Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91ba5134-5774-3bd4-b43a-cf708d717e51.roa
File:                     91ba5134-5774-3bd4-b43a-cf708d717e51.roa (raw, json)
Hash identifier:          BwyMfwDH1GEfZmee4BT9h1d6F9/9rD/R9u7P15UPI1Y=
Subject key identifier:   22:9B:0E:18:CA:35:C3:69:93:29:90:D5:9E:B7:7D:A1:0A:5A:90:86
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BC7BDBEEBEA139798BEE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91ba5134-5774-3bd4-b43a-cf708d717e51.roa
Signing time:             Mon 18 Mar 2024 22:17:35 +0000
ROA not before:           Mon 18 Mar 2024 22:17:35 +0000
ROA not after:            Sun 16 Jun 2024 22:17:35 +0000
asID:                     15169
IP address blocks:        104.134.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:7b:db:ee:be:a1:39:79:8b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:17:35 2024 GMT
            Not After : Jun 16 22:17:35 2024 GMT
        Subject: CN=3537fc94-7a8b-498f-99e6-0c00349ddda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:cd:34:6d:3a:be:7e:6a:1e:a4:3f:d5:ea:
                    ea:ad:71:b9:02:1b:41:82:90:16:d4:8e:9a:5d:5e:
                    5b:04:53:11:c0:98:5e:39:43:19:cb:46:dc:72:5e:
                    30:ef:f1:4a:37:29:5f:ca:5f:cf:77:28:e0:8d:f0:
                    f4:24:db:de:5e:17:e9:13:79:08:1c:3d:0b:78:33:
                    97:a8:3f:18:65:0b:7d:2b:60:83:1b:66:d1:62:c9:
                    18:4b:1e:14:0d:08:04:b2:21:24:f9:57:f1:1f:34:
                    bf:6d:3e:2b:d6:b5:0a:3e:35:7e:76:f0:f1:c8:7d:
                    b6:9f:01:d5:2e:ef:ec:46:5a:e8:3f:26:56:17:31:
                    56:2b:ec:1e:03:74:7d:c3:c4:62:87:b4:c4:24:47:
                    d1:d5:5d:11:fa:6c:df:06:de:6d:3a:84:c0:c0:42:
                    db:de:14:f6:dd:be:d3:3e:d7:74:4b:f7:84:2e:cf:
                    69:8c:53:9c:dc:57:d2:36:a7:a4:3b:0b:42:da:b4:
                    b8:69:d6:84:85:d1:50:21:04:b2:83:07:6b:5b:57:
                    d4:eb:b3:ec:e5:2f:44:bc:d1:08:06:2c:61:b0:86:
                    64:15:8f:ad:eb:32:26:ee:f0:e4:19:6e:11:d5:ed:
                    02:3c:55:4e:c5:e9:e9:1e:66:43:d7:5c:b5:8a:5f:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9B:0E:18:CA:35:C3:69:93:29:90:D5:9E:B7:7D:A1:0A:5A:90:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91ba5134-5774-3bd4-b43a-cf708d717e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8e:21:09:06:16:58:63:97:18:63:ef:d5:02:21:a7:a2:49:
         af:f7:23:b7:c2:7d:86:61:e1:56:86:e2:3c:ef:ab:a6:58:ba:
         8a:d3:a5:37:d1:14:72:4f:72:ff:ac:1e:9d:18:79:2c:20:6c:
         97:b9:80:d6:52:99:e2:88:e4:d3:47:82:cd:a7:aa:c1:6c:bf:
         4c:62:ff:ff:f7:34:20:e2:81:01:85:ba:48:a7:ae:b8:32:4d:
         20:a0:cd:fb:85:ff:6e:71:55:4d:54:18:72:c0:c3:e9:e5:06:
         f1:df:59:1e:87:4c:85:b0:68:27:b6:ce:11:0b:63:37:8b:5d:
         fb:a6:07:8e:28:16:eb:24:9f:f2:66:86:92:d3:e3:0f:1d:15:
         3b:3a:45:1b:41:0b:99:f0:c9:aa:7b:71:09:72:d2:4a:73:0f:
         3d:92:ae:54:3c:c9:da:25:bc:26:2c:c2:a8:1f:ef:09:85:b8:
         31:ae:0c:2e:20:80:7e:fb:97:ea:97:25:cd:a8:0c:39:89:79:
         e4:32:8b:27:6a:90:5d:9f:e7:d8:71:8e:5d:7d:fb:31:a8:07:
         f5:8a:b2:13:c9:3b:a7:b8:c0:66:ca:fa:a9:fa:56:eb:a6:1a:
         18:b8:9a:3c:96:e1:37:e1:ae:3d:45:2d:da:35:b5:e9:1e:77:
         9f:b8:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:31 2024 by rpki-client on console-fra.rpki-client.org