Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2f442be-64bb-39d6-8e7b-90b45c82c1a6.roa
File:                     a2f442be-64bb-39d6-8e7b-90b45c82c1a6.roa (raw, json)
Hash identifier:          lu7ir/Y0ftf2bj3qqkbd9aW/j6n079HnBhYaKZjk4bw=
Subject key identifier:   2D:30:2B:BE:25:F9:32:0E:C9:8F:05:97:9C:67:9F:2D:D0:BC:67:51
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BABA092CC3B9FC90BB8A40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2f442be-64bb-39d6-8e7b-90b45c82c1a6.roa
Signing time:             Mon 18 Mar 2024 22:14:02 +0000
ROA not before:           Mon 18 Mar 2024 22:14:02 +0000
ROA not after:            Sun 16 Jun 2024 22:14:02 +0000
asID:                     36411
IP address blocks:        104.134.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:ba:09:2c:c3:b9:fc:90:bb:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:14:02 2024 GMT
            Not After : Jun 16 22:14:02 2024 GMT
        Subject: CN=12f4a614-6e0f-40a7-9396-91ebc24e6eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:13:2a:48:e8:20:93:03:d0:d4:46:0d:56:
                    a5:9a:5a:30:3b:c3:cb:e4:f4:43:43:46:68:f6:6d:
                    59:5f:a1:4a:9f:17:02:68:40:cf:5d:e7:98:90:89:
                    90:aa:92:7c:1d:7a:0b:08:fa:65:a2:54:01:e6:8f:
                    9c:d3:8a:3c:e3:77:02:1a:7f:27:1d:1d:81:f6:d4:
                    b9:45:11:1b:56:90:fe:2b:a6:2c:74:3d:e1:a3:80:
                    28:55:eb:54:c1:57:90:bb:59:44:01:bb:99:fc:7d:
                    08:30:59:d8:15:cf:9a:3f:68:73:ef:ce:05:c9:ae:
                    09:56:10:c8:fd:f7:bd:81:15:09:7d:25:64:2e:10:
                    ae:8f:ec:b6:9c:9c:30:c7:42:ab:8c:95:93:35:9c:
                    d4:71:5d:b4:6c:bb:99:8a:3f:b8:f0:9a:9b:c1:1e:
                    ff:32:68:71:df:36:7c:22:d7:de:83:29:f5:f9:a6:
                    4f:5b:d4:bb:05:b5:e7:5e:47:b4:0c:c0:9d:16:ee:
                    10:19:8b:52:3f:3c:07:d3:9b:79:54:88:50:23:f5:
                    49:86:3f:ab:58:d3:b1:a3:03:19:ce:01:8a:72:d1:
                    fb:e6:83:3f:b7:f8:77:ee:71:f4:1a:10:eb:30:d4:
                    77:c2:fe:6a:fe:71:18:a8:a5:cf:49:40:1f:f6:dc:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:2B:BE:25:F9:32:0E:C9:8F:05:97:9C:67:9F:2D:D0:BC:67:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2f442be-64bb-39d6-8e7b-90b45c82c1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:0f:b2:37:82:a8:6c:8b:af:f6:43:c1:23:15:e3:0e:e1:53:
         5e:02:84:7b:48:27:cf:76:4d:26:48:2f:fa:3c:cb:73:b3:3f:
         47:ab:b3:aa:70:ff:6c:23:8e:14:18:66:10:2c:06:59:e9:c0:
         1b:6a:59:fa:4a:c4:b5:e3:d9:5c:80:03:a4:ea:fc:3f:61:ff:
         b0:07:b6:1f:32:f0:81:6f:29:48:ef:5e:31:67:84:4f:f2:33:
         1b:80:04:68:5c:4f:26:79:0d:7f:eb:af:26:26:96:82:d1:ab:
         14:f1:3d:bc:43:6c:c1:96:69:9d:33:31:44:40:e1:a5:af:30:
         2d:29:e0:a5:81:fe:37:48:a4:84:a7:4c:ad:03:7b:8a:a4:60:
         3f:c4:94:5b:dc:2c:0c:67:2a:15:54:dd:6a:25:79:b3:22:9a:
         6c:d6:6d:01:10:73:88:d7:4d:a6:01:0c:61:d5:0d:92:1b:75:
         c9:84:af:5c:de:71:81:e8:02:24:bd:d8:2a:3a:df:ba:4b:f7:
         b1:a2:85:80:67:d3:50:4a:0a:99:f4:56:f7:16:f3:bf:34:ba:
         32:33:04:3a:b9:b5:5f:1e:36:eb:82:60:ac:78:a6:93:28:9b:
         00:a6:94:ee:95:d4:a1:1d:2c:68:96:b2:52:67:3a:80:a4:d0:
         fb:93:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:40 2024 by rpki-client on console-ams.rpki-client.org