Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa
File:                     2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa (raw, json)
Hash identifier:          D2nGybdRFWYRp/9rxnZOr5cGj+EBYkwmvSwHWgdr2t4=
Subject key identifier:   AB:9D:65:61:B2:2C:59:81:1D:E0:6F:2D:F5:D5:72:C3:63:B5:02:86
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0A5407A41E927B7F9D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:0a:54:07:a4:1e:92:7b:7f:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=3878709b-908e-4879-b6f2-feb77d0868a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:dd:79:5b:78:10:6c:a3:32:18:85:4e:3b:
                    56:31:0c:66:e2:6c:66:2b:a9:b7:77:41:6b:fd:72:
                    62:3d:ac:cf:0d:56:e9:41:ef:b3:c4:29:4f:36:53:
                    36:e0:a2:6d:19:95:88:30:85:f8:79:47:bc:0c:98:
                    25:8a:bd:6b:62:f5:97:ca:c2:82:3b:e2:df:3a:9e:
                    d9:67:79:18:1d:2b:49:10:36:a3:c8:43:c3:44:ed:
                    97:6d:6a:77:82:0e:26:9a:ca:77:4a:cd:e5:4c:c2:
                    5d:31:c4:d9:dc:b4:14:aa:5b:8e:fe:16:12:73:c0:
                    6e:1e:bc:e6:bc:9a:5f:21:fe:2a:c3:31:5e:e4:dc:
                    e6:9a:3e:94:b2:73:dd:80:fe:01:53:ca:2a:fc:0d:
                    c8:5e:4d:49:d8:69:25:0f:f3:a9:33:85:a2:a2:ab:
                    0d:1d:30:27:2e:e9:c9:01:f9:b0:a5:0d:6a:13:69:
                    e5:22:d0:57:7c:3c:74:fe:50:d9:ea:d0:4e:26:e1:
                    39:2c:13:9b:2c:f8:a0:bf:94:1e:32:1d:0a:6e:7a:
                    41:49:64:9e:5d:29:88:f1:b4:3e:22:7a:c3:9f:7c:
                    aa:0f:3d:4d:d5:a3:b1:64:5d:ca:55:bd:bd:6a:ff:
                    09:c0:02:89:47:19:b9:34:b3:33:6c:8b:11:5a:81:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9D:65:61:B2:2C:59:81:1D:E0:6F:2D:F5:D5:72:C3:63:B5:02:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:64:60:1b:da:d5:c4:d3:c3:ee:3b:11:4d:06:8d:58:92:e2:
         db:cb:0d:a6:16:17:1d:f9:94:17:e6:b1:06:f4:cb:f8:48:68:
         71:61:16:05:b3:ba:b2:5c:a7:b3:cd:ea:64:ca:25:6f:f8:4f:
         a9:86:59:65:92:7f:c5:77:c4:4a:ce:30:81:cb:d6:d0:4f:68:
         8b:b5:71:95:9b:1b:58:c8:41:e5:60:85:6c:e1:0f:17:fb:8f:
         30:87:6e:dc:03:10:0d:3e:ab:13:0c:61:3c:50:23:4f:af:5c:
         0b:8b:17:6b:33:7c:3f:8c:23:0b:14:b1:7c:39:56:3a:9e:03:
         6b:05:28:24:5e:98:9e:7f:aa:04:b8:08:6b:c1:4e:f9:94:b8:
         69:a2:73:08:c0:06:6c:94:82:34:84:61:61:79:3c:c8:e9:fb:
         39:f9:d4:ea:e1:65:4b:03:b6:69:16:71:1c:f9:0d:37:dd:14:
         7d:e4:64:6e:a3:74:d9:17:4a:9e:01:4b:88:a5:a6:cc:f3:d2:
         d3:04:3b:57:c4:b5:73:68:c9:fc:37:0f:a5:2d:91:90:6b:57:
         95:94:07:a3:69:fb:09:87:22:a9:96:34:88:4c:16:9e:58:00:
         64:4f:6d:07:1a:3c:b8:73:11:7a:6c:16:92:fa:08:3e:73:b7:
         55:db:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:47 2024 by rpki-client on console-fra.rpki-client.org