Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa
File:                     e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa (raw, json)
Hash identifier:          4WpANjLK/ZPEOsOH1OZRYGC7AbfsMzV2dM6tayLDoY4=
Subject key identifier:   18:E3:EF:59:65:57:E5:60:91:9D:4F:CE:BB:3F:96:29:F8:62:35:0F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B8E3B207E93FB990C21AC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa
Signing time:             Mon 18 Mar 2024 22:10:20 +0000
ROA not before:           Mon 18 Mar 2024 22:10:20 +0000
ROA not after:            Sun 16 Jun 2024 22:10:20 +0000
asID:                     15169
IP address blocks:        104.134.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:e3:b2:07:e9:3f:b9:90:c2:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:10:20 2024 GMT
            Not After : Jun 16 22:10:20 2024 GMT
        Subject: CN=999ab063-5a16-48de-ad90-5abde4527087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:c0:ef:35:b0:6d:61:8e:fa:f8:74:b3:b5:
                    19:44:53:fd:0d:94:eb:e7:8c:7b:13:a4:01:87:b0:
                    bf:0a:e2:44:f7:25:c2:06:e1:c1:e7:9d:ca:11:f4:
                    81:df:d9:b9:7c:90:31:b4:30:2d:30:3b:94:00:36:
                    57:b4:da:55:dc:37:03:54:ae:ac:a5:2c:9a:8e:a3:
                    11:98:29:57:ce:d0:65:a4:37:69:cd:dd:79:28:4c:
                    48:00:89:c5:5d:e3:c2:27:2f:66:7e:e9:f8:7f:92:
                    b0:79:8b:30:99:4b:a1:15:61:13:e8:ae:56:54:12:
                    b9:e3:84:b6:1a:3a:f7:a1:d7:6a:48:a1:cb:db:fb:
                    b6:1b:db:d9:b7:dc:10:dd:94:31:09:55:b3:60:ef:
                    8c:a0:5e:9b:9d:b1:0d:bc:e6:f2:08:9f:29:ee:9d:
                    60:b8:dd:67:5c:7b:e0:3a:97:b2:25:ed:a3:de:84:
                    0d:75:ca:ec:c9:46:2e:d4:4a:2f:ec:12:5f:64:39:
                    97:62:44:56:16:e2:24:a3:15:45:f7:9c:fc:f1:3c:
                    86:54:24:04:29:39:86:a2:00:15:67:c2:af:04:de:
                    ea:04:67:3f:30:12:35:45:8d:72:02:7a:bd:bb:39:
                    6b:ac:f3:c1:58:7e:20:72:49:65:65:8b:c5:f4:e5:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E3:EF:59:65:57:E5:60:91:9D:4F:CE:BB:3F:96:29:F8:62:35:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:98:52:46:13:c9:9b:db:ea:2d:dd:4a:c6:7e:c6:35:cd:07:
         a1:1e:65:62:ad:90:db:d6:11:d5:57:f0:0e:14:bb:b2:44:f0:
         0d:96:79:48:4a:6f:a5:58:19:92:3a:9b:ea:54:61:3f:2e:a2:
         d5:99:68:99:e2:b5:58:ff:d5:79:7d:91:fa:95:c1:2a:5e:a7:
         61:bd:32:e9:e1:ed:b4:a1:22:25:b6:ab:6e:97:25:f0:fa:74:
         ed:bf:4d:9b:1b:31:de:11:38:44:35:f0:c2:14:e9:69:79:e8:
         83:21:e2:ee:1d:38:32:2c:60:c8:35:70:37:e2:c0:ff:46:2d:
         e2:f3:4a:51:7a:9c:0e:11:49:68:49:6e:60:f3:80:4f:88:6e:
         60:58:0f:ba:d1:af:44:3f:76:23:24:9d:b2:93:cb:b4:1e:7a:
         03:af:7a:54:39:4c:48:c7:c5:2b:1b:b2:41:20:9d:91:55:a8:
         80:bc:9d:9b:cd:c8:32:86:48:09:01:1e:9f:fe:25:18:dd:9b:
         6a:97:7b:b7:24:25:89:89:63:98:31:e6:ef:8f:3b:9e:e0:0d:
         90:03:f0:bb:74:22:57:75:64:33:bf:b0:59:d5:60:ef:ec:6f:
         01:b2:cf:dd:f6:20:11:63:72:59:0f:96:77:ef:1d:d8:ca:1c:
         9b:af:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:08 2024 by rpki-client on console-fra.rpki-client.org