d:
                    d1:d9:c1:da:66:06:8e:75:84:01:32:4c:b3:22:db:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:2C:7D:A1:A5:E8:58:4B:04:BE:E4:4C:DB:03:C5:DA:5A:FC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e4:44:d5:91:db:a1:fa:38:9d:07:2d:b1:f7:74:27:9a:15:
         c1:47:66:24:06:d0:82:3b:2a:f7:6a:5d:40:b1:a9:90:fe:e4:
         53:19:04:4b:0a:fa:ee:fa:d5:53:e4:26:cb:0d:57:c7:54:f6:
         60:5d:d6:c5:99:7d:96:6c:c3:b6:18:7e:3d:d6:ea:0a:67:f5:
         f2:5a:ef:b6:1f:6e:a9:a2:37:ab:38:81:bd:b7:96:dc:dd:76:
         e1:f4:70:66:c9:80:87:99:dc:5e:db:37:05:32:8a:71:40:dc:
         0d:4b:56:82:52:3f:10:7b:b4:55:6d:c0:f2:10:51:01:0a:10:
         fa:13:4f:a7:b5:8d:4b:90:89:2f:44:79:a6:07:73:32:29:6d:
         c0:78:1a:7f:c7:e9:ca:f8:52:c5:89:4b:1c:26:24:ed:c8:02:
         cc:88:4d:14:af:e5:3e:ac:3a:e1:72:78:6e:3d:83:82:e4:45:
         7c:e1:18:1b:f2:e9:11:51:b3:f9:49:4d:51:37:cd:f5:05:a5:
         2a:54:3a:cb:69:34:a0:1b:69:1b:57:62:6c:c2:48:04:b1:d7:
         aa:94:8b:73:c2:5f:30:7d:45:c5:70:0a:c7:43:76:da:26:2f:
         71:7d:22:28:00:6d:d8:fa:64:bc:b8:5c:b2:2b:9c:f1:a9:a1:
         63:17:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:54:20 2024 by rpki-client on console-fra.rpki-client.org