Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c2578fb0-1c06-37f9-b406-05c80bf544e8.roa
File:                     c2578fb0-1c06-37f9-b406-05c80bf544e8.roa (raw, json)
Hash identifier:          XAYiwEtAU93CdMscrQBqfkHYHIIt9pGmfCQoou2dwdU=
Subject key identifier:   2E:59:60:D1:6B:3A:7C:66:32:AD:8A:9B:15:11:03:DB:05:B3:2D:89
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BB083220F279B9AA07D5C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c2578fb0-1c06-37f9-b406-05c80bf544e8.roa
Signing time:             Mon 18 Mar 2024 22:14:39 +0000
ROA not before:           Mon 18 Mar 2024 22:14:39 +0000
ROA not after:            Sun 16 Jun 2024 22:14:39 +0000
asID:                     36411
IP address blocks:        104.134.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:08:32:20:f2:79:b9:aa:07:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:14:39 2024 GMT
            Not After : Jun 16 22:14:39 2024 GMT
        Subject: CN=bf66a905-12b4-4833-885f-df11e0787199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:90:01:09:4d:e0:1a:b3:ed:8f:20:60:62:
                    47:a6:80:e1:b8:41:1f:c7:ef:96:cd:3d:14:cb:86:
                    4e:ea:a6:db:75:c5:99:58:a8:ed:39:c1:d4:a6:89:
                    ac:f1:6d:7d:b7:1c:32:84:ae:ab:0e:e5:3d:9d:3b:
                    f1:cf:58:ec:d7:85:5e:d3:59:d6:52:02:af:87:7e:
                    c0:6e:b5:b6:d1:d7:c6:83:4b:bc:3d:53:1f:b1:98:
                    15:40:d6:b3:db:a9:40:41:be:09:4d:2e:0a:df:0f:
                    1c:6e:bd:75:9d:85:0e:a0:aa:c5:d8:99:aa:cc:46:
                    96:8f:d1:d0:a0:64:45:84:9e:99:6b:07:d0:0a:fa:
                    d0:9a:5d:78:ee:ed:58:45:26:3c:d4:2a:30:1c:d5:
                    7c:92:4a:a6:3c:26:05:36:06:1c:85:6a:3d:d2:a1:
                    9f:21:eb:a4:db:86:6c:e6:9c:d6:3f:c3:d5:4f:b9:
                    2f:24:9d:f7:6c:03:f4:97:de:65:07:1f:93:b9:9f:
                    90:35:9a:da:dc:a3:c6:04:16:53:cf:49:66:80:80:
                    30:29:54:8f:83:09:4b:4a:ac:40:1e:b6:6e:86:0a:
                    d6:80:3b:a9:90:4b:34:f9:cf:4f:51:26:e3:91:58:
                    d8:df:1b:c3:8a:6f:ee:d5:6f:83:a9:a9:a7:0a:a4:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:59:60:D1:6B:3A:7C:66:32:AD:8A:9B:15:11:03:DB:05:B3:2D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c2578fb0-1c06-37f9-b406-05c80bf544e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:7b:2e:f9:7a:8a:4f:0d:3e:4e:bc:14:2f:5a:14:cb:26:
         8d:87:b4:31:aa:d9:c6:d7:68:8b:92:1a:dc:aa:71:d1:92:d3:
         6e:30:6e:f8:47:8e:73:34:00:76:21:7e:bf:dd:f9:3c:37:b0:
         0c:56:16:73:0f:9c:e0:d6:7f:0e:8f:05:6b:37:03:c7:11:2a:
         d3:11:a8:11:8d:ca:15:71:ef:35:60:23:22:0e:41:ca:23:71:
         b6:e5:41:2a:9b:96:a2:36:54:f9:15:8a:97:9d:c5:db:4e:fa:
         00:3e:5a:91:97:ea:0c:3e:0a:ff:4d:0e:34:f4:91:e8:4f:60:
         b7:87:1b:cf:3d:7b:61:b0:3f:0e:aa:c4:82:18:b7:1d:13:57:
         c2:1a:36:73:2b:85:dd:2a:d0:5c:f6:4f:2f:00:5d:49:ae:db:
         7a:41:2a:bc:4b:0e:68:ee:28:1d:ce:70:f4:bf:33:e5:12:5d:
         f6:00:d7:1d:80:76:93:08:47:71:fa:07:8d:54:29:43:c2:2a:
         74:ff:ba:d6:ee:f5:55:f4:96:7a:ec:5f:02:5d:b0:11:15:b3:
         3f:e9:c9:ad:31:45:e5:5e:3a:a5:90:6b:5f:64:7f:a4:07:39:
         26:cc:38:e5:cc:9e:e9:0c:ac:bd:93:03:87:fd:67:8c:6d:b1:
         18:ab:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:41 2024 by rpki-client on console-ams.rpki-client.org