Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa
File:                     2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa (raw, json)
Hash identifier:          Sma8V4kTNLEKGl7dygphkqDIfOB2X82Bs2f1RI8i44o=
Subject key identifier:   82:20:5C:80:33:12:4A:B9:F9:77:CC:26:F0:25:B7:79:38:F0:25:3F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094CDE36FBBBFEA1CBD8C68
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:cd:e3:6f:bb:bf:ea:1c:bd:8c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=79475ca1-d037-44be-9ebf-2aed6316e5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:e8:b3:59:8c:e1:cc:24:94:18:1f:31:c7:
                    74:8b:17:d6:8f:13:c8:8f:13:3b:65:ae:dc:c3:3c:
                    f2:95:da:47:8d:ef:c6:89:b3:b7:9d:02:c9:34:91:
                    af:21:89:29:a2:ee:32:5e:3e:31:cb:6a:8e:4e:bd:
                    94:a7:8f:20:73:8d:88:37:9c:d7:67:d8:f6:2d:04:
                    ce:dc:8d:d6:67:23:ac:c4:81:0e:b6:aa:4c:78:5e:
                    5a:64:c6:8c:15:40:79:7a:af:c1:b8:36:31:f5:cf:
                    27:b2:2a:df:a7:da:25:91:3c:32:f3:e7:3f:c9:63:
                    f2:94:24:00:4e:7a:31:b0:61:d0:60:80:92:96:fc:
                    ab:5c:c8:4d:46:c9:66:7b:3b:68:f4:ce:cf:54:0f:
                    dd:6b:dc:44:58:61:7b:4d:c5:ce:2f:58:cc:aa:cd:
                    24:b2:55:db:a9:e4:50:d2:c8:ad:08:1a:b7:ad:99:
                    30:21:e3:fd:79:c6:82:36:f7:d0:64:11:a7:d4:47:
                    32:db:f0:52:43:2d:f6:82:ed:e3:ec:4d:6a:5f:6f:
                    5f:fd:a1:cc:05:23:a1:f3:84:a8:57:c9:98:1d:9b:
                    0b:4b:4b:a8:19:79:2d:ff:20:aa:bb:9f:44:34:69:
                    08:50:b2:a4:ae:42:21:92:6b:60:76:a6:d7:d6:3f:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:20:5C:80:33:12:4A:B9:F9:77:CC:26:F0:25:B7:79:38:F0:25:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:60:90:21:2f:4a:da:8a:fc:92:9d:aa:4f:73:1e:b7:44:f9:
         7b:95:54:5a:6c:0c:1f:5f:18:98:ad:c8:ab:0c:f9:7b:e1:2e:
         7b:bb:0c:16:b8:c3:6c:00:7b:44:ad:39:6a:01:96:28:29:49:
         14:3d:38:bb:8e:6b:39:ff:88:5d:22:32:3a:62:b5:04:d7:16:
         3c:58:bf:70:dc:b5:23:d8:5a:34:11:48:93:3f:0d:b7:5f:92:
         82:f3:69:2c:c3:1c:dd:6f:31:c9:43:c4:c9:7d:6e:c9:be:29:
         92:f0:16:16:ce:c0:42:92:2d:43:8f:54:ee:e0:3c:ce:b8:b5:
         09:57:fe:b1:21:c6:21:d7:2e:e2:03:8d:ba:b8:4a:ef:65:85:
         2b:8f:f2:cc:b4:33:56:4d:c0:31:33:1b:17:bb:b2:87:49:76:
         3a:7e:04:a3:3d:6e:53:27:e4:2c:e4:da:db:e5:f5:ce:37:79:
         f9:d7:22:06:75:fc:88:56:12:85:b8:2b:fb:de:71:c2:ef:24:
         8b:aa:9a:5c:86:19:13:c9:7b:7d:e7:c7:01:78:a8:16:f0:8c:
         e0:37:f8:84:5d:ca:81:5d:f2:65:15:d6:06:f9:55:60:44:75:
         82:75:0e:38:9d:ee:58:33:eb:33:63:3d:60:ba:96:fc:2d:22:
         10:e3:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:50 2024 by rpki-client on console-ams.rpki-client.org