Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5db2563-2f0a-3cbf-9bd7-7896e2274216.roa
File:                     f5db2563-2f0a-3cbf-9bd7-7896e2274216.roa (raw, json)
Hash identifier:          EXJhnUjgXl4Ne+8jsMNfXmOZLJUWVFy6m9eWXcKYjK8=
Subject key identifier:   E7:0F:6E:0D:9C:D4:CC:24:17:86:A3:C3:D2:BA:E6:EF:EF:A2:1A:5D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847B5315029C3CA7E0B9D39DA80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5db2563-2f0a-3cbf-9bd7-7896e2274216.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     271
IP address blocks:        134.87.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:50:29:c3:ca:7e:0b:9d:39:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=d4d9adca-5cb2-4607-afd9-f46634079741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e4:a0:eb:bf:53:28:b3:65:80:70:fe:24:24:
                    ef:9d:b5:d2:23:1c:ed:e4:cc:1f:46:52:7b:83:6c:
                    ce:bc:d5:9c:de:57:9e:83:0d:09:84:ef:25:31:a8:
                    8a:88:94:41:aa:a6:b0:5e:96:56:49:2b:2e:ac:e8:
                    2b:82:ce:0f:af:dd:3e:ce:46:bb:55:f8:89:5b:4b:
                    69:d2:9d:60:cf:f1:a4:6f:c9:45:1a:7d:4f:ed:70:
                    b0:2a:0c:73:44:48:c5:84:a1:83:2f:39:b6:40:37:
                    d9:b6:93:c7:85:fa:fb:a2:0d:24:54:ea:0c:20:62:
                    d2:c6:6e:f0:fb:42:f5:d3:f4:21:97:69:69:13:1d:
                    dc:d0:49:16:9b:14:fa:34:34:ad:eb:9f:96:6d:36:
                    45:ef:9b:d1:22:a4:32:ab:8a:4a:fc:b7:25:fb:13:
                    13:bf:78:fd:46:32:b3:14:e4:31:9f:8f:e3:33:fb:
                    7d:a3:be:79:78:9c:13:6b:60:e2:fa:76:04:98:99:
                    c9:16:fc:26:4d:7d:05:11:21:ca:c8:ac:31:5a:47:
                    9f:74:e6:08:91:fb:4f:20:b4:70:46:6a:ba:dc:0a:
                    96:88:23:99:5d:b4:fd:fc:19:26:ec:0d:06:ae:45:
                    d0:07:a9:9d:dd:42:da:8e:b7:35:a0:ad:16:20:63:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0F:6E:0D:9C:D4:CC:24:17:86:A3:C3:D2:BA:E6:EF:EF:A2:1A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5db2563-2f0a-3cbf-9bd7-7896e2274216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:49:67:b9:29:bd:16:ad:88:de:eb:04:38:05:32:71:c1:
         05:b1:c9:38:80:ef:e4:46:05:78:8a:7f:f4:23:33:fd:e4:4d:
         f3:f2:a2:7b:0e:9d:94:ab:da:e0:6e:8a:3c:4b:7e:61:aa:03:
         92:a2:a2:fb:1e:bb:55:11:2d:4a:6d:6d:30:ac:b7:0a:e2:2b:
         b3:fe:4f:e8:45:e3:e5:ff:67:a3:26:bd:dc:75:42:f6:3f:0e:
         12:6a:f6:95:99:27:61:bf:d2:d7:6f:f5:6d:c0:bf:7a:74:3a:
         e9:a7:39:b0:9d:db:13:05:2a:b1:72:29:ec:de:6c:a4:ef:6c:
         cd:8e:42:32:eb:ee:07:47:4e:a9:e5:e0:d0:6f:4b:14:ca:c3:
         b6:f3:ed:75:d6:1f:4d:01:75:f8:6f:ff:52:ec:d6:cd:0e:6a:
         5f:9a:ef:fc:29:09:99:96:56:31:d0:e2:15:0f:2e:9c:e9:34:
         92:84:20:ef:03:47:b4:11:cc:b7:7d:84:6c:48:38:95:ca:d9:
         6e:f2:f4:60:5b:7a:52:a2:c7:55:bc:ac:85:bb:e0:b4:5c:8d:
         3b:f1:fe:3b:76:2b:46:76:86:07:5f:e3:6b:54:60:88:e6:f3:
         93:b9:c0:41:dd:bf:41:e5:7d:e0:8c:8c:3b:33:ed:8d:34:9c:
         3a:7a:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org