Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05c84648-214e-320a-978d-e4fb85e1576e.roa
File:                     05c84648-214e-320a-978d-e4fb85e1576e.roa (raw, json)
Hash identifier:          KkjwPr5pqx8gw7neKHBhbCgaIWvzXkhNU/OZT1K0oK0=
Subject key identifier:   9D:9D:E1:74:1F:8F:0C:56:30:7B:EB:E6:00:7A:B4:16:4B:16:72:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535858A37D33F368695777000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05c84648-214e-320a-978d-e4fb85e1576e.roa
Signing time:             Thu 14 Mar 2024 21:52:59 +0000
ROA not before:           Thu 14 Mar 2024 21:52:59 +0000
ROA not after:            Wed 12 Jun 2024 21:52:59 +0000
asID:                     15169
IP address blocks:        104.134.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:8a:37:d3:3f:36:86:95:77:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:59 2024 GMT
            Not After : Jun 12 21:52:59 2024 GMT
        Subject: CN=b3240b5a-1056-495f-95e6-c837e6baa6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:f5:c8:9a:57:67:3c:71:61:9f:ad:90:55:
                    40:80:c1:8b:a2:c5:45:0e:f5:b5:a5:9b:06:93:43:
                    cd:67:ea:be:50:e3:36:d5:f2:1c:76:d3:aa:56:14:
                    52:92:a4:d3:bf:a8:21:ba:14:94:32:e2:c7:65:3f:
                    cb:c5:27:5d:b5:d4:a9:26:0b:40:75:95:e0:ac:2f:
                    ed:6d:e5:ce:40:a3:57:14:eb:30:dc:85:30:9f:b8:
                    77:df:6d:7e:07:14:8c:85:87:3c:25:55:f7:59:5e:
                    01:7c:25:ef:b0:92:64:84:9c:72:25:3d:5e:a0:3f:
                    28:47:da:67:8b:95:5c:61:39:4c:12:6c:78:3b:20:
                    c6:7e:3e:ce:ab:a3:ce:01:67:06:e1:82:86:ec:25:
                    90:0b:33:61:66:e8:a6:96:3c:46:22:01:39:1e:f1:
                    af:5b:6a:f7:e1:be:92:02:e0:89:20:1c:8c:6a:bc:
                    81:63:f4:ee:52:e3:16:4c:55:8b:65:13:7b:59:5c:
                    54:68:45:24:28:68:53:4e:7b:36:d6:b0:fe:97:58:
                    5b:60:0d:32:3c:b1:21:4c:52:e9:6a:3b:3a:66:82:
                    82:03:a3:1d:71:d8:28:57:70:19:82:73:90:ca:b1:
                    97:f7:ae:d3:41:86:c5:0e:67:dd:4c:1c:70:2d:16:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:E1:74:1F:8F:0C:56:30:7B:EB:E6:00:7A:B4:16:4B:16:72:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05c84648-214e-320a-978d-e4fb85e1576e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:7c:25:dd:92:cc:43:74:da:85:86:5b:4d:44:ea:d5:f4:
         f4:e2:ae:14:f2:42:e7:02:58:f4:9d:dc:8d:ad:a2:9c:a9:1a:
         98:e4:1a:f9:f6:1c:1c:a9:7a:60:a9:c9:92:3a:2d:54:76:42:
         ac:53:34:28:4c:a5:22:76:83:4e:30:ac:5d:04:e9:7d:2d:28:
         7b:f3:5c:05:a7:de:25:80:31:93:37:61:a3:4f:05:7d:eb:78:
         f8:ec:dc:43:d6:ec:1e:47:d5:f2:44:34:5b:55:59:d3:78:cc:
         eb:ce:a3:f4:9f:d4:d4:d1:73:f1:ae:a8:b6:ae:5a:d9:f7:0d:
         5a:7c:f5:f1:21:9b:a9:43:87:8c:5c:fb:58:8c:45:48:3b:93:
         37:a0:a7:05:bb:92:e5:2c:5a:db:a3:76:1b:2f:2a:95:74:b6:
         d6:8b:72:fc:4f:2a:2d:9f:a4:a4:c5:10:5a:10:7c:e5:dc:b0:
         f2:1a:a3:f1:e5:35:c8:fc:60:cd:03:29:ee:f1:61:3a:ef:8b:
         69:47:0e:c8:06:c9:3b:75:80:7b:7e:d9:34:12:19:7f:6d:57:
         a6:ca:58:71:9f:11:11:19:74:ed:4f:b9:4b:08:72:1b:43:73:
         83:27:bf:50:a7:53:bd:d6:ca:d8:e7:0f:88:96:69:b3:7f:f2:
         70:ae:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:15 2024 by rpki-client on console-fra.rpki-client.org