Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa
File:                     b7dceef0-fb5b-30fc-b174-4960a9daa448.roa (raw, json)
Hash identifier:          G3/SETYNJow8QLMQoki4hZAn49Zy2xAT0CerY+bM1q8=
Subject key identifier:   EB:E6:01:02:D8:A9:70:3A:60:52:FE:BB:CF:D4:3C:84:5C:6E:01:AF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535867FEC58C7E8EA12886BC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa
Signing time:             Thu 14 Mar 2024 21:54:55 +0000
ROA not before:           Thu 14 Mar 2024 21:54:55 +0000
ROA not after:            Wed 12 Jun 2024 21:54:55 +0000
asID:                     41264
IP address blocks:        104.133.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:7f:ec:58:c7:e8:ea:12:88:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:55 2024 GMT
            Not After : Jun 12 21:54:55 2024 GMT
        Subject: CN=6adc322c-cc4c-4a39-b1b2-83e3a77ca810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:9d:7e:15:2d:9d:7e:99:ed:8c:32:4e:6b:
                    e0:66:99:88:42:fe:da:e5:45:9e:89:3d:47:d1:00:
                    4c:e1:55:97:7a:32:47:33:91:f1:ee:5e:60:7d:da:
                    4b:3d:01:81:36:32:4f:3d:75:9f:94:ce:e8:ee:b1:
                    28:47:52:63:2d:ad:42:39:ba:26:91:83:35:89:90:
                    d3:6e:7e:d5:97:65:ec:92:b7:15:79:34:84:15:9d:
                    d7:3b:dd:0c:d5:a7:40:b1:19:e4:09:6c:ab:bf:28:
                    5c:71:46:ea:8c:84:68:6a:be:ab:8d:8d:f9:20:49:
                    51:19:16:5a:cd:12:52:6f:59:6c:c3:b2:fe:10:35:
                    ad:ef:eb:89:23:76:cc:f8:13:62:a4:58:4a:74:e4:
                    1b:fb:2c:68:f6:a9:ad:79:b2:90:37:1c:6d:b7:3c:
                    dc:a1:8b:7f:ba:83:69:2b:bb:38:b3:cd:4a:a2:52:
                    5f:82:ac:d2:73:62:0c:4c:9d:a6:5b:e5:d8:da:19:
                    46:30:6a:c0:ed:07:37:66:d2:6e:87:6b:66:be:78:
                    15:4d:27:fc:c2:2f:b3:9e:9c:ff:c9:e7:2f:0f:2d:
                    e7:5c:ff:86:d1:b9:a8:0e:1a:40:ca:98:42:8a:9c:
                    06:8d:70:fb:06:15:62:ea:d3:dd:9f:ba:a3:05:6d:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:01:02:D8:A9:70:3A:60:52:FE:BB:CF:D4:3C:84:5C:6E:01:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:52:8e:d1:0f:ed:df:3d:cf:88:90:ad:d0:a9:8f:fc:62:
         c3:33:74:6c:cb:72:72:bd:6d:f9:e1:81:e5:89:e2:c9:b4:a5:
         f2:22:86:e5:3f:37:55:56:10:44:6f:2d:f4:26:2b:ba:2f:26:
         da:5b:50:b1:a1:46:9a:71:51:3e:e8:1b:f1:5e:f6:d7:ee:1d:
         7f:08:6d:73:ea:1e:1c:33:46:cc:5f:e6:dc:9c:27:7b:79:b9:
         3c:39:17:a5:4d:1a:7f:73:13:63:dd:3b:af:3e:c4:b6:ef:e1:
         77:57:76:55:1c:78:ca:6b:99:e7:41:95:ac:b0:29:f0:e2:72:
         09:cc:76:b4:95:cd:c9:a4:47:a9:08:f2:7a:a8:a2:53:35:81:
         c8:31:3a:39:f8:9a:bb:bc:91:89:e8:cb:d0:92:84:f1:71:c0:
         3c:de:ed:2f:4e:7b:2d:4b:43:7d:76:5e:3a:2f:9a:f1:85:ae:
         55:3c:d6:2a:28:8e:d0:1e:a2:ad:9c:18:43:bc:f2:e8:4e:09:
         9c:7f:77:0f:80:49:36:4b:1e:84:67:cf:36:32:99:ad:a9:70:
         dc:a1:87:5e:4d:b4:0b:13:31:a1:95:5a:37:cb:ad:c6:e3:df:
         21:fc:08:ba:8b:cd:ad:7d:f1:5e:7d:95:b9:0b:0c:a6:9e:83:
         71:0f:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:43 2024 by rpki-client on console-ams.rpki-client.org