Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/231324af-3fb7-3fad-9e52-89a22bd184b7.roa
File:                     231324af-3fb7-3fad-9e52-89a22bd184b7.roa (raw, json)
Hash identifier:          RG97DWfIRm4WAxCv49pluTqFwEdZcwAbBvMKBi5zjxc=
Subject key identifier:   27:18:12:90:75:4F:AC:1F:3D:C4:A7:FB:97:90:EF:7F:5C:DA:C1:65
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D29F70C919A316174F5FD600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/231324af-3fb7-3fad-9e52-89a22bd184b7.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.132.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:70:c9:19:a3:16:17:4f:5f:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=207fcf1c-b287-4a5f-9c1f-6a8bc2152833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:fc:fd:ec:42:33:4b:67:b6:4e:93:7f:fb:
                    08:3c:6e:e1:0c:d1:b7:fa:e5:67:d7:61:7d:b0:6e:
                    22:e0:ec:cc:36:ef:33:f1:7d:8e:fd:91:e1:9a:3c:
                    e5:c0:33:66:3f:52:d5:f6:8d:53:1e:22:55:f5:69:
                    b5:01:0b:c5:28:e0:09:41:39:c5:0a:b2:cb:40:32:
                    14:f5:1d:82:d4:4b:9d:78:6c:aa:6b:45:63:a6:26:
                    1f:0e:ec:c6:ed:ef:f0:93:34:71:21:2a:7b:59:85:
                    45:69:32:18:ef:ef:db:ed:38:51:3d:e5:81:2f:5b:
                    0c:54:d3:ce:97:ed:98:da:cf:75:e1:f1:b4:f2:b8:
                    b3:1d:e3:4a:44:29:0c:dc:34:3a:9f:4b:68:48:68:
                    3d:dc:3e:0e:f0:8d:63:28:af:f9:68:0e:df:57:8d:
                    0b:99:91:fd:7c:01:ac:ac:ae:6c:ea:90:7b:a2:45:
                    5b:d1:ec:bb:43:87:4d:99:c9:70:08:c6:28:01:25:
                    4f:7d:0d:0d:9e:31:52:2d:9c:80:1d:81:e2:89:2e:
                    92:31:0f:20:23:8e:ff:ba:a5:19:f7:27:0f:b8:67:
                    ae:7a:6c:75:8d:86:b4:df:82:16:b6:6f:ff:12:df:
                    be:c0:93:a4:39:d7:90:db:e0:9b:ab:c3:19:ef:75:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:12:90:75:4F:AC:1F:3D:C4:A7:FB:97:90:EF:7F:5C:DA:C1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/231324af-3fb7-3fad-9e52-89a22bd184b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:57:fe:5c:9b:69:5a:3a:1a:ac:56:5e:c8:95:d4:b7:ca:
         48:ac:b9:94:2a:9f:8b:0c:ee:77:50:37:5e:39:30:00:8d:d3:
         ca:70:30:59:f8:0f:d1:d3:32:e1:52:93:ca:60:39:18:98:67:
         9e:ef:22:42:01:8e:b5:05:3e:c1:99:10:09:fa:28:f9:ee:a1:
         b6:6a:9c:c8:e4:68:f4:eb:c0:06:16:cc:ac:d3:eb:41:87:d2:
         25:07:18:c9:13:a4:0a:bd:48:51:7f:01:fe:f3:10:cf:7a:78:
         69:a3:7b:47:2c:8a:f4:cc:46:fa:56:f6:50:34:31:b0:f8:a2:
         92:c6:3f:c1:ca:45:a1:93:3b:fa:3f:78:4a:b1:df:54:db:22:
         f1:6f:9b:5e:5c:e6:79:83:2c:a2:51:04:3d:75:7b:8b:c5:9a:
         ce:65:b4:99:50:d5:f6:5b:2a:61:d9:a5:e7:73:e3:86:16:c9:
         25:52:47:96:e6:85:c3:a5:2b:87:48:d4:17:bc:9c:65:ec:16:
         15:30:8f:da:66:91:7a:c3:15:4c:e5:8b:f8:04:29:e1:8f:a4:
         24:99:46:d3:ff:dd:8a:32:62:16:ec:2c:9e:a1:42:01:11:07:
         25:f7:a3:22:31:f4:b0:eb:ad:d9:de:53:ec:82:c2:a2:92:b8:
         06:4f:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:47 2024 by rpki-client on console-fra.rpki-client.org