Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa
File:                     cfd5bacf-b676-36e1-b190-4f38b062ea59.roa (raw, json)
Hash identifier:          iuURiGHUKCouePS5SYbWdMgsxRO72M2Ug2swJ0rhS9Y=
Subject key identifier:   B1:3C:A0:F1:BA:F6:C3:03:87:10:DF:97:37:CE:3F:16:CA:7B:29:98
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B862010B617581AB2A4FE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa
Signing time:             Mon 18 Mar 2024 22:09:19 +0000
ROA not before:           Mon 18 Mar 2024 22:09:19 +0000
ROA not after:            Sun 16 Jun 2024 22:09:19 +0000
asID:                     36411
IP address blocks:        104.134.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:62:01:0b:61:75:81:ab:2a:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:09:19 2024 GMT
            Not After : Jun 16 22:09:19 2024 GMT
        Subject: CN=319cfe46-19b1-44dc-b27f-c63b67ccb2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5c:da:d6:d5:f2:f0:ed:15:e6:93:b5:8e:9a:
                    b5:49:43:18:d2:b2:c1:90:cb:97:0e:4f:cc:ba:4a:
                    d3:60:39:9b:8e:d1:bf:d8:f1:f7:8f:76:08:a4:0d:
                    ca:a7:f2:51:93:15:4d:43:92:a3:6a:b7:22:7a:98:
                    3a:07:c9:f0:14:00:6c:b9:ae:82:dc:ec:89:3a:31:
                    2d:f6:ce:69:00:c8:bd:d2:88:da:8f:05:a3:7a:c9:
                    00:19:94:5f:54:d4:01:28:86:dd:4d:bc:f6:6f:a2:
                    8d:d2:dd:62:aa:07:e9:d7:0d:f0:b6:fc:c2:f9:62:
                    74:6f:81:4a:74:5a:5d:5f:a2:d3:05:59:78:f1:62:
                    eb:63:b6:16:a2:ae:39:05:be:f1:d4:11:e3:fe:42:
                    01:67:ee:fe:25:9f:c7:1f:96:2d:76:34:0b:e9:6e:
                    18:97:32:9c:0b:aa:a3:96:73:54:dc:d1:d9:59:63:
                    5d:ce:49:97:54:b9:24:07:ea:42:7c:50:12:92:c9:
                    0b:17:53:82:ee:33:af:54:2b:b5:fa:4a:1d:3a:db:
                    ff:ad:bb:5a:53:b4:8d:05:8b:12:42:c8:51:a3:be:
                    e5:29:07:b2:14:18:16:08:95:ee:49:d6:48:47:37:
                    43:3b:9b:d6:8c:6c:84:56:94:fa:46:ea:be:ba:90:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3C:A0:F1:BA:F6:C3:03:87:10:DF:97:37:CE:3F:16:CA:7B:29:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4e:b5:b6:f7:93:2d:27:fb:51:96:b4:c5:46:65:33:bc:16:
         a4:2e:24:a0:d5:75:a2:23:70:7b:b4:b5:72:c5:7a:73:d3:d3:
         0d:b8:c7:3d:76:7e:b2:b9:d2:63:d6:f4:e2:82:f6:96:d1:a2:
         9e:58:03:0f:43:37:63:ce:3c:ca:cb:78:bd:b1:1e:a3:f1:d2:
         4d:05:e5:54:ce:c8:40:1d:5c:a8:6a:44:57:22:49:aa:b4:22:
         71:32:f8:01:e0:0e:28:04:c5:35:f8:80:33:95:40:f6:e5:37:
         a6:38:72:40:62:d7:38:fa:82:1d:9a:27:7f:5a:d2:0e:81:03:
         4e:54:8c:4e:c5:07:8f:3a:64:ce:26:10:e1:57:4d:39:45:5f:
         dc:57:c4:46:a9:35:f5:23:dc:ab:9f:3f:8c:f3:cd:ea:e5:cb:
         98:78:b7:1d:0d:76:30:d2:94:6a:24:57:c5:64:bd:2c:b1:3f:
         97:84:db:25:15:2d:53:75:25:99:aa:4f:a1:c7:27:7d:5e:07:
         de:cb:26:13:e0:05:93:35:e9:7d:62:73:fd:af:2c:ed:1e:91:
         5b:f5:4b:a6:99:d7:63:3b:30:43:d1:35:03:d1:9f:7a:e9:c3:
         4d:b2:98:20:7c:a6:37:51:00:44:e0:37:90:3f:97:2b:b1:52:
         4a:0c:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 10:23:44 2024 by rpki-client on console-ams.rpki-client.org