Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/318c4626-227b-3266-a7c5-c5e39abd54a1.roa
File:                     318c4626-227b-3266-a7c5-c5e39abd54a1.roa (raw, json)
Hash identifier:          nz+GGOEjxqr6P2H7NkfDj42getKNLbgUOFHsJE8bawM=
Subject key identifier:   03:F7:9C:99:22:82:0E:46:91:DB:32:75:8F:A7:CA:9B:F4:2A:E4:73
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094F57A0AD91905D2E77B40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/318c4626-227b-3266-a7c5-c5e39abd54a1.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     395973
IP address blocks:        104.134.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f5:7a:0a:d9:19:05:d2:e7:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=70938b6e-823a-44a7-8385-494c3581296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:3d:d9:fe:75:d2:ba:8e:08:c6:c5:e7:3d:
                    cd:8f:d3:80:4a:e7:77:71:57:55:bc:46:2e:25:4e:
                    d2:5a:44:ed:d6:28:1e:01:ed:d1:23:5b:22:3e:15:
                    43:f0:b2:59:8b:9a:8f:b2:e7:35:a8:4d:0b:ee:cd:
                    1a:78:70:36:ae:3c:66:12:58:97:d0:6d:36:5e:5f:
                    76:b7:82:a6:f6:75:41:58:0d:84:a4:e1:dc:a2:b7:
                    72:75:bc:22:0a:8d:d7:33:08:ca:56:a1:ea:fc:67:
                    de:0e:f3:31:dc:29:59:42:9d:79:8d:9a:44:9c:ca:
                    44:65:34:ff:a1:1d:b5:d9:6a:50:4c:72:85:0b:51:
                    ae:58:18:30:9a:89:b3:44:ff:19:98:7f:7e:60:cb:
                    a5:c7:f4:95:a2:49:88:10:bc:01:b4:ff:7c:dd:89:
                    50:6e:b7:90:22:12:6b:54:2a:a4:3b:2f:23:38:1f:
                    34:d2:9d:d9:ba:d9:a0:28:67:d6:bd:48:64:7a:45:
                    3d:4a:c9:44:bc:c1:2b:73:ba:c1:e4:9f:d4:51:90:
                    5d:69:31:ac:5d:22:ac:15:86:c0:24:f3:8c:d5:f4:
                    ff:af:3c:84:17:f8:7f:fd:5f:c0:95:32:51:89:52:
                    54:9b:35:80:5c:f0:8b:ce:12:f5:8a:c7:75:3a:55:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F7:9C:99:22:82:0E:46:91:DB:32:75:8F:A7:CA:9B:F4:2A:E4:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/318c4626-227b-3266-a7c5-c5e39abd54a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:55:93:f7:6a:d7:78:fd:0a:1e:db:6e:fc:75:2d:f9:6d:
         a6:0a:91:f1:88:15:79:ce:85:e1:fb:86:f3:89:7c:41:be:af:
         6d:0d:a4:e7:27:4d:b0:22:19:c7:41:18:15:23:01:af:d9:86:
         5d:76:89:92:eb:9a:f2:c3:a7:d9:02:e4:8b:9f:a7:61:fe:f3:
         13:97:65:c3:a9:32:d1:2f:87:20:b3:32:e3:85:43:19:9d:ae:
         ab:f8:1d:89:da:db:20:18:5a:cd:cb:7a:53:df:68:44:a2:fc:
         4a:c3:7c:ca:11:50:c7:8a:a0:c9:5a:af:8e:63:45:ca:1f:53:
         e5:37:9d:2c:c3:64:6f:0c:d1:35:3e:60:15:c2:df:38:45:da:
         c5:e8:ac:e0:e4:ce:28:da:39:ae:fc:f5:87:3d:71:4e:a0:f3:
         fd:cd:53:3b:12:50:b2:57:50:ad:7e:58:c0:3b:2f:54:50:07:
         cb:25:ba:93:1f:01:bc:ea:a5:f4:45:d2:d8:8d:89:22:72:6f:
         c6:5b:0a:72:a7:df:c4:7a:38:d7:99:05:a6:9f:27:23:f2:a7:
         e5:10:5d:91:ef:63:25:b4:f4:3f:9a:d1:0f:b9:4f:43:3b:ef:
         81:4c:fb:85:db:87:b8:db:3d:03:5f:d4:de:9c:5d:92:81:01:
         9c:91:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:48 2024 by rpki-client on console-fra.rpki-client.org