Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa
File:                     dfd93ee2-24f3-3c72-927e-16cb7326efed.roa (raw, json)
Hash identifier:          s0VeNIxHI0cvFe/xSb8PxRQUJc5dumj619Qv0lv7qdc=
Subject key identifier:   9E:AF:A7:B8:C7:8E:9C:A1:36:32:B6:B4:3C:C3:AF:A1:8C:A2:19:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848AF2BBAC6E1A8F4C67EA60C60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:ba:c6:e1:a8:f4:c6:7e:a6:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=3b4987ad-3c31-467d-aab1-2a3c9461f14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2b:85:57:5f:cd:7f:df:13:10:26:8f:95:6f:
                    7e:61:a9:95:97:84:0a:c4:39:6a:50:8c:e1:22:99:
                    cd:06:5b:0d:22:e9:0f:ba:8e:24:b6:eb:1c:24:87:
                    06:e8:8c:05:59:a1:d7:e5:32:61:00:33:e0:4e:3f:
                    11:23:74:a6:fd:d9:08:b2:1c:15:5c:0c:7f:f5:61:
                    70:38:4c:ad:c3:1f:e2:1a:cc:97:6f:46:28:e9:32:
                    96:bc:72:65:c3:42:90:6e:9a:b9:90:70:55:fb:2f:
                    1c:f3:73:74:98:76:fc:0e:df:76:2e:96:04:49:9e:
                    d9:ce:b6:d9:96:1a:de:34:eb:57:3c:2e:22:c3:50:
                    2f:55:05:96:9a:30:de:98:05:96:40:4b:58:2d:50:
                    ab:0a:46:67:b8:ec:8a:67:96:ae:78:41:68:78:db:
                    88:05:86:99:61:6e:a1:dc:21:9f:c7:6d:f8:a7:65:
                    06:da:5c:58:ff:19:80:e1:76:12:ec:ae:b2:20:ab:
                    6d:51:83:3a:3b:f4:fe:89:89:ee:34:5b:57:d8:2a:
                    be:dc:85:c2:dc:9c:45:22:2d:40:b9:f5:5d:92:3b:
                    28:ac:bc:1c:61:51:26:69:cd:67:00:93:f1:62:44:
                    37:6a:02:bd:03:33:18:34:5b:b9:07:6f:bf:b3:59:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:A7:B8:C7:8E:9C:A1:36:32:B6:B4:3C:C3:AF:A1:8C:A2:19:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9a:04:86:0e:a9:af:2a:44:48:d0:b6:bf:e9:a3:e3:fd:55:
         04:58:82:e5:e8:f9:a5:72:6c:ca:de:27:c6:f9:27:5c:fb:ca:
         58:60:30:2e:a3:03:33:00:3a:0a:9e:df:52:2d:a4:2b:cc:82:
         c3:d5:19:73:ae:df:bb:34:5c:8e:c4:69:20:a3:ce:fa:3d:be:
         db:b5:fd:8a:03:4d:13:3a:2a:d1:b6:92:c6:32:8e:bc:59:87:
         a5:bc:70:22:47:b9:f4:e0:fa:1a:ab:d6:78:49:fe:86:71:8b:
         70:bc:91:59:fb:42:3c:05:12:46:90:f0:fb:88:55:c8:64:f1:
         59:75:fc:e0:49:75:e7:7c:9e:6f:91:78:43:31:b7:f6:35:b7:
         9d:cd:23:97:56:8f:46:3e:01:62:86:cc:21:4c:db:c8:86:ec:
         f2:39:11:c7:7d:22:37:b5:86:fd:39:72:e7:c0:4c:67:9d:0e:
         3f:c3:4a:e9:76:e7:e4:b3:3f:a3:02:24:61:00:2a:92:cf:8f:
         b7:5f:33:12:b9:46:cc:24:55:c7:0f:df:75:be:7d:8a:e9:3f:
         3c:49:b6:f8:f8:a3:ae:67:8a:ca:f1:9f:19:e2:2d:ab:fe:ad:
         7e:9d:0c:50:5c:93:82:da:9a:d7:fb:b2:2e:d7:4f:aa:a2:a6:
         1f:3b:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:40 2025 by rpki-client