Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa
File:                     8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa (raw, json)
Hash identifier:          C4qlcudfi4dJhQ6yyv81NehL5N4rUg/8Am0tx2AvQzs=
Subject key identifier:   FB:49:38:31:78:72:75:6C:92:E5:F1:43:EA:6B:74:EA:49:70:CB:9E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D29F81044A048AC5C18510C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.132.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:81:04:4a:04:8a:c5:c1:85:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=28552e25-0dd8-4c1a-8c05-69b6f94582a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:19:ca:6d:74:4e:63:33:57:74:ed:c0:15:
                    57:7e:b4:ed:c7:77:e0:55:c0:09:15:6d:57:09:26:
                    60:c6:4f:a3:6b:dd:b7:53:9f:bf:64:ba:4f:f5:32:
                    2e:37:e0:dc:8d:25:1b:75:1f:be:88:5c:21:e7:db:
                    35:c6:67:46:e3:d6:29:b3:ce:96:e9:ca:c5:c3:db:
                    a1:c9:6e:ad:cd:55:77:c8:f8:22:8a:14:24:55:b7:
                    ef:6a:4e:cd:83:45:e0:d4:1c:d4:fa:cc:0a:70:b4:
                    99:a8:41:73:4c:ed:70:58:1f:e6:16:e4:84:e4:64:
                    f7:12:4b:55:79:77:7c:ce:72:82:25:53:2d:93:b0:
                    22:fa:0e:bc:6b:47:92:f7:42:c8:50:39:8a:59:69:
                    27:32:23:b1:ea:d5:c2:62:e7:67:53:23:a8:f3:69:
                    ce:de:be:15:51:60:6b:fd:6c:47:51:2e:51:d1:f0:
                    e4:33:71:43:9a:5c:79:85:5d:3f:5a:d0:39:6b:87:
                    57:b9:16:d1:56:41:f3:37:d1:f6:2a:9b:a9:c8:8e:
                    1f:5c:2f:cd:e2:97:1d:d7:b2:ef:5e:e6:c8:23:c3:
                    0a:e0:61:3c:5f:3f:ff:63:43:41:01:f1:02:00:43:
                    3b:8e:01:b4:00:72:97:8a:fa:3e:a5:df:b4:b5:d5:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:49:38:31:78:72:75:6C:92:E5:F1:43:EA:6B:74:EA:49:70:CB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:9b:d3:7b:d5:b7:bb:a8:ef:25:63:f8:ef:a0:4a:dc:71:
         fc:5e:a6:31:0d:83:3d:bc:32:53:a8:64:ad:68:52:f4:91:51:
         f6:6f:a2:78:e9:c4:5a:4a:43:55:90:00:b5:13:85:60:49:34:
         83:70:95:28:e1:5b:b9:e1:44:10:8c:bd:71:7e:0c:8e:76:b4:
         36:6c:d4:b6:62:bc:9d:fc:df:2c:c5:d5:9b:05:6f:4a:28:89:
         41:19:78:38:57:6f:b0:37:bc:33:99:28:da:fe:f3:e4:68:be:
         f1:49:d8:8a:61:dc:35:65:71:a9:9b:b9:b7:8a:df:02:c3:2a:
         30:f4:26:cb:ba:e7:87:d8:ff:35:d2:74:cd:af:14:24:1e:df:
         07:ff:be:30:da:33:a6:f8:dd:eb:b9:c1:e7:e7:29:84:79:bf:
         1a:99:1a:5d:4e:9d:0f:a1:9c:48:86:44:3c:e2:f3:d6:a7:64:
         3a:8e:29:56:5a:b3:a8:b9:05:db:be:8f:8c:98:26:04:a7:c7:
         2f:9a:a4:e0:1e:82:d0:88:b5:a0:1c:cf:94:5d:39:0b:8e:03:
         54:49:6c:bb:7b:9a:75:54:81:f3:0c:f1:6c:10:13:e8:33:a4:
         39:0f:92:7c:24:b7:65:90:4a:35:7b:0a:ff:2c:29:0c:cb:c9:
         9e:04:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:54 2024 by rpki-client on console-ams.rpki-client.org