Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9adfe7b-63a6-3e33-8678-574e8bc8e8c2.roa
File:                     c9adfe7b-63a6-3e33-8678-574e8bc8e8c2.roa (raw, json)
Hash identifier:          kie0I6YJIjk+YQyDIEkp5yj4SxVEozwDVfa6VJmbVy4=
Subject key identifier:   3C:1D:5F:D1:4E:6B:6A:D3:25:98:9A:42:CB:57:AE:D3:00:88:2A:17
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BC4F56461AB7EFFC1E7A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9adfe7b-63a6-3e33-8678-574e8bc8e8c2.roa
Signing time:             Mon 18 Mar 2024 22:17:14 +0000
ROA not before:           Mon 18 Mar 2024 22:17:14 +0000
ROA not after:            Sun 16 Jun 2024 22:17:14 +0000
asID:                     15169
IP address blocks:        104.134.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:4f:56:46:1a:b7:ef:fc:1e:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:17:14 2024 GMT
            Not After : Jun 16 22:17:14 2024 GMT
        Subject: CN=7fd7dba9-6575-4af1-a814-0bc65c520bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:6f:f6:ff:a3:61:bc:82:fa:e1:22:6e:43:
                    01:17:e0:ed:0b:12:19:57:9d:0e:47:c5:d6:d5:14:
                    44:c1:84:ca:7f:0b:d4:a2:3a:8a:d5:a9:2f:81:5c:
                    34:d1:67:c0:8d:d4:23:5e:1b:13:29:d2:ea:98:cc:
                    14:d7:6b:a5:0d:c9:34:0d:90:9d:67:ac:32:3b:5c:
                    e8:fd:43:bf:d0:6e:7a:6c:7c:b8:a4:d6:a4:25:64:
                    9d:54:34:de:ec:13:1e:4f:fb:70:d4:12:35:1e:94:
                    6f:3e:01:2b:7b:a6:6e:a4:d6:b7:f3:06:55:35:f5:
                    fd:00:d7:81:cf:79:c9:5e:65:db:ef:06:9a:b5:2b:
                    21:f8:62:68:65:11:7b:8a:90:d6:30:a0:69:9b:67:
                    c9:32:f1:3b:7c:e6:0e:98:ca:ef:ec:78:68:e1:15:
                    7e:82:53:44:3a:49:fa:66:c9:05:2b:2a:fb:c3:46:
                    53:1d:30:93:ff:46:2a:54:90:1f:b7:2e:5c:18:52:
                    07:d4:df:bb:31:61:bf:00:f6:75:2f:d8:0f:42:46:
                    f4:9c:b6:c6:39:a3:5b:51:d2:7b:d2:66:48:31:2a:
                    39:1b:d1:6d:cd:28:3d:7a:6c:f7:33:a4:78:e5:e2:
                    c0:46:29:b7:7b:fe:0b:8b:65:e6:f8:85:b4:a7:13:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1D:5F:D1:4E:6B:6A:D3:25:98:9A:42:CB:57:AE:D3:00:88:2A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9adfe7b-63a6-3e33-8678-574e8bc8e8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:87:dc:b2:17:0b:ea:15:8d:bf:bd:62:66:a9:2a:0b:27:51:
         f4:7a:39:d8:7e:57:7f:6d:ce:4d:1d:55:21:da:5a:b6:db:d3:
         f7:6f:f0:da:d3:45:42:b0:f1:85:34:c4:4a:fe:68:b3:1c:30:
         42:d0:85:ed:b9:a0:c5:b2:91:87:03:c1:c0:87:3a:e0:46:f4:
         dc:a0:32:66:64:da:eb:9b:84:83:60:eb:f3:e9:eb:e5:2d:7c:
         f0:11:ee:56:a6:ce:53:5e:9a:69:7e:78:0b:1d:fa:b9:d7:60:
         7e:66:b3:4d:5b:e5:e1:cd:c2:ff:b2:61:47:45:18:2e:99:eb:
         4c:ce:da:b1:3e:52:07:6d:a4:fb:6c:41:73:dc:b2:17:a1:43:
         34:73:33:79:90:f0:5c:c0:53:0a:89:90:fd:ec:40:fb:89:05:
         52:3e:b7:ec:5d:e0:04:ce:17:eb:03:fc:5e:52:a4:f1:a4:b7:
         11:0a:d7:7e:46:1d:e2:01:d5:44:dc:6c:dc:5e:0d:9b:9b:d6:
         d1:65:42:d7:40:ac:1b:4c:0a:aa:e3:17:90:f3:31:db:0e:7d:
         63:05:18:0e:fb:6a:e2:88:cb:16:5c:60:a1:64:28:16:1e:da:
         ed:86:86:34:57:2d:1f:80:99:cf:81:b1:7c:72:c0:5d:2d:bf:
         66:88:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:40 2024 by rpki-client on console-ams.rpki-client.org