Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa
File:                     823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa (raw, json)
Hash identifier:          Ld7XiUDlzJIfLrAdEZJIUdysiUqoUri3sfCs59T+cEo=
Subject key identifier:   16:C3:3F:F1:1E:FE:F4:AF:27:9B:8D:B8:8A:C1:CB:41:B0:CB:68:14
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847CFD4CC5CD3DADF9B42373FF0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     41264
IP address blocks:        104.132.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:cc:5c:d3:da:df:9b:42:37:3f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=adceb418-e0ee-4f45-94fa-9f87609a48ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:a0:64:88:e5:95:a2:69:6f:6c:4c:91:54:
                    82:2c:4e:49:01:30:95:21:0c:ba:87:ff:27:c9:55:
                    cc:18:31:d8:0c:7b:97:ff:49:2d:18:26:4e:3f:ee:
                    e7:cb:37:8e:5c:57:47:13:3d:1a:8d:e8:33:5e:05:
                    87:53:06:3d:ac:4f:f7:c9:1d:58:ed:fb:cf:45:3d:
                    7b:5d:47:c8:fa:f4:8e:8f:ba:59:54:21:f6:2b:fa:
                    20:8b:2a:ac:f1:69:f8:83:71:22:cc:96:73:83:17:
                    4e:d3:c2:4c:33:be:f2:53:a6:2e:da:aa:78:f4:e1:
                    8f:4b:e4:66:97:fc:37:7f:90:d1:bb:fa:0a:e7:54:
                    ee:c5:fd:46:1e:16:25:e6:00:24:35:d5:d9:3d:da:
                    ee:1f:33:71:fd:53:5c:dd:18:09:1a:80:8d:2b:94:
                    ab:9d:4f:ed:8c:6b:c9:e4:86:5a:e1:06:b5:01:1c:
                    1a:89:fe:af:13:6f:42:1f:68:e6:0f:78:79:78:4c:
                    15:3f:46:46:3a:20:40:0f:90:b7:7f:ff:40:d4:45:
                    c3:e9:28:dc:45:57:ed:10:03:d7:f3:c6:fd:1b:a1:
                    5d:df:28:e9:15:24:cf:69:0d:08:91:82:bf:b4:a5:
                    32:68:4d:c8:aa:83:9d:f1:1c:b8:ab:1d:46:f6:85:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C3:3F:F1:1E:FE:F4:AF:27:9B:8D:B8:8A:C1:CB:41:B0:CB:68:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:46:b8:b2:ca:69:b7:c5:6c:91:30:96:3f:d7:8e:cc:4f:
         61:48:8c:04:e0:7b:a5:f7:7d:0b:9e:12:17:15:6a:86:cc:0b:
         72:b9:a6:d2:46:e4:7b:e5:f8:69:f1:bb:e8:51:85:42:b8:f7:
         cd:d8:d1:61:dd:a8:66:46:2b:8c:a6:ec:50:f5:88:01:d9:23:
         ea:62:93:5a:1e:86:81:8b:8a:c1:c2:3c:a7:46:e3:ea:b0:95:
         5e:22:e7:e7:08:ba:01:a3:7c:f9:2c:76:e2:e3:d8:20:94:21:
         8f:a0:c8:65:ab:0c:23:f7:70:0f:c9:52:3c:41:c2:e3:1e:27:
         57:eb:d4:24:38:1e:c2:6d:a0:8f:4f:f7:04:33:67:52:11:6c:
         bf:72:e9:d4:55:34:71:0a:2c:c9:32:ab:8c:9f:7b:d1:55:74:
         87:9f:45:d2:41:2e:10:17:ee:d0:99:fc:fc:48:e3:fa:e9:64:
         1d:5c:26:b5:7d:ed:a6:d6:bf:62:b1:8f:d6:1f:89:77:12:79:
         7d:a3:64:32:c5:35:dc:23:d2:74:2d:3f:30:40:81:bd:c2:ca:
         bc:e4:02:67:a1:85:1d:fb:56:33:91:ea:0b:66:64:e6:4a:74:
         ed:1f:0f:38:ae:43:e1:65:56:c1:39:85:48:d8:a1:ef:39:ca:
         6f:1b:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:54 2024 by rpki-client on console-ams.rpki-client.org