Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
File:                     d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa (raw, json)
Hash identifier:          ADH4zJ1cKkP5ehTxLWS5pMmMLbi/ZcCg2cQwgiK6KGE=
Subject key identifier:   79:5E:A5:B1:F2:F3:35:1F:9A:74:11:78:5C:5F:64:8B:E8:40:B2:D7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584ED9414AED2FD0AC2C800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
Signing time:             Thu 14 Mar 2024 21:51:45 +0000
ROA not before:           Thu 14 Mar 2024 21:51:45 +0000
ROA not after:            Wed 12 Jun 2024 21:51:45 +0000
asID:                     395973
IP address blocks:        104.134.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:ed:94:14:ae:d2:fd:0a:c2:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:45 2024 GMT
            Not After : Jun 12 21:51:45 2024 GMT
        Subject: CN=3ce45677-a970-4bd5-952a-73c7cd62c81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:bb:1c:e2:a6:b6:ca:16:29:96:76:42:3b:
                    fb:19:6d:07:e8:92:a1:c0:2c:96:98:d0:13:49:8c:
                    56:07:ba:49:6d:85:9a:8e:57:84:de:a0:e0:8b:95:
                    c4:c6:34:46:b3:71:59:88:ef:62:ce:30:30:41:ad:
                    8b:c1:5d:0f:29:17:54:81:e0:03:1f:1f:f5:9b:fe:
                    6d:f9:c1:94:6d:a2:56:9f:4c:b5:67:44:4e:ee:d1:
                    7b:57:86:69:a0:0c:81:f6:41:fc:d2:48:c2:c1:33:
                    93:e2:0f:fa:5d:b9:97:30:55:bc:5e:92:f8:00:95:
                    d9:88:65:2a:c1:17:a3:0e:0a:6a:85:03:bf:f6:78:
                    33:33:86:b9:7b:75:9b:8b:2a:a9:f2:a2:b9:16:4d:
                    73:5a:e1:d5:2c:07:17:8f:cf:18:08:a1:0f:c1:69:
                    0b:61:b1:d6:dc:30:2d:5a:1e:c7:97:8d:8e:8b:9e:
                    b0:35:b5:22:6a:90:40:ad:e1:97:a1:2f:04:96:f9:
                    ce:61:43:08:9e:8f:cb:1b:8b:38:8d:ca:d7:d8:fb:
                    f4:0c:85:cd:79:80:cc:03:4c:49:a8:58:e3:35:95:
                    a5:85:12:4f:43:50:77:df:ed:e8:49:e2:d3:87:f3:
                    65:78:f1:7c:33:70:ed:78:5f:8e:7d:f0:35:cc:2c:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:A5:B1:F2:F3:35:1F:9A:74:11:78:5C:5F:64:8B:E8:40:B2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:28:70:ef:99:ac:62:12:cf:f6:b4:0b:f5:fd:d5:1d:02:
         79:23:76:31:16:c3:09:3a:fc:6b:dd:8c:35:17:97:72:d9:8b:
         5b:18:20:ef:a5:9c:3c:99:13:ce:37:d6:23:81:28:a5:5d:c1:
         ee:97:d2:dc:16:be:91:59:ea:04:b9:26:64:9b:86:42:b6:49:
         60:b8:4d:44:9f:b9:4b:4d:ca:1f:58:f3:e6:90:2c:03:6b:ad:
         49:d1:74:1a:8e:47:d8:89:0b:7f:fc:0e:ce:f7:62:0a:7d:1b:
         8a:75:dd:6f:f1:6d:68:d0:dd:54:8d:fd:6c:bd:91:3e:27:25:
         87:e0:39:b9:2c:b5:d8:ad:f7:e1:8a:1b:ed:94:09:6a:6b:66:
         bb:cf:cd:82:f5:96:37:8d:84:f0:c5:3d:05:46:18:1f:72:7b:
         44:e3:d9:09:37:1c:bb:99:10:77:12:74:06:2b:0b:fc:f9:f0:
         6d:d8:05:76:92:dc:e5:02:4b:b4:0a:b0:d1:dc:75:67:39:d3:
         47:50:7f:05:d8:e3:ef:5e:82:d7:45:15:68:8e:9c:5b:eb:f5:
         de:f0:a1:a3:75:3a:b6:14:ec:4d:6a:2f:b7:42:0c:02:d0:6e:
         97:36:24:26:65:0b:46:5c:05:1b:f0:16:95:f0:45:eb:aa:59:
         36:5d:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:09:51 2024 by rpki-client on console-ams.rpki-client.org