Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6e5c420-176b-34b8-86d3-689412b0fe3f.roa
File:                     d6e5c420-176b-34b8-86d3-689412b0fe3f.roa (raw, json)
Hash identifier:          kihLCSjsR+bqgW+G+n5jqJZwzcbv+AUl7Px9+wSm+hE=
Subject key identifier:   7D:C4:4B:50:0E:60:F1:6B:0A:5E:85:C2:1E:70:12:9B:86:2E:63:CC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453583B4269D5C47DA650D1780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6e5c420-176b-34b8-86d3-689412b0fe3f.roa
Signing time:             Thu 14 Mar 2024 21:49:17 +0000
ROA not before:           Thu 14 Mar 2024 21:49:17 +0000
ROA not after:            Wed 12 Jun 2024 21:49:17 +0000
asID:                     395973
IP address blocks:        104.134.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:b4:26:9d:5c:47:da:65:0d:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:49:17 2024 GMT
            Not After : Jun 12 21:49:17 2024 GMT
        Subject: CN=820c24be-8f3d-4ca2-a910-507a9d2e1e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:cb:d8:47:f2:22:41:71:fd:7e:b2:ac:59:
                    1d:0b:17:0c:ab:6b:e1:d9:35:4f:cd:07:51:e9:3f:
                    c0:2e:4d:c7:c8:2e:bb:b7:e9:a1:88:69:e6:f2:6f:
                    5c:a7:ac:d8:af:f5:f2:bf:9f:c5:5c:1c:3d:ba:aa:
                    f7:cf:1a:3b:42:58:72:d2:2f:57:4c:7b:35:bd:df:
                    e1:e8:42:bb:dc:ed:08:26:a6:fb:bd:86:19:17:96:
                    96:68:6b:9e:9c:16:31:f8:bf:56:13:a8:47:5c:67:
                    fe:97:cd:d0:b7:53:8b:39:72:70:81:d8:80:df:26:
                    1d:4b:f7:bd:04:63:ef:de:fd:60:58:26:d4:52:15:
                    47:1e:3b:a9:f5:24:b5:ae:21:c6:90:02:9e:41:e2:
                    01:88:24:f3:72:d6:79:e4:3f:01:f8:9e:a5:ab:1f:
                    24:49:0e:f0:b9:43:ff:73:cf:a8:8b:87:bd:6a:87:
                    44:c2:c5:98:48:bc:72:bb:84:65:d8:25:03:3f:e5:
                    de:28:c5:3e:84:30:a9:d3:8d:c3:0e:a5:8e:7c:a9:
                    f0:d3:2b:1a:27:b6:f0:ba:de:f6:f1:72:ac:ef:f2:
                    bf:eb:16:43:ec:2a:84:5a:11:54:e6:f4:ec:91:49:
                    8d:86:94:3e:85:4f:fa:a1:26:9b:85:49:c9:96:75:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:4B:50:0E:60:F1:6B:0A:5E:85:C2:1E:70:12:9B:86:2E:63:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6e5c420-176b-34b8-86d3-689412b0fe3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:e3:54:7c:a2:f0:c2:bc:86:65:c7:85:5f:d8:01:78:ca:
         96:74:b1:1e:01:0f:1e:ce:6b:a6:6d:91:0e:11:7f:8e:da:37:
         53:d2:44:4f:5f:e3:6d:60:7e:8f:b5:c9:ff:9f:76:3d:17:d4:
         2e:19:7d:33:83:17:c1:81:5f:73:28:35:c2:44:fe:06:c4:f6:
         48:7b:5e:30:2d:94:74:87:b9:74:c0:77:51:3d:61:c5:82:e8:
         ed:53:3c:3c:56:e3:de:41:67:d7:c5:3b:9b:0c:bd:03:0a:2e:
         f8:50:54:8d:c9:16:80:33:90:b9:3f:64:70:b0:27:52:6c:1b:
         a4:5a:8f:11:15:97:6a:1a:92:7d:7f:4f:5c:44:f8:be:38:ce:
         14:58:18:5d:be:16:ce:08:5f:e4:21:95:f4:67:27:b5:9f:e5:
         77:22:a4:82:b5:97:ac:da:df:3d:64:59:39:19:4b:7f:4d:7b:
         cf:ba:6e:2f:fc:d8:eb:d4:dd:80:37:d1:19:fd:f2:5f:94:56:
         3b:ae:e1:cf:74:aa:8b:de:7c:d4:e9:4e:7e:6b:f0:b4:89:10:
         13:91:4c:cc:66:5d:28:c0:23:a2:c2:c6:1e:61:82:c0:1b:f6:
         c9:be:fb:55:10:37:5e:c4:a8:70:10:74:e1:b3:ff:65:d0:27:
         6b:24:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:11:42 2024 by rpki-client on console-ams.rpki-client.org