Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
File:                     3588427b-bba9-3548-84b8-e4c0bb26d466.roa (raw, json)
Hash identifier:          SFc413t5lp2kS4QiOlxEP0t8QHV9ElYfdmRojnd6yQY=
Subject key identifier:   13:66:99:2D:E3:56:15:16:B6:B6:B4:23:70:E9:22:2A:4C:4C:ED:A9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B938706031711F79FF1740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
Signing time:             Mon 18 Mar 2024 22:11:00 +0000
ROA not before:           Mon 18 Mar 2024 22:11:00 +0000
ROA not after:            Sun 16 Jun 2024 22:11:00 +0000
asID:                     395973
IP address blocks:        104.134.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b9:38:70:60:31:71:1f:79:ff:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:11:00 2024 GMT
            Not After : Jun 16 22:11:00 2024 GMT
        Subject: CN=a9702412-b252-4741-9e9c-f51d105cbbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:94:ee:b3:de:4c:48:f8:9c:bb:c6:35:d9:
                    25:21:71:59:8e:48:35:9d:c6:55:cb:12:8a:10:03:
                    62:18:85:bf:50:c8:60:9b:ac:5b:6d:7e:46:03:33:
                    c8:ba:02:7a:f5:70:79:8d:4d:3f:3b:c0:7f:c7:53:
                    49:8b:e3:f5:34:85:f5:c3:df:fe:dc:d1:1f:70:0d:
                    53:8f:04:98:64:d3:d5:26:60:88:43:c8:5a:8b:9e:
                    46:72:b5:d9:33:b8:eb:af:e1:cc:6a:7a:37:79:9b:
                    50:ce:f2:f4:87:60:74:71:2b:db:ed:3a:61:2b:5a:
                    a7:e5:8c:b2:fc:41:7a:58:40:14:0a:4b:3c:43:47:
                    df:c6:6e:17:96:45:3a:f7:9f:12:05:5d:4a:39:e5:
                    75:29:f5:1a:64:96:01:41:93:10:6e:12:7a:cd:14:
                    cc:81:ef:46:6c:c8:dc:f1:e1:7a:7a:bf:58:3c:41:
                    92:c9:9d:81:65:1c:66:8e:7d:d2:c1:a8:cf:e3:8f:
                    b8:b7:4e:42:38:e1:b9:5c:bd:be:9f:5b:ef:13:29:
                    2a:6a:03:08:f0:f0:45:3c:16:01:b3:00:d5:e7:c3:
                    b5:b2:bf:fc:67:2a:a6:85:4b:d5:49:e3:bf:85:d5:
                    e5:7f:f5:7c:57:51:65:6d:46:dd:50:f6:57:ad:4e:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:66:99:2D:E3:56:15:16:B6:B6:B4:23:70:E9:22:2A:4C:4C:ED:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:af:a8:c8:e6:2b:53:8b:37:3a:3a:9d:ab:c2:63:d8:9f:
         9c:0a:da:1b:3b:cc:b2:5a:7f:35:af:4e:e7:b9:dd:50:c5:5a:
         7d:31:d8:87:ed:be:90:a6:d2:69:46:77:1b:82:e8:76:43:ee:
         59:18:68:5b:84:a1:cd:cc:f6:e0:60:85:61:62:3b:5c:f5:67:
         c9:38:b8:12:b6:85:a1:f1:71:08:49:93:72:77:0a:2c:68:1e:
         ff:a5:82:a0:66:a8:36:95:67:d5:f8:8a:af:37:06:20:9e:e7:
         1a:d9:a8:32:d2:93:52:98:4d:1c:1e:bc:5f:35:a2:fd:f3:0c:
         14:90:5a:de:01:56:5f:05:f1:ae:70:aa:e5:d9:aa:1d:88:41:
         6d:08:9d:52:92:d7:27:a0:1b:4c:df:a1:f6:e0:78:22:06:7b:
         8c:e1:f0:a7:e4:84:a8:72:4b:3d:e1:ec:f2:7a:f9:46:2b:fe:
         3a:fe:7d:73:cb:cc:45:83:de:59:4a:ba:e0:ae:89:35:a9:b7:
         28:81:89:43:14:3d:07:2d:f0:0c:56:ca:e7:77:6a:28:db:d3:
         46:2c:8f:6b:3a:6e:ff:14:24:c4:1b:e2:da:ac:db:0d:76:17:
         b4:f4:70:57:01:1e:0e:fa:83:a9:da:bd:0f:45:4a:cf:a9:56:
         70:61:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:36:21 2024 by rpki-client on console-ams.rpki-client.org