Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1fc7ecc9-22e5-3d8d-b391-0334dc91623f.roa
File:                     1fc7ecc9-22e5-3d8d-b391-0334dc91623f.roa (raw, json)
Hash identifier:          Oc6JaX8BDs2QUZ6xvD4juyAzIzm1QzILxG7MmaAqFdE=
Subject key identifier:   C0:CD:BF:C9:B5:0B:23:D6:7E:6B:21:A5:76:74:7D:BE:AE:F6:C5:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7E364D4620171C0513780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1fc7ecc9-22e5-3d8d-b391-0334dc91623f.roa
Signing time:             Mon 18 Mar 2024 22:08:19 +0000
ROA not before:           Mon 18 Mar 2024 22:08:19 +0000
ROA not after:            Sun 16 Jun 2024 22:08:19 +0000
asID:                     36383
IP address blocks:        104.135.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:e3:64:d4:62:01:71:c0:51:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:08:19 2024 GMT
            Not After : Jun 16 22:08:19 2024 GMT
        Subject: CN=9979ed22-4b0c-4925-8305-0a104f172983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:8b:70:e8:2d:14:71:7e:69:1b:4d:ab:34:
                    98:34:35:21:bf:a3:96:d9:d8:e6:44:08:69:30:3f:
                    38:e1:66:7b:6e:1a:d5:95:e2:5f:64:ec:68:54:8c:
                    38:b7:52:35:ba:2f:0d:4b:63:f5:60:8c:72:40:1e:
                    f5:9e:be:dc:e4:aa:ae:96:72:c1:c3:5f:14:87:86:
                    ff:62:12:64:b3:b0:25:f7:e4:17:98:4c:e1:aa:a1:
                    e5:f1:39:bf:3f:42:4e:13:fa:4d:d4:b9:36:be:74:
                    d6:3d:f2:07:fa:64:b0:bb:9f:9a:cd:b0:05:5c:88:
                    db:93:8e:1c:59:ba:e3:84:3d:b3:59:a7:85:ee:92:
                    7c:44:54:f8:22:73:5b:e3:c6:ae:fc:dc:6b:55:36:
                    e5:f9:27:ba:af:ac:ba:2f:b9:63:c2:08:a1:a7:8a:
                    bf:26:b9:b8:47:ea:cd:b3:93:1f:5d:59:54:2a:55:
                    88:16:c3:37:88:8b:d6:64:ff:43:05:d4:8d:ca:f1:
                    97:d9:aa:08:eb:e1:52:9c:18:c3:73:84:31:f1:ce:
                    d1:d6:c3:01:65:d1:86:3c:61:b0:5d:fc:7e:af:63:
                    f2:54:6a:12:49:03:93:1f:97:a6:fc:55:ff:7f:be:
                    21:c3:9f:49:8b:df:f6:ee:ce:d4:90:5a:44:3b:7b:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CD:BF:C9:B5:0B:23:D6:7E:6B:21:A5:76:74:7D:BE:AE:F6:C5:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1fc7ecc9-22e5-3d8d-b391-0334dc91623f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:22:f1:38:94:d7:a4:d4:bd:e0:80:66:ce:9e:1d:cc:30:34:
         25:bd:68:3f:c6:db:ec:c5:27:63:85:74:09:ae:2e:96:65:a9:
         94:c5:96:94:bd:9f:bd:a7:22:2f:e5:1a:08:88:74:70:c0:2a:
         03:c1:32:ad:3e:d9:11:3d:8f:b8:6e:fd:66:ee:b0:e1:84:c1:
         00:13:db:35:c8:76:fb:b8:a8:d8:fb:13:5f:1a:fa:1a:5f:55:
         9b:04:42:39:0f:0f:8c:b9:cf:96:74:82:40:91:63:16:13:93:
         b0:22:b5:a6:da:d3:8f:0c:72:46:d5:a1:f9:53:94:74:08:5e:
         86:75:16:c3:f0:b3:f7:8b:a7:f2:84:94:d7:c2:17:4f:5e:9f:
         03:69:96:e4:58:05:66:03:f9:ab:d6:2a:08:e0:5c:22:80:38:
         ca:56:58:cb:2d:65:8f:75:27:31:f5:35:f8:10:05:5b:0e:6d:
         fb:22:b7:8e:25:f8:2c:99:20:19:cb:17:29:7f:b1:f6:94:4b:
         3d:9c:42:50:8a:22:81:5d:0f:28:61:10:43:bf:23:7b:b3:cd:
         fa:74:c1:94:53:10:0a:3f:15:5d:af:e8:11:45:1c:18:87:e8:
         53:87:0d:c9:6b:c5:92:9f:5f:75:bd:bb:44:6b:d7:8c:6d:5d:
         ff:dd:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:21 2024 by rpki-client on console-fra.rpki-client.org