Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83225254-2c2c-3295-9f11-cff68906b06c.roa
File:                     83225254-2c2c-3295-9f11-cff68906b06c.roa (raw, json)
Hash identifier:          Idh15Ovo7UmCWJ7QxeKZWlYUOim6z8VeTXH40U8djWk=
Subject key identifier:   95:0C:29:D0:36:11:94:8D:A9:83:E6:A0:83:AD:45:26:D6:73:5E:D6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094EEE0D77D2F066BE82820
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83225254-2c2c-3295-9f11-cff68906b06c.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ee:e0:d7:7d:2f:06:6b:e8:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=87e1613f-5eb9-4c1c-b341-ef9b11f36fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:65:a6:a7:ae:c5:04:80:0a:1a:d9:2a:fb:
                    72:a3:1e:80:36:a2:1e:2a:a6:2b:0b:00:48:05:71:
                    1f:46:5c:02:81:79:cc:e1:95:bf:f1:8b:74:2f:e8:
                    28:35:61:58:ca:b1:3e:c9:c8:66:38:ad:ad:dc:5e:
                    6d:d0:b5:ca:84:00:8a:10:01:da:d2:1c:85:e5:87:
                    dd:28:8b:6f:1b:cb:ad:66:7d:60:1f:ee:c3:cd:1f:
                    4f:8d:44:76:24:6c:04:cd:be:34:66:71:57:c2:6e:
                    0a:0a:88:c6:98:a4:ed:ca:27:c3:07:3a:8c:34:b6:
                    16:00:d9:5f:1f:b6:e9:c1:6c:4a:ae:4e:80:ed:75:
                    87:7c:ec:eb:38:05:66:e1:f2:17:0a:42:c0:70:f4:
                    79:e7:c8:ff:fe:e1:ab:b8:10:85:10:7c:07:92:33:
                    a6:aa:dd:53:a8:25:29:95:d1:51:cc:26:be:98:3c:
                    76:bb:e3:06:c1:2e:ac:a3:42:0f:02:7f:b5:c4:49:
                    3a:b0:33:78:64:f4:64:66:81:34:45:0a:a4:54:e2:
                    7a:81:20:b9:ba:7e:b1:24:52:eb:e8:01:0c:21:f6:
                    f8:2f:97:13:de:0f:68:3d:ae:cc:a8:7e:23:f9:55:
                    a7:66:46:16:6c:2c:fe:36:75:94:7a:35:f5:f4:c8:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:29:D0:36:11:94:8D:A9:83:E6:A0:83:AD:45:26:D6:73:5E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83225254-2c2c-3295-9f11-cff68906b06c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:bb:49:26:54:e3:65:eb:90:ba:03:dc:22:17:24:7d:18:
         11:12:5a:73:df:e2:28:b1:40:72:c4:6c:4e:e8:b3:47:c9:bc:
         f9:c9:d5:7b:f5:4c:20:37:1d:c4:7b:2b:b9:7a:34:5d:f9:9c:
         15:59:93:ac:c0:61:19:10:5b:e6:c2:c4:54:42:91:0b:13:45:
         bd:85:f8:2c:7c:3e:5c:53:75:4e:c5:21:df:6d:00:36:60:b2:
         86:ee:e5:eb:81:a4:67:33:d1:c6:39:e7:19:6b:99:24:b5:0c:
         8d:61:26:0b:60:a9:dd:6f:ad:4e:43:ca:75:b1:30:46:e1:a3:
         53:94:03:4e:4f:ad:15:22:ca:c3:47:68:e1:f3:ce:78:bc:72:
         a2:72:9a:d5:ba:1c:b4:07:2b:26:d4:fb:08:cf:d0:67:e2:ea:
         a9:e0:96:42:46:e1:e0:eb:c2:44:96:9c:b4:11:bf:a0:6b:0d:
         62:c6:60:76:f4:a5:64:74:46:69:66:74:b0:ba:2f:f7:ba:c8:
         21:f6:fa:38:1c:f2:6b:31:55:ea:d8:9d:51:25:c2:6c:61:e7:
         a6:b9:64:5e:ee:d8:9a:fc:b3:6f:3d:55:e6:2e:90:72:95:a6:
         14:ad:63:e9:04:c7:b0:f1:e8:1a:66:63:4f:e3:89:25:3c:07:
         64:2e:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:21:27 2024 by rpki-client on console-fra.rpki-client.org