Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa
File:                     ba1f3a5b-949d-32e0-9caa-442464bb6521.roa (raw, json)
Hash identifier:          fqLevW7sJ50JYKM6kRumpZPrL2rGB6ZLnMHWAQ4d34g=
Subject key identifier:   EA:79:A2:AF:1C:54:46:29:1C:EA:80:7C:1B:1A:29:F1:F1:FE:9F:4A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0E3EEA971DCC0C4EF200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:0e:3e:ea:97:1d:cc:0c:4e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=db1a7bd4-f618-40ae-9a5c-bcd00f82a4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:66:86:eb:c7:58:8f:8f:d4:79:49:05:ac:
                    b2:f1:55:63:90:90:e6:dc:7a:91:16:6b:aa:1a:92:
                    37:58:2f:cd:a5:4b:43:b6:83:f6:c0:3f:47:b3:a3:
                    f8:19:ae:f3:50:73:0a:9a:05:25:d6:34:0d:55:ff:
                    77:5a:c5:48:09:70:ce:09:61:17:f1:35:c0:7d:81:
                    91:f5:34:83:15:33:6a:e3:1a:f6:d0:f0:25:6a:f0:
                    52:56:a7:08:d6:6c:4b:fc:28:e6:ca:87:02:48:03:
                    f4:a8:15:c8:d0:d9:12:d4:bd:ca:e9:bf:d6:69:2b:
                    f2:17:c5:c9:ad:7d:df:1b:b0:e2:79:83:25:46:9a:
                    e6:44:b4:1c:99:35:15:30:e1:cb:77:d1:fe:13:dd:
                    99:4e:75:cc:bd:6d:25:2b:48:3f:da:07:1a:fb:47:
                    f0:18:2d:06:b5:1a:ed:53:83:ac:03:b3:4b:bf:a1:
                    8b:49:73:a8:a2:cb:a1:d9:c7:d7:04:a4:a8:c2:86:
                    f7:48:c8:64:5f:f1:c7:3f:c9:68:ef:3f:d1:e2:c6:
                    42:4b:d6:38:ae:7c:7c:c7:3f:0e:93:af:2b:f0:99:
                    08:b0:80:0c:f0:f4:fb:7e:61:6c:63:86:c5:f3:83:
                    1a:07:57:f9:14:97:46:8e:4a:e0:02:35:9c:79:6d:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:A2:AF:1C:54:46:29:1C:EA:80:7C:1B:1A:29:F1:F1:FE:9F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:fd:fd:57:1f:7a:66:26:17:03:75:fc:2c:b0:12:b7:44:
         ba:49:d9:75:77:a6:5f:28:98:16:5c:b6:a7:32:0c:a0:b5:d0:
         3f:f8:fb:f2:29:0e:dd:13:72:d7:69:30:40:d8:ea:9d:42:b6:
         d7:79:d2:e8:90:b7:7f:9e:f3:4d:27:ac:27:3c:d4:52:80:b7:
         2a:53:72:51:41:08:10:08:7d:82:6e:b7:9a:e1:ba:cb:32:2f:
         c5:6d:28:2c:10:59:2a:85:a1:7f:8c:89:86:4a:75:5f:c4:c0:
         a7:b9:66:db:05:c4:78:a9:ab:88:b3:12:ac:e5:ec:fd:72:a5:
         58:54:25:40:a3:a5:9f:53:68:d4:17:37:b7:e4:b7:37:75:0c:
         2b:46:b6:53:e1:4f:88:1d:94:95:33:26:e1:ce:e5:12:83:27:
         31:82:d2:de:73:0f:5b:d9:5b:d3:aa:f9:72:d6:68:c2:7b:22:
         00:36:b2:55:04:78:d2:28:ea:d2:0b:8f:46:f7:b9:14:1b:d6:
         8e:04:3b:65:12:eb:6a:cd:31:a4:cd:82:45:5d:29:63:d9:b2:
         f0:07:a7:ae:25:be:25:7f:a7:4e:32:08:b6:37:43:70:b9:2e:
         6e:80:34:ca:09:26:93:4c:09:b6:34:32:d6:12:31:30:85:fb:
         d6:cf:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:57 2024 by rpki-client on console-ams.rpki-client.org