Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
File:                     3914c294-cd51-3175-b02b-781afb254873.roa (raw, json)
Hash identifier:          5we23OxcgcPS2Wqqx3odJzl1Ev721vJdc7DZWmlWfy8=
Subject key identifier:   DC:79:49:F4:FA:9D:60:DC:10:26:42:91:CA:13:62:DF:47:E3:9A:86
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453284DEE85F1FBD7A505A2900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
Signing time:             Wed 13 Mar 2024 20:04:13 +0000
ROA not before:           Wed 13 Mar 2024 20:04:13 +0000
ROA not after:            Tue 11 Jun 2024 20:04:13 +0000
asID:                     41264
IP address blocks:        104.132.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:de:e8:5f:1f:bd:7a:50:5a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:04:13 2024 GMT
            Not After : Jun 11 20:04:13 2024 GMT
        Subject: CN=9095fe1a-835b-49f6-9f52-af94a0fbd627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:e3:4f:0d:22:79:07:20:fc:1a:60:ef:7a:
                    c4:43:93:87:49:45:04:e4:a0:02:a8:7c:f0:bf:0f:
                    75:33:99:c5:4f:3d:66:3c:b4:a9:0c:a7:8f:19:d4:
                    74:1d:40:da:6b:0a:b8:aa:ef:48:7c:63:66:d4:bc:
                    45:68:21:37:c6:1e:08:df:20:47:a2:24:88:56:6e:
                    cc:09:dc:ed:f7:94:3f:99:34:53:e2:28:f6:e8:d3:
                    d7:4d:1e:69:70:a0:13:88:7c:5b:13:59:9b:3a:0e:
                    5b:22:e8:6f:00:cd:6a:e4:18:91:d0:26:15:86:5e:
                    36:bc:b8:33:72:73:97:7c:c7:b4:dc:ac:a1:91:36:
                    28:36:d1:bc:34:31:15:c9:9f:96:55:3f:86:fa:0e:
                    32:5d:73:1a:30:89:cf:de:6d:7f:09:7b:36:b9:75:
                    ba:a6:cb:42:d9:c0:16:a1:37:5f:c1:b4:f1:fe:21:
                    fc:65:90:26:6f:e4:9d:5d:69:9a:0d:74:6f:6f:2d:
                    47:e7:dd:d5:bb:2d:ab:c2:3f:4f:75:2f:99:4d:5f:
                    1c:08:39:bc:68:74:e3:94:8c:13:47:dd:4f:36:41:
                    a6:e4:26:31:18:7a:6c:2f:57:4e:3b:0b:12:da:ee:
                    97:3b:f9:7f:a6:01:72:ac:05:c8:73:30:ee:2b:de:
                    5a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:49:F4:FA:9D:60:DC:10:26:42:91:CA:13:62:DF:47:E3:9A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:d7:fc:3c:e8:d0:6e:d9:63:f4:bd:8f:f2:ec:b4:90:65:25:
         2e:b5:7a:28:36:05:28:d5:a6:62:f5:d4:13:89:f0:c0:33:69:
         6d:52:db:68:8a:b1:64:76:2f:fb:40:d4:f7:1d:bf:33:4e:71:
         ac:80:cb:2b:ee:a7:02:6f:ac:e9:44:88:d9:ef:dc:f9:29:6a:
         5e:ba:68:de:6e:ea:c0:00:05:97:2b:1f:cf:65:7d:3d:9a:1c:
         b8:7a:99:58:40:3b:cc:cb:20:21:c0:b0:39:e7:d7:5f:88:51:
         a7:5a:0e:e8:eb:fb:b1:ef:f7:b3:0f:bf:00:40:ca:b7:e1:a0:
         16:fd:52:7a:a3:7e:f8:f9:37:d4:af:a6:73:f2:b1:74:df:db:
         4d:bf:6a:bc:cf:90:e8:40:2e:61:b3:93:59:ea:53:2d:a1:73:
         97:4c:d2:a7:64:7a:45:64:eb:cd:5d:1b:8f:af:89:da:f7:93:
         23:90:cb:0a:b5:f9:22:0a:13:82:2f:3a:84:15:6f:dc:d8:d6:
         84:65:81:6b:d5:61:78:bc:bb:2b:05:9b:85:54:5c:2e:4d:6f:
         3c:4d:a1:fe:98:f9:7b:68:fd:37:91:f3:1f:4e:82:e2:2f:b3:
         28:a2:af:82:98:52:73:93:8a:8b:67:ff:64:b0:35:34:eb:0f:
         a1:b1:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:10:17 2024 by rpki-client on console-ams.rpki-client.org