Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
File:                     c1c02188-d805-3301-8938-976960f7c557.roa (raw, json)
Hash identifier:          eKuwnxB8vowxcyzhJ46hTJY6SooL5BLp4xLElBY0fRg=
Subject key identifier:   46:86:03:F3:F2:79:06:4A:1D:48:F6:13:4D:B6:13:D0:05:E3:7B:A1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584532842A8096D53B6D6CF31400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
Signing time:             Wed 13 Mar 2024 20:02:47 +0000
ROA not before:           Wed 13 Mar 2024 20:02:47 +0000
ROA not after:            Tue 11 Jun 2024 20:02:47 +0000
asID:                     41264
IP address blocks:        104.132.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:2a:80:96:d5:3b:6d:6c:f3:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:02:47 2024 GMT
            Not After : Jun 11 20:02:47 2024 GMT
        Subject: CN=2d509096-5aea-468f-915f-7a48b9bde62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:62:d8:29:d6:79:f6:4e:ac:00:b2:f3:46:
                    e5:fa:66:aa:a9:ee:78:e2:f2:20:51:32:a9:c3:fd:
                    c0:0c:28:80:6c:52:9e:03:0b:24:09:ab:d6:71:3b:
                    df:42:3d:bb:a3:07:1e:bf:8f:32:8d:a0:a0:30:d0:
                    64:ef:11:d1:a7:f7:80:97:f2:5f:09:0d:31:6b:84:
                    20:be:5b:42:89:d2:8c:6f:57:4d:12:f4:d9:02:4b:
                    b4:ea:1e:c2:d3:cb:db:52:d8:be:40:ba:2b:c9:81:
                    2d:67:07:9e:bd:bf:39:e5:96:54:2a:29:1b:9e:06:
                    0c:71:38:b6:66:4a:45:11:e2:91:4d:fd:0b:7f:7f:
                    f3:1a:f3:18:8c:9b:fb:0b:02:3d:4f:f7:60:b6:cb:
                    76:d3:78:56:ed:bd:18:ec:46:72:17:a6:a6:78:9b:
                    5d:36:4f:f7:d1:96:06:28:6d:8d:c0:f1:8d:1d:08:
                    cb:b5:85:f1:7a:43:62:5f:3b:89:53:f2:62:69:cb:
                    19:a6:5f:39:9c:f0:38:4f:e9:65:2f:08:da:78:e5:
                    79:d1:04:b7:4f:77:41:57:2a:b4:67:17:7b:f4:0c:
                    26:06:d3:b8:1b:99:93:c2:0d:e5:5d:7c:f6:7d:d5:
                    41:34:20:48:a1:cf:e8:66:11:1c:68:8d:2c:1d:cf:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:86:03:F3:F2:79:06:4A:1D:48:F6:13:4D:B6:13:D0:05:E3:7B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fb:dc:19:2a:ce:3b:98:81:47:0a:66:8e:e1:ef:38:a3:4d:
         33:77:37:52:97:68:bc:17:3f:0f:bc:b7:6a:ae:1c:7e:8c:ad:
         77:24:ff:70:fb:2a:00:df:d5:1a:0f:9c:d9:8d:d5:78:d7:11:
         5e:dc:06:18:e6:ce:93:2a:00:b3:f9:20:54:25:8c:0a:67:e2:
         62:ac:60:aa:51:a6:40:9d:9b:9d:fd:84:1d:83:5c:a1:aa:5b:
         50:4c:a7:ec:46:ab:e2:8b:20:d9:76:73:3e:27:6c:b6:48:91:
         93:5d:ba:a6:5c:0f:d3:b2:4c:20:d1:31:29:ea:0c:57:f1:36:
         5a:c4:a2:99:b6:f2:34:cd:4e:ca:73:f8:c9:91:c7:11:0c:ed:
         27:9c:16:50:46:4f:bf:02:01:ff:eb:da:10:c9:d3:d2:e8:83:
         ff:1e:1a:d6:53:85:06:39:10:91:7a:a0:87:85:ef:ef:72:90:
         46:36:08:54:5d:e6:10:fe:77:aa:12:1c:58:7c:f7:93:8c:5e:
         86:a8:a3:47:37:80:52:6a:aa:3c:07:22:32:ca:8e:30:69:fc:
         fa:f3:60:42:8e:eb:20:cf:5d:7c:b0:0f:7f:0f:b8:58:a5:b9:
         a5:09:5a:a6:2d:09:b5:5e:48:aa:26:21:8e:53:31:87:4a:28:
         9c:aa:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:40 2024 by rpki-client on console-ams.rpki-client.org