Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17017173-73d0-3433-83e6-cdd80b424777.roa
File:                     17017173-73d0-3433-83e6-cdd80b424777.roa (raw, json)
Hash identifier:          qEVXpKJ7+BqhQaSTADfXXQ/ewjbgQhrSC6u4GwNgDFs=
Subject key identifier:   4D:AA:B5:4C:AD:BF:EF:A1:F4:C4:54:1E:4E:4C:70:8F:9D:36:66:90
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A18C1DE2C6D7F226C0EBC
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17017173-73d0-3433-83e6-cdd80b424777.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:18:c1:de:2c:6d:7f:22:6c:0e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=b86172ef-483c-4580-8808-91e648429404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:a0:b8:c2:0d:79:0b:bf:8d:9e:c6:a5:4f:
                    db:81:37:90:d5:b0:3a:90:44:a7:79:67:0c:20:17:
                    11:d6:f6:75:11:c6:86:6e:d0:10:d9:3c:0d:14:75:
                    64:41:da:44:8d:b5:a6:92:86:b7:94:39:52:ac:ef:
                    7f:db:1a:5a:52:1b:95:a2:04:95:a7:3c:1c:5a:b9:
                    d3:b6:99:f5:8a:f2:07:55:f9:9e:d2:4b:27:f8:a8:
                    81:38:4a:42:bb:3f:c4:5b:06:16:69:cc:18:03:24:
                    27:92:5c:51:d4:d2:9c:34:cc:e8:0e:17:61:1f:40:
                    83:b8:d1:6d:83:3c:34:ba:11:0f:95:c7:cf:9d:e5:
                    68:10:6d:01:9c:61:f1:74:2c:c6:51:17:40:aa:c0:
                    a0:2d:c1:3f:43:31:f5:46:38:6d:4e:17:45:0a:2b:
                    4e:c5:b5:c6:5f:85:49:1a:41:e5:2f:3b:7c:28:0d:
                    52:47:93:7d:18:ab:13:f4:62:29:02:37:42:75:32:
                    83:8f:ba:5b:38:e1:31:51:73:87:ad:41:4f:84:4f:
                    94:1a:a9:08:ce:ce:c7:88:bf:5c:4d:4b:37:82:a9:
                    05:83:0f:17:17:e1:5a:7e:e3:2b:d7:af:25:3e:2a:
                    8c:88:6d:06:60:b8:e0:19:57:04:37:4e:ff:ce:01:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AA:B5:4C:AD:BF:EF:A1:F4:C4:54:1E:4E:4C:70:8F:9D:36:66:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17017173-73d0-3433-83e6-cdd80b424777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:94:73:84:86:56:f4:ab:bd:43:5f:90:b9:ab:99:0a:83:4e:
         53:53:31:a9:56:21:52:1e:05:69:54:db:6b:33:ab:e7:ab:8d:
         a2:6f:eb:82:6d:a4:b6:44:24:69:a5:80:41:48:bf:18:9a:d4:
         24:30:58:56:46:ae:d9:3a:e0:f5:a2:cd:11:df:98:2b:a7:55:
         3a:71:24:82:29:e8:8a:74:55:65:70:0d:28:e7:ce:22:87:7e:
         9d:a4:90:aa:17:a4:07:f5:01:17:01:ae:4b:b7:56:af:2a:ac:
         b5:05:f1:2a:a4:5b:62:51:02:12:82:e4:da:80:76:a4:9b:60:
         01:fc:20:96:ab:93:47:0e:ea:1b:15:e6:55:50:11:32:bc:3b:
         20:5d:91:12:7a:97:2a:84:a8:6f:c3:12:d2:2a:70:e9:19:70:
         16:00:be:34:8d:7d:ea:3a:6a:10:63:4b:30:39:d7:ac:b9:66:
         d8:5b:82:0c:2d:37:35:3d:e8:3a:a1:69:92:5a:f7:62:cd:b0:
         ad:19:39:fc:81:01:d5:1c:cd:f9:e6:e3:59:6e:3b:94:40:fa:
         53:cf:bc:9d:5f:5e:fd:94:18:f4:fc:1d:d4:90:7b:59:0c:65:
         52:b4:72:c7:dd:51:b1:f4:9b:31:b3:00:58:cd:dc:08:47:db:
         1f:fa:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:42 2024 by rpki-client on console-ams.rpki-client.org