Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa
File:                     22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa (raw, json)
Hash identifier:          Yg712DzZkYNj/lvx+f885KgTBGL27Jfixdcui663ee0=
Subject key identifier:   B4:D3:47:E1:BA:F7:3D:E5:F5:CB:AD:6D:E9:AF:FC:2D:6A:89:6B:B5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A05CF30161888B1F7B000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     395973
IP address blocks:        104.134.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:05:cf:30:16:18:88:b1:f7:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=645651fe-4922-41e2-bd94-e11c36afb3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:b7:87:b5:68:0d:0d:9e:78:2e:40:f6:6c:
                    f7:bb:ae:9d:47:08:9f:fe:4d:bd:eb:a3:fa:5c:95:
                    6f:2c:bf:3d:f2:74:86:62:16:d4:3f:43:81:f5:4c:
                    63:c2:24:16:52:0a:e2:bc:67:cf:5d:13:3c:4a:bb:
                    b9:6d:b2:e5:83:39:75:1d:af:c3:dd:44:48:e2:94:
                    6e:f4:da:d9:bf:cb:fe:9b:23:93:39:ee:fc:a8:d3:
                    de:4d:e2:75:24:63:68:02:dd:91:71:63:57:e8:3b:
                    b7:36:bd:99:13:8f:6f:4e:dd:56:7e:6f:02:8d:d2:
                    85:fe:17:46:56:fa:77:5e:09:02:f0:5d:15:c9:90:
                    54:9d:60:dc:ad:10:ed:4b:ec:82:bf:79:ba:a2:dc:
                    1a:e8:77:b6:ad:ca:e8:a8:65:18:d9:41:c1:8a:f6:
                    0a:50:22:29:a6:f6:10:de:35:2e:95:86:f5:48:28:
                    86:f6:df:8e:3f:fe:87:ba:fd:ef:cb:84:8a:31:e3:
                    d6:9a:50:4e:c7:9c:a6:92:63:66:c6:2a:9a:e6:d6:
                    d0:12:8b:8e:93:08:4f:50:94:27:64:5a:e3:4f:f9:
                    3f:0d:5d:4d:01:b6:61:70:1c:49:bd:33:d6:77:1e:
                    8c:a9:a9:9d:37:d9:55:47:b6:5c:38:3d:ad:ce:0d:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:47:E1:BA:F7:3D:E5:F5:CB:AD:6D:E9:AF:FC:2D:6A:89:6B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:30:49:df:70:27:60:59:33:ae:5b:a0:4f:03:e8:06:2a:
         bc:d8:21:ba:57:b0:c6:dc:fd:e1:da:42:e4:48:39:f8:23:6c:
         38:e5:22:1c:cf:46:9e:a0:f4:3d:2c:bd:3d:f9:1b:62:a2:2f:
         eb:12:14:1a:6f:1d:b7:fe:df:77:a0:38:b1:ba:4d:78:16:77:
         20:80:62:fa:8a:bb:e2:d4:c1:9e:35:c2:a8:8f:69:66:17:a6:
         e9:11:ef:fd:ee:ae:95:15:da:f8:38:dd:e0:be:ca:85:d1:c1:
         b0:01:4c:b6:5c:25:10:9e:94:42:d5:ac:78:ec:6f:c9:b6:84:
         1f:5f:f7:55:99:10:ae:e6:c2:8f:00:7f:54:cc:c9:d5:c2:3c:
         11:44:90:bb:a9:de:60:64:81:3c:bd:57:d9:0a:37:aa:d1:32:
         b2:a1:34:38:0f:ec:22:06:56:53:31:01:12:8f:f9:5d:f8:46:
         50:de:77:d0:88:b2:10:01:05:11:b8:94:34:ee:bd:75:e9:e6:
         62:a4:37:a4:6c:ab:76:9a:02:46:26:7e:bb:8a:c5:80:23:ca:
         0f:03:b4:76:54:6e:92:10:8c:0b:0d:12:7f:64:7a:26:09:25:
         90:fb:7e:cb:05:f9:1c:e7:6f:14:6b:bf:48:d3:54:89:d8:2a:
         96:b5:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:02 2024 by rpki-client on console-fra.rpki-client.org