Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa
File:                     187c7be3-3ba2-3c18-9c42-498f367717b1.roa (raw, json)
Hash identifier:          41f/4jkiwzwHn3828vgNcdRLJdr4cjzLW3l96YNf90A=
Subject key identifier:   83:88:2B:BD:99:D3:06:05:41:D3:0F:18:4C:D0:C6:14:E6:A8:D0:B5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585BAF9B80F3A1829A2D600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa
Signing time:             Thu 14 Mar 2024 21:53:22 +0000
ROA not before:           Thu 14 Mar 2024 21:53:22 +0000
ROA not after:            Wed 12 Jun 2024 21:53:22 +0000
asID:                     41264
IP address blocks:        104.133.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:ba:f9:b8:0f:3a:18:29:a2:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:22 2024 GMT
            Not After : Jun 12 21:53:22 2024 GMT
        Subject: CN=e156387a-a2b6-429c-80b9-5d22dacd5abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:fb:02:9e:99:0c:86:1b:b5:8a:61:50:8e:
                    fc:72:77:f2:82:b2:ae:ab:7e:a5:f6:b0:0e:b3:35:
                    f8:24:be:0b:05:b2:b2:66:01:b7:b2:aa:c0:b5:e1:
                    72:2a:40:5f:22:39:8a:60:5e:d8:68:6a:01:2c:b6:
                    5c:d2:a2:02:87:14:e7:42:49:c3:1a:e1:43:e5:78:
                    10:ba:93:ee:c2:19:c8:53:27:37:c7:69:7c:7f:fe:
                    d6:2c:91:66:c2:eb:81:3b:be:16:21:6f:b4:3d:ad:
                    11:28:72:ee:06:a3:3b:da:b5:ad:2b:3d:9d:fe:1c:
                    1c:7a:0a:5f:cd:54:cd:bc:71:56:be:0b:c6:07:e9:
                    69:e5:0d:e9:23:4a:8e:cd:a8:f9:b7:ee:6d:50:10:
                    9c:4b:98:09:ed:62:6a:f9:b4:91:ae:f0:93:d0:0c:
                    53:6e:3c:8e:8d:e0:3c:4e:c8:29:cd:20:61:61:2a:
                    ad:c9:77:a9:45:0b:e3:72:c5:a5:2c:e8:45:f2:fb:
                    6b:16:43:ae:fc:c4:10:86:80:38:b7:c1:1f:c0:c8:
                    ef:ac:98:0e:5c:e6:05:22:5c:92:8e:30:04:03:42:
                    81:aa:9e:be:1c:3e:ea:3f:7d:ce:14:ad:2e:ad:bc:
                    d8:ba:0a:9f:00:2d:e1:c3:4b:47:d6:d5:66:f1:40:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:2B:BD:99:D3:06:05:41:D3:0F:18:4C:D0:C6:14:E6:A8:D0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:f1:6c:ee:3d:5e:d0:2e:e2:ac:3d:47:9d:0c:dc:e1:1b:
         99:2e:87:b7:e6:a1:3c:3a:2b:0a:e4:07:9c:7a:24:fa:a3:53:
         52:7a:03:a0:96:b4:02:1f:1f:5e:df:72:92:b9:61:21:70:0c:
         b5:73:bd:7c:aa:66:c0:98:df:ee:7a:44:bd:5b:76:42:38:9e:
         1d:44:b7:48:ea:9e:c9:95:d8:f7:ac:4e:c5:bf:c6:e3:b5:5b:
         cb:84:b1:13:08:bb:38:d1:00:cb:10:fc:30:db:7c:66:3f:5f:
         95:4c:53:fd:97:24:3e:10:cb:a3:45:08:aa:8a:0c:7a:b3:49:
         be:08:21:4e:10:0a:84:1a:df:68:b0:6c:03:1b:2c:88:86:46:
         95:ab:85:25:cd:da:dd:a5:d0:69:fa:13:2f:e0:1c:b6:1a:63:
         9e:78:2a:4c:78:53:d4:02:75:e7:3b:35:5b:df:ae:64:fb:fd:
         db:b6:bc:85:8a:47:af:09:75:84:47:17:ba:8d:40:ef:02:0a:
         e7:d8:95:bc:2e:b6:eb:18:56:0a:5c:7c:a8:2e:e5:fd:e4:c9:
         05:a6:28:a7:15:28:f7:88:71:bb:c0:3a:9d:f3:70:c0:e2:75:
         5d:32:21:3c:7f:eb:2b:84:1c:f4:74:31:38:d2:b5:b1:e8:14:
         fa:d3:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:25 2024 by rpki-client on console-ams.rpki-client.org