Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/957fafb9-7a96-3588-af99-2b73749889b4.roa
File:                     957fafb9-7a96-3588-af99-2b73749889b4.roa (raw, json)
Hash identifier:          fAit+SbK7AFJUcl1U9HRk6iRleQlx5QUWdngAVtCxtM=
Subject key identifier:   64:B2:21:8A:B7:5D:42:D0:9F:39:19:40:47:87:6A:F1:C6:73:0F:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B94B7AF1D0C74B18E2ECE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/957fafb9-7a96-3588-af99-2b73749889b4.roa
Signing time:             Mon 18 Mar 2024 22:11:09 +0000
ROA not before:           Mon 18 Mar 2024 22:11:09 +0000
ROA not after:            Sun 16 Jun 2024 22:11:09 +0000
asID:                     15169
IP address blocks:        104.134.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b9:4b:7a:f1:d0:c7:4b:18:e2:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:11:09 2024 GMT
            Not After : Jun 16 22:11:09 2024 GMT
        Subject: CN=61003ea8-b67b-4963-8942-a4cce2db8c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:70:1f:3c:17:f3:cc:30:d5:db:36:97:cc:
                    97:44:a1:99:39:5c:cd:bc:ed:c0:d7:d2:e4:e7:92:
                    b0:e3:08:c8:2c:e3:ea:0a:c0:be:e2:49:a5:05:84:
                    d6:6b:fa:58:90:28:ab:1b:b6:de:13:ce:ea:ad:c4:
                    db:b5:f6:ce:73:59:cf:b0:aa:20:85:82:02:4d:af:
                    15:96:fa:32:e8:35:69:f6:bd:cd:85:26:80:2d:39:
                    b6:a9:ae:45:3f:77:56:a7:b6:bd:90:20:05:46:d0:
                    8c:9f:3b:93:14:bc:95:ab:4c:1e:98:25:eb:b3:49:
                    a8:fb:1a:ca:f2:18:9b:68:37:f7:11:10:14:76:14:
                    34:c4:aa:81:da:2f:fe:86:dc:9c:7e:76:a5:d5:da:
                    01:cf:69:9e:b5:3b:2c:f6:7a:e5:7d:01:22:ee:d5:
                    99:c5:6d:4c:f4:4f:6c:db:84:ca:ff:83:a7:d2:4d:
                    38:71:43:42:8f:bb:c0:91:e6:a9:f9:02:a7:32:d6:
                    08:42:95:ee:d9:4d:c2:25:e9:64:9c:9c:fa:c0:90:
                    b2:6a:d8:69:64:8c:23:d7:36:4f:5d:1e:e2:1c:ee:
                    89:38:5f:c2:04:0d:87:71:31:d4:37:ff:d7:e6:a2:
                    76:69:dd:8f:25:87:5f:fe:c0:de:1d:44:58:bc:d9:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B2:21:8A:B7:5D:42:D0:9F:39:19:40:47:87:6A:F1:C6:73:0F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/957fafb9-7a96-3588-af99-2b73749889b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:33:e3:d8:9a:ed:fe:9f:b7:ec:d5:63:ba:e4:9d:4e:2a:1e:
         22:b3:cc:86:07:61:97:c0:5f:3c:27:bc:1b:bf:4d:42:07:36:
         0c:e4:45:16:90:fb:5b:cb:40:7d:a2:03:18:06:8a:8a:31:51:
         da:6c:44:59:c0:ad:85:80:c2:94:bb:34:8e:89:e2:0f:1e:8b:
         22:5d:0d:2c:bd:b8:e6:b9:2e:f1:dd:c6:c8:a0:4b:1f:a8:5e:
         de:45:d3:26:b2:71:2b:99:f5:4d:04:7e:03:d8:e0:ef:cb:79:
         dd:40:bb:ee:8d:bd:9d:7c:2f:67:eb:10:e8:93:54:79:23:10:
         f1:b5:35:0b:0c:45:60:5e:ff:48:5c:31:71:fb:f1:0a:3b:e8:
         cb:be:93:ad:fc:17:6f:20:90:d2:d0:44:d4:01:30:a2:dc:ff:
         34:db:b8:70:8e:53:fb:6d:f9:91:dd:aa:eb:38:47:91:6e:ac:
         6d:05:70:43:de:9a:7e:74:78:74:4e:29:f3:4e:4e:fc:8b:03:
         ac:2c:cf:27:c5:fb:9c:27:5f:39:71:6a:8e:b1:b0:00:5c:8e:
         51:0a:b2:d1:54:7a:83:a0:d8:56:a7:24:6d:6d:e1:a5:2e:b4:
         97:27:77:1a:aa:f3:00:b1:0c:57:3f:0b:1e:92:8a:a6:ce:25:
         c2:bd:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:39:57 2024 by rpki-client on console-ams.rpki-client.org