Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/795395b3-199e-35b9-921a-0f5c630f2d7b.roa
File:                     795395b3-199e-35b9-921a-0f5c630f2d7b.roa (raw, json)
Hash identifier:          V8I9TevOjkTNYEo+yhSTCLPQloMsX7mLaGO8nh0CrDM=
Subject key identifier:   AF:C8:F2:FE:A3:08:CD:67:18:E4:52:A7:FA:F7:94:B5:82:F1:61:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B616F4002C317793A5D840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/795395b3-199e-35b9-921a-0f5c630f2d7b.roa
Signing time:             Mon 18 Mar 2024 22:04:42 +0000
ROA not before:           Mon 18 Mar 2024 22:04:42 +0000
ROA not after:            Sun 16 Jun 2024 22:04:42 +0000
asID:                     15169
IP address blocks:        104.134.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:16:f4:00:2c:31:77:93:a5:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:04:42 2024 GMT
            Not After : Jun 16 22:04:42 2024 GMT
        Subject: CN=c365728b-e19c-447a-8591-504003189915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:c7:ad:20:fa:d8:fa:09:1e:f0:8d:fd:7a:
                    c4:99:c6:84:f3:43:2d:25:f4:ce:dc:39:09:61:d8:
                    c8:cd:a0:63:f2:c0:29:90:67:b0:96:76:1d:4a:97:
                    61:e0:f0:70:ed:da:36:65:16:4b:93:3a:0e:9c:80:
                    1c:9b:62:90:de:dc:fd:30:ba:45:08:45:49:c6:1d:
                    57:f4:52:9a:6e:87:9a:58:1e:d7:2c:ac:ce:b1:60:
                    73:81:11:ef:19:aa:b3:c8:ac:7d:f8:42:38:8a:ca:
                    94:d8:54:b3:c7:fb:7f:4d:c7:72:6c:76:93:8a:66:
                    3c:e8:58:0b:82:50:ea:16:a8:93:af:04:d7:b1:64:
                    43:89:5f:36:7b:c5:c9:29:fe:1b:23:7b:67:70:87:
                    bf:73:6c:3c:bc:70:1d:05:84:4e:3e:9b:ae:ff:74:
                    dd:38:19:f2:32:c8:40:4a:07:9b:db:8f:0b:1f:a6:
                    ef:fa:ee:8b:0d:2c:28:a2:fa:f4:49:af:92:83:af:
                    96:40:a3:4e:b4:f8:a7:2a:f5:3d:f4:48:15:d8:b6:
                    3e:c6:aa:e1:fa:e1:8f:25:2a:5d:8d:69:8c:da:7a:
                    cd:33:18:f9:65:71:97:5a:98:6b:9e:01:e5:9e:ec:
                    84:1b:df:b5:d5:cc:18:d1:47:cd:e5:f3:49:20:b4:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:F2:FE:A3:08:CD:67:18:E4:52:A7:FA:F7:94:B5:82:F1:61:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/795395b3-199e-35b9-921a-0f5c630f2d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:a7:92:28:4e:1b:1b:d6:33:1e:8d:b2:c3:64:4a:66:9f:
         14:26:18:dd:7f:b2:5b:01:25:92:17:ae:08:0f:48:2c:a0:92:
         1d:be:bd:ac:7f:41:e7:59:2b:ec:40:f4:7e:c2:95:e5:ab:fb:
         ce:39:89:c4:9d:df:74:6c:7b:4e:c3:2b:7b:ca:04:25:96:e5:
         57:83:66:3a:4b:4a:c7:f7:9f:17:9e:8c:9c:20:db:be:f8:0c:
         56:41:99:fd:cd:44:3a:8d:21:65:61:be:75:87:b8:b0:7c:91:
         11:10:0c:1a:ec:e8:18:4e:75:8a:f0:7c:2d:d8:87:30:0b:8c:
         28:b6:3a:0c:fd:31:73:95:d2:88:26:a0:89:14:eb:7c:d1:ba:
         9c:be:4f:ea:c1:32:01:ae:ae:10:96:b9:a9:96:9b:f0:49:57:
         49:f5:54:8c:34:5f:3b:9a:31:69:f9:a9:35:3d:3e:fe:bf:06:
         1a:c9:aa:eb:23:f3:3e:fd:aa:06:4d:0a:ea:86:c7:06:ec:36:
         c6:2c:bf:8c:f3:5e:fd:b6:d1:8f:a1:66:21:c0:98:36:d1:a5:
         3f:c0:c3:a6:06:5c:63:bd:f1:8a:20:a1:3d:38:c7:09:e6:00:
         69:e9:dc:d6:96:de:6f:ca:3d:29:dd:35:65:42:58:d7:75:b5:
         76:1c:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:42:35 2024 by rpki-client on console-fra.rpki-client.org