Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa
File:                     2e33a78a-a08a-30af-89e7-9b336e2d0057.roa (raw, json)
Hash identifier:          FY2sToOGVYMgm7OBCb3bJzvnHNnVjVyIFHtFcFvxzCA=
Subject key identifier:   A4:25:D8:DC:C8:6B:FD:F4:9F:80:4C:D8:43:EF:B1:CA:8F:A1:E0:18
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535839CDDAD5EB3D1C650E900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa
Signing time:             Thu 14 Mar 2024 21:49:06 +0000
ROA not before:           Thu 14 Mar 2024 21:49:06 +0000
ROA not after:            Wed 12 Jun 2024 21:49:06 +0000
asID:                     395973
IP address blocks:        104.134.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:9c:dd:ad:5e:b3:d1:c6:50:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:49:06 2024 GMT
            Not After : Jun 12 21:49:06 2024 GMT
        Subject: CN=e9e98dff-70eb-44ca-8650-968102e41b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:9b:59:57:ca:03:8c:c8:33:67:5d:0b:42:
                    7e:3b:a8:28:0e:b4:7a:60:b1:90:32:ff:4f:a7:12:
                    e7:97:3d:d2:e5:b5:66:9f:b8:37:03:47:f0:90:ac:
                    01:24:4a:47:f4:b4:e1:c2:ac:bb:db:73:33:93:5c:
                    49:3b:72:08:84:74:51:7f:8e:3b:61:ee:f5:0f:ec:
                    be:a2:48:06:7a:e2:79:d0:35:8e:b0:c8:27:c5:ef:
                    d5:95:23:d5:e1:47:5c:90:7f:8a:37:c2:4b:f8:74:
                    a5:dd:cd:7d:c1:ec:30:58:cd:81:4e:72:e2:66:c4:
                    ff:c4:99:ca:b4:1e:ba:12:cd:d3:8f:10:60:c6:7b:
                    aa:c8:fb:51:be:57:fa:e8:1e:f6:33:9b:8e:f2:08:
                    14:83:8d:08:4a:8c:5c:e7:20:46:02:47:11:1e:3d:
                    bd:34:c2:66:3a:61:66:97:6d:9b:67:ab:f7:9b:71:
                    2a:fb:dc:f3:aa:ed:18:50:97:54:d3:a1:51:a6:f6:
                    9a:9a:c3:8d:ad:b1:7d:c1:32:ac:4f:b1:89:db:b5:
                    b9:89:8d:3a:41:f9:25:a4:bf:84:e5:fe:89:f5:72:
                    cd:0e:cf:b3:98:65:78:72:9a:47:1a:0f:34:3c:2a:
                    bb:11:cc:0b:63:8f:b5:e7:c0:d2:20:76:be:e1:d5:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:D8:DC:C8:6B:FD:F4:9F:80:4C:D8:43:EF:B1:CA:8F:A1:E0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:06:5f:2c:6a:84:93:7a:6e:bd:8b:bc:1c:44:78:07:76:c1:
         d7:b3:2f:bc:3c:69:d8:b4:82:53:83:72:93:da:81:7e:9d:3c:
         54:58:83:e4:06:8c:97:37:14:9a:56:4e:a3:86:38:b1:69:8f:
         c2:f8:87:93:82:ee:97:b7:7b:f1:02:d6:e4:ed:6a:c7:eb:95:
         c4:4e:c8:c8:fe:db:bc:dd:be:76:02:74:75:7a:88:87:fe:0a:
         af:19:45:ee:de:97:21:65:18:f7:f8:93:4f:13:d2:17:6a:93:
         c2:54:21:4c:cf:07:32:e7:06:e3:2a:4c:b9:85:60:e5:2c:62:
         ea:4d:1a:3b:ec:49:dd:00:2b:07:b1:4a:99:a5:d2:92:9d:95:
         59:61:1a:3e:9c:b8:83:c6:3a:45:4e:16:96:4d:30:52:02:26:
         6d:cd:5c:e6:7b:7a:16:42:0e:64:81:1b:51:91:39:75:d1:bd:
         43:bc:d3:e3:d2:0e:36:08:ca:18:ef:4d:ff:64:73:10:d9:01:
         7b:cd:16:fe:ad:4c:1c:af:bf:96:bd:c2:31:f4:0e:f5:63:92:
         23:cb:ac:52:cd:ee:77:e6:d6:a1:3d:e1:30:e3:e8:10:9d:9a:
         20:1d:55:bc:32:65:26:c5:67:68:57:f4:16:f8:26:59:bc:04:
         fd:b1:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:36:20 2024 by rpki-client on console-ams.rpki-client.org