Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa
File:                     918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa (raw, json)
Hash identifier:          p0aiGYIHYYsB0Gv6KyjsxDuQ0uhesWnvf2gP0P+VnGc=
Subject key identifier:   B2:D0:43:3F:E9:9E:DD:CD:51:EC:5F:76:0A:44:5E:D0:B4:0F:B8:CC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535864FB4250C801386C4D6B0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa
Signing time:             Thu 14 Mar 2024 21:54:32 +0000
ROA not before:           Thu 14 Mar 2024 21:54:32 +0000
ROA not after:            Wed 12 Jun 2024 21:54:32 +0000
asID:                     41264
IP address blocks:        104.133.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:4f:b4:25:0c:80:13:86:c4:d6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:32 2024 GMT
            Not After : Jun 12 21:54:32 2024 GMT
        Subject: CN=e07ceab2-4d20-43d5-bb91-684de1b7cafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:d0:ab:27:9d:60:07:61:32:d6:16:ef:a5:
                    14:67:3b:a5:b4:05:ae:b8:f1:8f:27:4c:36:37:6a:
                    7b:9a:a1:7b:13:44:d7:c3:09:5e:b3:ef:f2:3e:8e:
                    f7:35:57:af:f6:cc:ba:dc:a0:f8:9c:e6:f4:53:ff:
                    50:c6:db:d7:27:43:a9:8d:a0:07:bc:02:fa:fa:82:
                    1d:42:d3:88:4e:55:c5:ec:5f:66:c6:f8:c9:87:41:
                    aa:97:2f:37:62:a3:b3:41:7c:b7:1e:99:4e:1c:98:
                    da:bb:76:c4:ce:7a:e7:08:9f:ba:57:55:6f:32:94:
                    d5:db:7f:22:d0:e4:00:6d:d3:53:34:59:35:32:2b:
                    bd:87:80:9b:6c:e8:b2:5c:55:89:4b:bc:19:da:27:
                    c7:af:ec:be:bb:9c:68:c6:d4:c2:b7:63:24:1c:07:
                    4e:16:c3:cc:cf:41:78:00:e9:14:b3:96:0b:2a:6b:
                    46:87:87:0a:e2:8b:d5:f3:2e:6c:d8:f5:af:c7:eb:
                    15:5e:15:aa:77:4e:e9:4a:e2:2a:e8:a8:0f:a0:99:
                    8e:94:4a:40:48:e5:5b:1a:9d:e6:28:ba:c8:bf:53:
                    5f:51:62:ec:f2:2c:f3:e7:9c:d5:9a:fc:59:34:5b:
                    d6:0b:0a:90:03:a7:55:4d:8f:d1:f7:8d:4a:48:53:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:43:3F:E9:9E:DD:CD:51:EC:5F:76:0A:44:5E:D0:B4:0F:B8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:5a:98:50:27:42:fa:1d:b3:42:e0:41:0b:e1:d3:6b:51:5c:
         58:84:35:6a:30:fe:4e:38:f0:0a:70:2a:2a:fa:e4:b2:55:e2:
         33:cf:a4:e8:00:c8:9a:a2:d6:78:b4:33:ed:8b:d1:e5:65:91:
         23:92:fc:01:cc:ce:65:64:dc:98:13:1d:f4:62:2c:6b:c4:fb:
         60:c6:9c:07:fe:78:e4:b0:31:43:57:18:b6:45:fa:b9:4d:b0:
         36:ae:9d:6d:a1:86:a6:47:c7:3d:db:23:c6:99:ac:76:8b:7b:
         fc:e3:b3:a7:8a:87:2a:c7:88:21:d6:47:12:1c:76:af:a4:6c:
         c3:c4:5b:77:bc:cd:d6:b1:e1:d4:ba:75:fb:52:2a:77:2d:89:
         92:f3:e8:10:de:cb:e5:50:15:49:b7:c2:cf:43:08:2d:08:bd:
         a5:c6:8e:9c:71:57:48:dc:89:e5:49:c3:2c:e7:ff:af:fa:87:
         d2:70:f7:8c:a2:65:3e:ad:cb:97:15:5b:75:91:0e:6e:a7:66:
         b1:19:61:c3:6b:ba:36:37:4d:af:ff:32:e9:29:7b:77:56:e3:
         28:de:01:97:88:c5:8f:e2:71:ef:e0:a3:29:31:c3:1e:d2:18:
         2a:c3:0d:52:5b:75:3b:2b:30:ae:bd:f6:e7:d0:48:d3:58:08:
         44:42:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:02 2024 by rpki-client on console-fra.rpki-client.org