Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6ad0997-c2ba-3af8-9863-0b12354c6603.roa
File:                     b6ad0997-c2ba-3af8-9863-0b12354c6603.roa (raw, json)
Hash identifier:          +Ng+qwbi4Q+LBZkIJAlYUi1ynpb9dmgYoXhvlBu+iAE=
Subject key identifier:   9B:4C:1D:F5:32:2D:36:C1:DC:E5:71:41:AF:5D:B1:AD:68:DB:F2:EF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D29F726DBDAF3F788C6A4530
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6ad0997-c2ba-3af8-9863-0b12354c6603.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.132.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:72:6d:bd:af:3f:78:8c:6a:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=69678dca-411b-430c-9763-e2e7907a801d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:df:e8:59:4c:07:40:56:48:7f:29:19:be:
                    f8:00:cf:a8:76:17:92:e0:94:d1:1e:75:00:13:d7:
                    6d:40:90:20:8f:6d:f4:25:3a:c7:9a:ad:ca:53:a7:
                    9a:b2:50:4c:bc:bf:48:c1:91:06:12:e6:aa:d9:cc:
                    f1:8e:25:8b:d1:c3:3b:aa:b5:55:6a:f6:f9:43:d2:
                    a5:d5:ae:d9:74:c1:22:66:8c:86:57:d2:77:c5:29:
                    54:fa:02:7e:92:62:69:1e:6e:20:22:e2:25:6d:9b:
                    cc:d1:bd:95:1e:ff:6b:c0:0a:88:15:f1:3d:7b:84:
                    68:cb:0a:ff:89:57:35:0a:12:0e:15:91:ed:51:69:
                    d5:86:6e:3a:c2:76:33:7a:36:9b:c0:44:5e:8a:d1:
                    83:26:de:17:85:9a:cc:1a:e6:84:22:5f:42:fe:a4:
                    80:6b:70:b9:e5:ad:ca:18:21:f2:37:2e:59:a5:03:
                    9f:cf:9b:96:5b:7a:c4:08:9b:41:d5:84:26:55:d1:
                    3b:07:e2:98:db:b5:0f:7d:14:c4:15:86:b9:af:45:
                    fb:91:24:68:57:03:37:57:b0:f9:c8:2b:08:c1:b4:
                    b5:98:79:6a:c5:16:bf:32:1f:b8:da:6d:37:4a:50:
                    c5:40:78:81:34:5e:6d:3e:52:02:52:87:4b:c5:63:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4C:1D:F5:32:2D:36:C1:DC:E5:71:41:AF:5D:B1:AD:68:DB:F2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6ad0997-c2ba-3af8-9863-0b12354c6603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:35:ae:b1:24:3e:a8:55:95:7e:3b:bb:f5:cd:18:fa:1f:28:
         3c:79:2f:85:80:ea:e6:8e:5f:d0:2a:9a:3a:6c:fe:58:60:d9:
         75:3e:56:da:3b:ee:e7:16:8d:31:98:f8:17:cb:34:fe:5f:04:
         18:d7:cd:68:43:31:87:7b:d8:0b:5a:7a:25:85:fd:0a:5c:cf:
         e7:b3:62:46:72:28:d7:7c:b9:12:a4:37:75:7e:b3:f5:8f:39:
         05:71:29:e6:54:4d:46:0b:55:5c:4e:fa:c1:42:d1:d7:32:87:
         c3:5e:a8:cf:a6:86:c6:da:ff:d1:86:99:7d:c8:c5:5e:67:fe:
         9f:a2:18:6d:97:e9:4d:65:e7:61:a8:aa:5f:4e:e8:71:ae:bc:
         86:39:55:36:67:c9:a4:e0:45:04:d3:e2:3f:4f:20:00:b3:cc:
         6e:5c:8b:10:93:fe:6d:f6:8e:21:06:09:f3:63:9e:38:3c:80:
         4a:47:3e:72:f9:f4:37:14:a1:21:3e:03:c0:a7:30:bb:06:63:
         2e:4e:64:dd:39:41:4f:e2:5d:e1:2b:ab:9d:db:79:29:47:1b:
         3d:c9:ae:22:cd:af:fc:3f:e2:a2:a2:0e:fc:ff:b3:32:d6:dc:
         c4:0f:e2:58:bd:f3:a1:07:05:d5:63:03:ac:97:fe:d7:be:a1:
         13:5e:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:54 2024 by rpki-client on console-fra.rpki-client.org