Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d81bc6e9-a315-3ff5-81bd-eef1170aee87.roa
File:                     d81bc6e9-a315-3ff5-81bd-eef1170aee87.roa (raw, json)
Hash identifier:          Xw8NWj6mTqI15dzt7umnxsb+hnWLibLGXcD7a1U7F9w=
Subject key identifier:   6C:F8:07:DA:E5:87:53:86:3C:3E:4C:AE:68:83:E9:0C:B3:8F:B7:96
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535893538CBB7E7E0EDE2F380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d81bc6e9-a315-3ff5-81bd-eef1170aee87.roa
Signing time:             Thu 14 Mar 2024 22:00:22 +0000
ROA not before:           Thu 14 Mar 2024 22:00:22 +0000
ROA not after:            Wed 12 Jun 2024 22:00:22 +0000
asID:                     41264
IP address blocks:        104.133.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:89:35:38:cb:b7:e7:e0:ed:e2:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 22:00:22 2024 GMT
            Not After : Jun 12 22:00:22 2024 GMT
        Subject: CN=17d46be2-00e9-4a27-90f2-53bede819486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:57:ce:15:9b:5e:40:28:8b:86:dd:68:ec:
                    da:a9:bc:f5:62:24:5e:f1:ff:ba:c0:17:e9:7a:c5:
                    d8:37:b3:68:b6:45:99:31:ac:ae:64:70:ac:32:e9:
                    46:e1:80:81:70:cd:cc:79:9e:fd:00:ad:3e:c2:97:
                    09:9f:17:df:be:6a:c4:87:66:34:6d:f6:46:f2:bf:
                    94:38:d6:d6:7b:67:d8:e6:e3:a8:34:1e:a9:d0:20:
                    1c:fe:49:dc:4f:ca:02:86:4d:5c:fd:a9:45:f9:be:
                    80:17:54:00:e0:7e:a9:0c:05:49:42:b5:29:7f:72:
                    09:9e:94:10:4a:74:84:83:46:e1:79:89:73:5d:f3:
                    39:4f:f9:b4:33:8c:ee:61:73:4c:41:26:78:94:a6:
                    9a:ac:4b:da:74:6e:31:3f:a2:4a:6b:46:50:94:fb:
                    83:9e:3e:23:20:f2:8f:2d:29:9d:eb:01:4a:17:bd:
                    d1:a9:89:e6:50:f7:d0:3b:51:7e:a1:a0:05:d3:6b:
                    f0:a2:88:f2:6c:32:9a:b7:95:d0:bf:a0:d9:e5:a9:
                    f1:34:73:31:b7:ee:e7:bc:35:97:ab:8e:df:d8:7b:
                    e3:e9:74:5f:b7:d4:de:07:cf:0f:14:c7:14:2e:fe:
                    89:b8:5a:ab:67:a3:e5:b1:c2:18:1b:c5:3d:66:3c:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:07:DA:E5:87:53:86:3C:3E:4C:AE:68:83:E9:0C:B3:8F:B7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d81bc6e9-a315-3ff5-81bd-eef1170aee87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:b4:71:b5:46:7d:0e:84:c4:9d:5f:7b:b5:86:12:ba:68:
         49:c6:bd:da:c9:de:8e:3f:43:88:f0:d9:d1:e9:14:b3:58:5b:
         c2:4a:86:c7:cb:f4:23:d7:f7:15:0c:79:f4:81:c4:08:5d:26:
         58:d8:a1:e2:50:71:d4:77:c5:e3:99:0c:28:02:bd:e1:cc:fd:
         9f:7f:56:dc:94:d2:45:20:90:7e:27:a7:97:92:d0:4a:ba:a5:
         dd:fc:2b:6e:06:d1:bb:d1:56:d4:5c:9c:d9:c0:7b:4f:cb:50:
         e8:83:e9:90:3c:41:a8:1b:24:05:04:69:88:67:5d:08:86:1a:
         2b:ce:31:5c:73:d2:c9:16:e5:8a:f8:c5:8d:3a:aa:47:89:35:
         83:58:76:78:53:c1:d2:7f:ab:c6:6e:2b:14:ee:11:d5:15:96:
         9f:0b:01:cc:fb:cd:a7:b4:3f:4b:c3:fa:69:59:95:af:75:f5:
         ba:ad:71:bc:ab:dc:ac:26:bc:37:ec:39:9e:7f:98:29:c7:18:
         54:d5:97:a7:dc:06:52:0d:e1:9b:33:04:60:9c:69:66:fd:8a:
         05:86:98:59:90:9f:4b:cf:ce:79:3a:40:42:c9:27:5b:b5:22:
         48:47:d5:36:93:08:ba:c1:62:49:a1:91:1a:2a:00:e0:f9:66:
         a6:9f:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:07 2024 by rpki-client on console-fra.rpki-client.org