Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
File:                     8247a5ea-22ad-3fea-afa9-0b471461850c.roa (raw, json)
Hash identifier:          5ndTzyzv0CKQrI3ECyPzyb5VWRZNu6uUdfu8PNlu0Lg=
Subject key identifier:   47:E0:3C:01:5C:00:D8:F8:B3:47:93:EF:B8:01:AF:92:4D:B6:66:42
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585B8D6BC197B429A8A2D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
Signing time:             Thu 14 Mar 2024 21:53:21 +0000
ROA not before:           Thu 14 Mar 2024 21:53:21 +0000
ROA not after:            Wed 12 Jun 2024 21:53:21 +0000
asID:                     41264
IP address blocks:        104.133.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:b8:d6:bc:19:7b:42:9a:8a:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:21 2024 GMT
            Not After : Jun 12 21:53:21 2024 GMT
        Subject: CN=b077a17c-98f0-4966-8319-ad71fafc12c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:be:9a:db:e4:a2:3c:2c:a3:f7:87:78:a2:
                    71:3a:69:07:77:3c:db:e5:67:e1:df:00:a5:97:20:
                    ae:8e:2c:16:06:39:96:5f:17:85:d3:9c:d7:18:72:
                    65:90:dc:02:79:68:11:a5:ca:92:08:38:52:ab:52:
                    23:2b:89:b6:5a:27:cc:d4:53:27:a1:30:4b:c3:80:
                    02:13:62:af:88:a9:32:f1:db:08:42:76:92:7f:0b:
                    00:20:33:3c:69:ed:3e:80:22:8f:81:0c:73:78:a4:
                    c6:86:3e:a3:41:20:66:d5:e8:2d:54:a9:c3:19:16:
                    80:9a:1c:8f:73:3a:fa:98:40:46:af:03:91:44:b0:
                    ec:5d:ff:2a:dc:05:f8:c2:a6:62:7a:8e:a4:03:54:
                    7c:d7:46:6e:19:e3:ed:e0:b2:86:c1:6c:15:9b:48:
                    9b:95:f5:6d:bc:d7:b7:24:7c:35:f5:c8:d2:48:14:
                    df:71:7b:4e:fd:17:c9:f8:b1:07:b6:fd:e1:0e:62:
                    48:a4:82:7f:cd:c3:d9:f6:b0:7b:db:68:20:f2:76:
                    09:6c:d8:33:df:50:c0:b6:68:7f:cc:d1:ac:41:88:
                    f2:2d:66:fa:17:fb:44:27:54:14:a6:74:70:d7:11:
                    ed:80:68:02:2d:dd:26:14:9f:cf:a3:2f:47:01:a3:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E0:3C:01:5C:00:D8:F8:B3:47:93:EF:B8:01:AF:92:4D:B6:66:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:bb:cc:3e:f0:c0:6d:a0:70:2c:32:26:3d:80:30:e4:49:84:
         75:89:32:84:90:18:2b:23:71:31:3a:d3:ff:79:a2:4b:3d:d9:
         c1:dc:8e:26:76:11:f3:92:e1:24:0d:37:05:0f:47:b9:37:eb:
         de:ed:dd:f0:11:e7:0b:34:d0:fe:d7:07:0f:04:e2:20:55:ad:
         02:bf:82:01:ff:58:ac:8a:60:4f:8e:be:22:2a:2c:b0:b8:81:
         d7:3c:c8:c5:99:2d:70:75:29:9c:93:7e:33:d7:d5:8f:02:4e:
         55:fc:86:21:5f:19:f8:26:9f:de:3f:e8:80:91:8a:1c:a6:16:
         d2:f1:b8:8e:18:c5:78:c5:63:53:39:5d:fa:ec:09:52:f3:1a:
         9d:9a:0b:72:1c:da:e9:58:9b:54:46:12:22:9c:66:33:ed:a5:
         30:1f:4f:73:aa:8b:95:28:78:5b:0f:02:c2:a0:57:fb:7f:18:
         c3:c8:91:f4:88:d6:4f:bb:1d:58:04:06:29:3e:7c:5c:11:92:
         d3:af:de:ff:b8:cc:8b:e6:94:28:e7:23:7b:e5:ce:90:90:d0:
         37:1c:96:79:99:69:68:75:e6:84:de:be:e6:e6:00:f4:18:e0:
         cd:e3:c1:48:17:0c:3f:c5:46:a0:fa:65:c9:94:73:74:23:f9:
         85:23:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:25 2024 by rpki-client on console-fra.rpki-client.org