Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa
File:                     dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa (raw, json)
Hash identifier:          kczpH6prcH1w9zj8Q3liKv3Vk2pc8smnfKLtMYaNUZY=
Subject key identifier:   EE:CB:B4:A0:5A:76:98:46:F2:33:2E:4A:06:40:3A:3C:B6:28:2E:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358535DEDA86A209F48EB140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa
Signing time:             Thu 14 Mar 2024 21:52:19 +0000
ROA not before:           Thu 14 Mar 2024 21:52:19 +0000
ROA not after:            Wed 12 Jun 2024 21:52:19 +0000
asID:                     395973
IP address blocks:        104.134.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:35:de:da:86:a2:09:f4:8e:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:19 2024 GMT
            Not After : Jun 12 21:52:19 2024 GMT
        Subject: CN=c7e798bd-749e-4c11-ab33-7a9f3470957d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:06:dc:00:d7:28:30:8a:8d:e7:cd:83:e9:
                    1d:61:21:56:8c:f2:cd:cd:04:62:ac:66:bc:05:8e:
                    83:0a:af:05:79:7c:5e:57:aa:5d:43:9f:fc:5f:88:
                    36:01:8b:62:91:67:88:35:49:12:2e:12:bc:40:fe:
                    a9:64:8a:40:8d:80:44:26:c8:26:3b:e3:79:4b:76:
                    9e:f3:eb:64:64:92:5b:9c:97:9e:57:6f:26:d5:7b:
                    72:df:da:c5:55:37:03:f8:ad:b8:44:bb:7c:92:35:
                    74:6d:25:6e:33:ee:ed:fa:82:ec:23:77:89:67:cf:
                    21:92:ba:4e:1d:e8:f2:9b:9e:07:b0:dc:25:96:d6:
                    22:a9:94:2c:f8:ad:50:69:a8:09:78:23:8d:f4:0b:
                    ce:71:0e:87:ad:19:33:84:f4:20:c4:e8:5c:bc:a0:
                    c9:5d:e3:28:5b:c9:33:95:3d:48:13:75:e5:ce:bb:
                    de:2d:2d:00:3b:27:a1:c3:5f:f8:6c:85:10:68:74:
                    30:7c:be:63:79:86:58:df:a6:e2:b5:49:68:9d:fe:
                    64:6b:b0:27:42:c1:09:ee:58:39:a8:a8:d0:64:bd:
                    54:33:11:3e:cd:7f:6a:24:ab:41:a8:8b:31:02:5f:
                    d8:18:f5:c7:00:26:96:ed:06:1e:a0:95:5c:c7:c8:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:B4:A0:5A:76:98:46:F2:33:2E:4A:06:40:3A:3C:B6:28:2E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:df:d6:f1:83:f9:ce:09:d9:29:c9:56:c3:a1:27:85:c0:3d:
         65:ae:fd:5c:94:4d:74:e1:f6:83:2a:50:09:9b:d8:15:bf:00:
         62:24:64:90:9e:53:19:e0:d0:15:36:2d:37:0f:9f:4f:06:3c:
         d5:dd:54:49:f0:35:77:c3:cb:0e:a7:aa:87:57:ec:af:9e:6b:
         da:a8:a4:6c:0f:9d:8a:1b:6f:90:bb:30:84:0c:40:e3:8f:2a:
         24:e8:bd:79:ce:37:07:77:09:4d:53:cc:c7:bc:5e:29:aa:2c:
         48:e6:2d:a3:67:37:35:72:e6:42:0b:35:bd:ce:ef:93:80:da:
         8a:18:0f:b6:1a:cd:61:66:1b:db:aa:9e:53:31:4d:cf:6e:32:
         b1:d3:81:11:92:19:6b:5f:c8:6c:b0:1c:b3:5a:9d:c6:ed:75:
         43:98:e6:c3:70:27:c1:4a:6b:83:bc:2e:2a:ed:ad:33:07:2b:
         45:05:2d:41:6f:81:66:97:3b:be:e1:bf:27:60:c3:2c:cb:6e:
         c1:f1:7a:b8:98:b3:ac:35:7f:3a:15:f6:d9:85:7d:24:c3:bc:
         d0:b9:5a:fe:ee:eb:e4:fd:3c:06:15:35:ce:c7:2c:29:a7:fd:
         e6:d7:57:dd:46:0d:d6:22:5e:fa:5b:b3:55:46:9b:9f:94:fd:
         da:91:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:18:46 2024 by rpki-client on console-ams.rpki-client.org