Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761f8cd-b891-32b3-8fab-93555377d9a0.roa
File:                     1761f8cd-b891-32b3-8fab-93555377d9a0.roa (raw, json)
Hash identifier:          uf4Lp4Cfv6Ab2lEEvKwMDa96wlcAahYVw78WLuR3EU4=
Subject key identifier:   CE:B6:25:A2:C6:2B:5E:7C:A0:DC:6F:44:57:0D:95:B8:7C:28:A3:E6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535861609B1B335AD31D7B900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761f8cd-b891-32b3-8fab-93555377d9a0.roa
Signing time:             Thu 14 Mar 2024 21:54:05 +0000
ROA not before:           Thu 14 Mar 2024 21:54:05 +0000
ROA not after:            Wed 12 Jun 2024 21:54:05 +0000
asID:                     395973
IP address blocks:        104.134.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:16:09:b1:b3:35:ad:31:d7:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:05 2024 GMT
            Not After : Jun 12 21:54:05 2024 GMT
        Subject: CN=80f34272-bd04-4673-8245-e65b06d6d8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:a5:fd:7e:1b:68:de:35:6b:61:5b:e9:2c:
                    ab:fc:25:d9:22:8e:ce:4e:39:65:8f:6e:9e:a7:91:
                    6f:90:6f:27:b6:de:7b:27:e4:41:86:6b:94:d8:cb:
                    b2:e9:c3:6e:62:aa:5d:86:c2:05:33:d4:e3:0b:9d:
                    dd:ea:01:25:0e:e2:1a:8f:6b:ac:f8:25:e5:0e:51:
                    79:61:9b:80:4f:b1:ee:d6:2a:20:71:5c:66:dc:78:
                    1b:55:24:6b:c2:14:db:dc:4d:41:a3:74:d8:9b:28:
                    8c:ed:5b:8a:0c:d3:4c:f0:04:4f:2b:61:7a:d3:0f:
                    4e:b8:e5:90:bc:00:ea:fd:a7:60:7d:4e:7e:c5:2c:
                    6f:b6:a7:55:52:ad:b8:03:92:3f:5d:5e:57:29:a6:
                    4e:6e:d8:d9:07:7a:bc:7c:d1:58:33:ff:9b:cf:7b:
                    b4:50:e9:f0:1b:41:70:36:27:76:8f:ca:bb:03:70:
                    91:41:77:d7:36:b2:83:ca:5c:9a:fd:c6:ec:01:74:
                    cf:68:da:67:32:c7:c6:54:ab:fd:c6:31:ba:da:c8:
                    1e:0c:42:fb:94:b4:7a:58:bd:90:70:67:1a:2d:c3:
                    e5:f5:02:4b:12:ad:26:43:4d:d1:a2:dd:89:d9:f7:
                    95:ef:33:55:e9:d5:f0:d2:f2:8d:c6:e5:8e:33:db:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:25:A2:C6:2B:5E:7C:A0:DC:6F:44:57:0D:95:B8:7C:28:A3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761f8cd-b891-32b3-8fab-93555377d9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:61:ca:1e:54:e0:82:61:e0:38:30:0f:1e:c0:53:89:ed:6e:
         1a:34:60:93:97:0a:bb:4c:50:ff:c8:a7:c2:85:e5:59:97:67:
         ad:76:81:07:78:30:c2:98:41:32:b8:e8:6f:72:0a:71:a6:7b:
         04:b5:18:4b:91:27:10:5f:bc:e8:c4:95:b6:52:6d:f3:11:c6:
         52:59:1d:3f:12:49:be:cf:59:22:b7:57:47:f9:55:e0:ec:cb:
         23:4c:f7:d2:4c:1e:fd:c4:a2:66:6f:34:bc:90:ab:51:a3:6f:
         4e:2e:b4:2c:cf:cc:d4:14:07:f4:f8:d9:18:78:ba:01:6d:38:
         9d:90:26:36:2a:5d:12:c0:1e:ca:41:ad:60:ef:e6:73:3c:2d:
         96:a2:24:d8:de:bd:16:11:f2:0a:24:5d:4f:8f:e5:61:d8:4b:
         c9:5e:d7:a2:8f:4d:e7:02:a4:19:08:1c:89:e6:54:13:a9:bf:
         49:bc:42:8b:83:90:b1:15:f6:b1:a1:18:34:0f:bf:e9:31:fa:
         a8:7f:17:9c:4c:06:7d:84:6e:38:18:d9:42:43:85:73:ab:af:
         14:44:eb:c0:a9:ec:8a:78:17:5f:25:73:21:bb:91:2e:cb:e0:
         eb:df:4d:e5:e9:b3:01:49:92:07:d9:c7:d4:17:d6:dd:2f:2e:
         38:d2:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:11:20 2024 by rpki-client on console-ams.rpki-client.org