Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa
File:                     3b98884f-6544-3561-9a52-f8ff6f884f01.roa (raw, json)
Hash identifier:          pxohetS0MRHTvTJ/8spmOdQ+rgplwiLJpufWxUon3As=
Subject key identifier:   3F:56:E9:06:8F:35:07:AE:34:48:17:BE:A9:E6:4E:84:0C:1D:DF:E9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094FBBD0AD33EB2A1461D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     395973
IP address blocks:        104.134.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fb:bd:0a:d3:3e:b2:a1:46:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=09a31f86-ddfa-45fe-b4b7-59d77ef1f391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:52:87:82:4b:f2:98:2a:a6:15:3d:8a:d6:
                    99:36:1c:33:fa:86:df:8a:5f:12:52:69:f5:c7:8e:
                    a8:fb:62:52:0a:14:5d:97:69:e9:0f:32:05:a2:ee:
                    f0:8a:2b:55:fd:ae:c9:dd:00:a6:93:d3:75:49:e9:
                    bc:6e:fc:9a:c0:47:11:04:58:bd:0e:af:67:ca:74:
                    38:1b:34:f0:77:f2:c9:6d:c0:a8:4c:96:8a:83:a2:
                    77:ef:f1:27:82:3e:b8:68:5c:e4:1a:1d:2d:da:54:
                    a9:8a:de:f1:88:f6:50:84:99:f0:ea:c3:2e:f0:34:
                    f4:19:3e:30:07:d5:3e:5e:b8:59:46:7d:6e:b7:69:
                    76:14:65:d3:19:48:9e:04:ab:20:f1:b0:0e:a6:ae:
                    c4:f7:c4:a1:17:e4:44:62:44:8d:a1:33:29:88:10:
                    9d:09:8f:72:10:4e:39:7f:3a:d2:69:c4:eb:1e:eb:
                    ad:71:38:5d:bd:9c:b4:f8:dd:c3:d3:01:d5:2c:4d:
                    2f:f6:be:14:c8:68:a9:63:82:6b:2d:f2:0f:f2:8f:
                    39:fd:c5:2e:0f:52:88:01:52:bf:58:b5:1e:66:4f:
                    9d:f4:bb:82:f9:4c:65:25:94:d6:66:b8:d4:41:74:
                    5e:64:1d:01:62:ba:7b:69:2a:7d:c1:43:75:50:d1:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:E9:06:8F:35:07:AE:34:48:17:BE:A9:E6:4E:84:0C:1D:DF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:61:3e:fe:7d:7e:14:b2:8c:cb:bf:5b:09:d2:3d:8e:81:8c:
         64:5d:ca:b3:fc:80:fb:9e:a1:c8:3c:df:52:9d:e6:f1:20:e4:
         cd:b3:01:55:86:2a:11:b6:e5:ac:a5:4b:1a:43:48:9e:8d:00:
         66:2f:9f:0c:42:c5:b2:3e:26:ea:49:43:5f:e2:a4:e2:b4:64:
         bf:4a:0d:19:94:b8:75:0a:93:68:9e:3e:07:a8:c3:98:4f:4d:
         11:28:f1:41:ce:b1:b7:3e:8b:b9:fd:50:e7:b6:22:43:96:5b:
         8c:06:82:03:b6:39:14:f4:29:5e:a8:7d:01:39:02:2b:50:58:
         d1:ab:52:bc:82:80:22:84:16:cf:96:4c:c1:40:6d:9b:a0:4b:
         31:b0:d0:7c:e2:55:e5:6f:c4:52:3c:b9:bf:c1:ee:fe:57:c1:
         8e:cb:be:ad:08:d1:f8:15:10:2c:07:0b:96:10:54:d3:15:2b:
         a0:c5:4d:38:a8:72:d0:9c:62:47:5b:fc:67:13:2c:dd:63:53:
         f9:08:ff:c2:2d:2b:85:4a:4f:ce:90:e2:d1:aa:2e:c5:1c:18:
         c1:59:72:39:fa:23:4e:34:17:38:d5:84:20:c3:49:23:4b:b9:
         2e:74:45:07:45:b2:22:ba:79:17:23:19:a8:2a:b6:df:9b:52:
         9f:72:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:12 2024 by rpki-client on console-fra.rpki-client.org