Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa
File:                     04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json)
Hash identifier:          2OxJ5wXtk2VHxlUB2+ittWlOlmJJgDZYzso7oks+Q9E=
Subject key identifier:   E4:88:A5:9C:76:91:BE:8A:A6:2D:C6:94:97:96:45:98:BA:9A:60:23
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585B49375C98B8BCCDB2F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa
Signing time:             Thu 14 Mar 2024 21:53:19 +0000
ROA not before:           Thu 14 Mar 2024 21:53:19 +0000
ROA not after:            Wed 12 Jun 2024 21:53:19 +0000
asID:                     41264
IP address blocks:        104.133.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:b4:93:75:c9:8b:8b:cc:db:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:19 2024 GMT
            Not After : Jun 12 21:53:19 2024 GMT
        Subject: CN=63e263e3-a69f-4268-ac78-e9b0264fbb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:7e:9e:81:be:d5:11:01:61:8c:33:53:4c:
                    6e:2e:45:4f:6e:9d:e8:bb:b1:6a:3e:d6:15:ae:0b:
                    27:d3:6b:0c:43:23:09:cd:77:dc:40:a2:1e:da:a2:
                    cb:1a:aa:76:d5:aa:39:e6:dc:b3:8e:46:75:eb:61:
                    98:64:21:57:8b:cb:cd:bb:a7:d0:69:96:71:5c:86:
                    1a:66:b4:41:fc:58:7b:47:f0:f5:fd:71:bc:43:9c:
                    70:f8:30:c9:26:d1:1e:7f:0b:e2:72:87:cf:66:f1:
                    bc:d9:56:47:7b:10:8c:bb:dd:c8:76:c9:d7:65:55:
                    78:26:d7:77:b7:66:dc:e1:da:82:77:f7:7b:26:6a:
                    3f:7b:a4:2a:98:7a:36:6c:63:df:08:bd:f6:22:6f:
                    47:81:b5:b0:e2:57:b5:61:73:dc:b6:3d:55:6f:ea:
                    f8:d0:2d:05:1c:b8:a2:5a:45:2f:45:a3:1d:7b:b0:
                    78:3a:bd:8f:8d:ff:64:a8:82:3f:6e:21:bd:bd:c3:
                    fe:a4:63:7d:bc:44:13:78:99:06:72:76:18:a8:51:
                    10:61:b8:0f:03:db:3a:99:97:2d:b1:20:8b:8e:fc:
                    80:90:35:64:eb:d8:bd:f5:26:cf:0b:de:53:ee:ea:
                    fb:83:77:9b:0d:a1:a9:71:e3:04:4b:58:5a:32:63:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:A5:9C:76:91:BE:8A:A6:2D:C6:94:97:96:45:98:BA:9A:60:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:35:e3:15:43:47:eb:0a:46:a3:e2:5f:1e:0f:34:10:37:
         31:a9:28:a1:8a:66:ef:b5:00:a2:f3:1f:ff:a5:fc:5a:37:05:
         55:0b:c9:c9:af:8a:90:c0:14:af:65:6c:9a:20:3e:1e:52:e0:
         bc:df:65:4c:e0:4b:f5:f1:12:79:4c:e1:2b:a6:40:15:92:36:
         3a:4a:ca:9f:f2:78:16:8b:f9:86:34:6f:1f:9c:07:d7:e7:22:
         b3:67:21:cc:93:82:62:a3:3b:13:7c:c5:8d:40:65:80:15:cf:
         ff:1c:4d:d0:a8:c9:ae:c4:d3:8c:6a:b8:69:0e:5c:34:42:6e:
         cd:68:54:f4:0b:49:e2:8f:bc:04:d3:ca:7a:fb:31:16:0d:26:
         08:e3:6b:96:f0:f6:b9:9b:21:34:bc:c4:f1:c9:51:6b:db:f8:
         bd:32:71:3d:59:cd:a7:c6:59:25:92:34:4d:5e:70:ae:26:f1:
         4f:bb:59:9b:10:98:da:43:95:d1:b1:52:0a:e8:17:21:a1:c7:
         ea:53:01:37:b7:46:65:a8:77:55:7b:c6:d7:51:6e:94:2c:d1:
         1a:d6:3d:00:c7:b9:42:d6:3e:d7:34:6c:74:ee:f6:dc:09:fd:
         65:b8:8d:68:41:af:41:6a:9b:24:f7:56:82:07:a3:b4:cd:81:
         a4:a8:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:24 2024 by rpki-client on console-ams.rpki-client.org