Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa
File:                     bcd23307-1769-3883-b749-7320ac4ef80d.roa (raw, json)
Hash identifier:          CT+79LnoMo+PVoQDJShwCOZrg5qAY/2hqh1WjCRDz0U=
Subject key identifier:   DB:9E:08:17:45:48:BD:DB:E6:B3:BF:9A:CB:8B:C4:A5:6A:46:11:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453583A98F08D85FEC97A42700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa
Signing time:             Thu 14 Mar 2024 21:49:12 +0000
ROA not before:           Thu 14 Mar 2024 21:49:12 +0000
ROA not after:            Wed 12 Jun 2024 21:49:12 +0000
asID:                     41264
IP address blocks:        104.133.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:a9:8f:08:d8:5f:ec:97:a4:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:49:12 2024 GMT
            Not After : Jun 12 21:49:12 2024 GMT
        Subject: CN=ceae98eb-bf68-4a00-afa4-e61489c20040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:c4:29:9b:ca:92:d1:4a:26:ae:c5:d3:c5:
                    52:08:83:fe:6c:f4:d4:3b:cc:1a:45:cc:4c:5f:0b:
                    bf:71:1d:ce:90:98:d2:8d:da:90:38:e2:49:79:5a:
                    a0:c2:5d:cf:d6:2e:9a:1a:09:a5:25:14:c6:43:c3:
                    c3:4a:0c:ce:2d:1b:f3:72:91:22:cc:b7:1f:fd:de:
                    51:f5:a8:4c:f1:16:87:a2:d9:51:61:a3:06:cb:b5:
                    88:84:ae:b3:c2:a1:11:66:b2:f1:36:d7:17:26:b2:
                    76:c3:65:fc:37:d5:a5:98:06:04:2c:28:b4:cc:d0:
                    44:2f:92:f5:37:a9:a4:05:9f:60:5c:5d:de:66:4d:
                    f7:c4:0e:a6:13:9a:9a:23:83:3e:50:96:76:a2:47:
                    92:99:75:4e:74:8e:a4:d0:40:28:a3:e1:72:70:5f:
                    0d:aa:b2:b7:1f:fb:6e:69:53:e7:dd:26:ff:fb:9b:
                    bd:b0:bb:df:84:b4:99:78:9a:a2:05:78:fa:e0:6a:
                    fa:83:c9:d5:f4:8f:c4:4e:42:37:d7:d7:c0:4c:2d:
                    e0:69:aa:4c:39:3a:fb:29:fb:45:18:77:13:a7:59:
                    62:c8:aa:6c:56:c6:f0:b8:ee:b2:7c:60:34:52:c3:
                    d0:58:f9:61:48:97:f6:49:27:40:63:c8:61:8e:41:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9E:08:17:45:48:BD:DB:E6:B3:BF:9A:CB:8B:C4:A5:6A:46:11:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:d9:0b:f1:74:27:bc:c9:d5:fd:40:4c:0c:6e:47:72:44:
         db:17:00:04:6f:56:9b:37:bb:88:14:71:53:52:f8:25:01:83:
         36:3b:3c:6d:ab:e9:91:33:2f:71:12:c0:bf:65:9f:dc:d2:1c:
         00:68:f7:27:6f:46:c5:7a:86:24:5a:4c:10:2d:d6:53:66:8b:
         14:59:a2:df:65:2d:e3:3f:6a:97:16:67:93:b2:39:36:b5:fd:
         6c:dd:c1:60:6a:52:80:85:7d:bc:2a:d7:c8:9c:1c:52:9e:0c:
         b3:cf:bf:8e:e6:00:5f:6e:0d:c6:2d:45:70:53:8a:98:b8:f6:
         f1:6a:6d:89:fb:4d:47:2d:b0:ae:75:6b:4e:44:9f:63:94:60:
         30:f2:d4:a3:bd:e5:1e:24:99:8d:7a:48:ee:b3:b0:00:c5:e5:
         75:25:15:1c:86:a7:29:d8:99:da:6b:7b:fd:ba:5e:0f:4a:54:
         76:a8:49:d1:01:2e:5f:bc:75:a5:9a:9a:0a:a5:02:af:39:4a:
         f2:68:6f:80:0a:ea:97:1f:3b:a9:ac:e0:de:a4:fd:19:f2:03:
         9b:02:32:18:86:e1:84:23:05:d8:ce:af:77:f8:ee:a0:22:4d:
         ee:5b:16:9a:74:df:7d:81:0a:20:e8:3b:19:9f:bc:44:84:68:
         cb:26:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:42:38 2024 by rpki-client on console-fra.rpki-client.org