Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa
File:                     3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa (raw, json)
Hash identifier:          aqeiF3xXho1s0Y3nSVpnO1gATdREVeLGcUVq8pFX35I=
Subject key identifier:   D3:22:7D:0E:8F:00:D2:E2:7B:37:19:FA:04:56:FF:CA:E6:3F:52:44
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358387AF89C11CAA37987D50
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa
Signing time:             Thu 14 Mar 2024 21:48:56 +0000
ROA not before:           Thu 14 Mar 2024 21:48:56 +0000
ROA not after:            Wed 12 Jun 2024 21:48:56 +0000
asID:                     41264
IP address blocks:        104.133.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:87:af:89:c1:1c:aa:37:98:7d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:48:56 2024 GMT
            Not After : Jun 12 21:48:56 2024 GMT
        Subject: CN=2ad4050b-327e-470a-8ea2-ca4a114ee26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:40:4d:9b:23:d0:2e:4d:d5:6e:d4:47:40:
                    e2:f1:2d:30:c5:f4:db:2d:17:88:05:b8:05:f0:e8:
                    77:0f:ac:a0:9d:b2:42:af:a0:a7:84:74:de:5c:cd:
                    19:35:31:29:17:d3:40:70:27:27:09:58:ab:0f:17:
                    fe:19:41:56:f7:0a:e7:31:60:53:f4:a2:e1:07:81:
                    ba:17:29:05:aa:6f:61:d7:05:ca:11:e6:36:62:f5:
                    3e:af:5c:6d:e1:76:9b:6c:9a:c4:26:92:d3:08:26:
                    bd:cc:3f:4e:b7:66:ef:70:5f:68:fb:03:0f:c0:54:
                    f7:8a:34:cc:7a:7e:25:6b:b5:52:ac:51:11:b7:80:
                    b3:4e:77:0e:c2:cc:02:2c:6f:61:6a:31:42:f0:cb:
                    ea:0d:3d:28:c4:fc:83:a9:27:3d:d2:ec:ea:de:40:
                    70:55:19:91:32:7e:9e:d8:aa:69:07:38:61:07:1c:
                    23:0f:da:9a:83:2e:64:aa:74:ce:e8:1d:f7:93:d4:
                    f6:ab:13:cd:29:c7:61:53:1b:42:2b:f7:05:99:60:
                    8a:36:0a:85:30:ab:1e:e2:d7:c2:d2:5d:86:db:99:
                    89:9d:93:e8:39:68:10:e7:32:3b:60:59:9a:f0:89:
                    5a:be:0d:db:f1:5f:86:df:9e:11:05:c6:fc:8b:49:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:7D:0E:8F:00:D2:E2:7B:37:19:FA:04:56:FF:CA:E6:3F:52:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:63:2b:ed:fb:22:1d:c9:db:db:b8:fc:77:c7:50:9d:9e:b2:
         7f:89:a6:ff:81:e8:ca:e0:57:c9:15:9a:89:72:5d:8c:11:cf:
         7f:b5:fd:1a:b4:63:4f:7e:9e:50:ae:c5:8e:84:da:32:a2:e4:
         67:80:86:0d:cb:ff:db:96:68:82:08:78:a3:1b:ff:5b:11:32:
         bf:74:f9:6e:79:1f:4e:22:84:ca:73:5e:7f:20:67:22:20:af:
         d0:cb:e1:85:f6:d7:41:ad:0d:bf:ad:69:37:e1:06:73:9d:11:
         fb:40:01:73:10:d7:72:8d:3a:7e:27:50:23:09:29:fb:7d:d2:
         eb:97:7c:63:44:ce:49:1d:3f:9c:1b:38:ee:d0:80:8b:ac:7d:
         9d:88:9e:45:5b:47:ad:31:18:ee:61:23:e4:ac:2d:d1:5e:af:
         79:aa:4f:9f:c5:32:41:fd:ad:a2:66:24:94:7d:65:8b:0c:50:
         b3:f8:5a:c5:42:a9:bd:d0:d4:d0:4d:b3:49:5a:62:b4:3a:e9:
         fb:ff:5d:d5:9b:69:ba:a2:8f:d2:81:06:37:e8:e9:6c:8c:7b:
         1e:b8:88:c9:9e:da:f3:2d:53:31:48:be:57:de:bb:52:f4:d9:
         a0:96:9c:44:d8:b8:9f:86:f3:33:48:4a:3d:50:16:d9:ff:1f:
         f4:11:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:23 2024 by rpki-client on console-fra.rpki-client.org