Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa
File:                     c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa (raw, json)
Hash identifier:          vsVTRnIqgE7LlJ42oKBXOj0x+s4M+11mPOOG1zs6++s=
Subject key identifier:   47:24:D3:1A:E8:D3:DB:30:FF:88:9E:FD:63:53:62:13:62:88:FF:66
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535840491FE273DCA7A1E1180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa
Signing time:             Thu 14 Mar 2024 21:49:55 +0000
ROA not before:           Thu 14 Mar 2024 21:49:55 +0000
ROA not after:            Wed 12 Jun 2024 21:49:55 +0000
asID:                     15169
IP address blocks:        104.134.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:04:91:fe:27:3d:ca:7a:1e:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:49:55 2024 GMT
            Not After : Jun 12 21:49:55 2024 GMT
        Subject: CN=68b8affa-8d25-4807-92ac-01bca2b90031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:62:fe:dc:24:f8:9a:2c:4d:5b:16:49:d4:
                    0c:1f:af:ab:4d:09:d7:65:da:c7:49:c2:b5:e9:4f:
                    73:86:1c:6f:c3:ee:f8:53:19:f8:41:af:0c:28:5a:
                    fa:12:11:a8:2a:37:c0:41:02:36:40:a2:2a:b4:5c:
                    10:90:c9:99:97:25:fe:60:2f:42:14:cf:5c:fa:84:
                    6a:48:70:7c:e9:bc:55:30:b8:e0:55:4f:88:ad:75:
                    84:71:c3:13:c6:6c:df:18:1e:4e:24:4a:26:67:bd:
                    69:34:bd:81:7b:52:19:b5:cb:5b:a2:ce:51:30:49:
                    65:15:78:d7:6e:d6:41:30:7f:2a:85:42:77:c3:32:
                    6a:06:32:05:31:50:c4:32:b8:0d:71:e7:44:f1:48:
                    a2:25:a5:a9:6c:2c:6f:3b:27:af:fc:14:0f:3a:85:
                    ea:bd:de:e7:98:6c:83:a9:cb:f9:25:c2:de:14:8f:
                    57:c0:9c:01:7c:44:4b:34:be:a6:a8:70:7a:14:77:
                    b9:ab:be:69:f5:9f:bb:e2:a3:06:67:7b:e3:7d:cd:
                    ba:41:b2:da:b1:d6:46:72:77:ca:15:ab:7f:9a:de:
                    44:eb:db:26:fe:e1:b3:72:9a:5a:12:21:04:67:5e:
                    b1:f1:18:43:0b:45:af:41:10:87:6f:74:07:c6:a1:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:D3:1A:E8:D3:DB:30:FF:88:9E:FD:63:53:62:13:62:88:FF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:22:fc:d5:9b:fa:b1:a3:f6:d1:8f:b9:03:2c:7b:5d:f2:1c:
         a0:8d:4a:a8:cf:ec:2a:2f:26:92:7d:24:3f:5a:98:7d:a4:ef:
         e2:3a:e4:c2:70:ae:a4:50:ab:95:6c:8d:a4:e1:b3:26:66:2e:
         64:9d:49:4c:bc:50:a9:77:37:9b:c7:48:bd:4f:b2:73:d2:e3:
         7c:d8:48:41:bd:fe:e4:4b:94:a8:60:7f:f0:dd:e0:ba:6e:83:
         cc:03:a5:2e:eb:a4:67:4d:68:e3:b2:57:41:13:1a:e7:78:af:
         4f:4a:00:30:7e:7f:8f:0a:06:51:dd:2f:95:46:0b:e4:f9:e3:
         2a:8d:89:54:5f:72:08:dd:ab:7b:f6:28:66:04:2e:a6:d2:75:
         33:96:55:43:e5:ad:06:5b:bf:7f:a4:9d:54:49:32:5e:a0:a8:
         6c:c2:15:30:45:dc:ad:1e:40:1c:22:ef:6e:a8:0d:5a:73:d4:
         d5:ad:04:34:35:32:7a:0c:ee:ca:e2:d7:59:ee:f3:64:f2:74:
         7f:7e:63:0e:04:c7:09:d3:0d:2a:07:cf:d8:be:76:1c:69:81:
         b5:d5:4f:c6:13:a7:a8:bd:c5:00:4e:d6:22:7b:af:27:77:92:
         27:56:f3:21:30:9e:fa:1c:84:26:f9:37:f9:8d:73:fe:bb:25:
         f0:27:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:30 2024 by rpki-client on console-fra.rpki-client.org