Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa
File:                     3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa (raw, json)
Hash identifier:          NRFUaGCEEvtlH1QcXv2NWDLOmfJRnCnv9jnwpIeLQGc=
Subject key identifier:   36:D7:FA:0F:4B:D9:A6:5E:91:88:FF:42:26:A5:AD:3E:DF:5C:9F:C8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BB415CB4013B02F309BF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa
Signing time:             Mon 18 Mar 2024 22:15:06 +0000
ROA not before:           Mon 18 Mar 2024 22:15:06 +0000
ROA not after:            Sun 16 Jun 2024 22:15:06 +0000
asID:                     15169
IP address blocks:        104.134.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:41:5c:b4:01:3b:02:f3:09:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:15:06 2024 GMT
            Not After : Jun 16 22:15:06 2024 GMT
        Subject: CN=653af97c-bd07-4207-85c4-a44c9efe3e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:39:2b:fa:a6:58:32:db:55:c6:32:5a:5c:
                    87:f5:56:52:da:01:47:05:02:35:07:d4:85:11:af:
                    7a:1a:d3:47:14:83:bb:42:53:3a:be:f5:19:f0:1d:
                    c9:d8:b8:fd:c7:24:5d:bd:3f:38:73:51:81:95:86:
                    32:77:d9:3a:17:98:1a:76:00:99:13:ea:25:1f:a5:
                    09:ae:dd:f3:71:a9:a5:65:e1:86:e2:6a:a5:78:c4:
                    8d:38:91:cb:09:08:7c:ac:0a:9d:c4:f8:24:76:1d:
                    c8:09:1c:14:34:0a:d9:04:e7:62:8e:62:e5:d1:56:
                    a8:af:4d:1b:44:93:1b:2e:9b:f4:c8:c9:02:f6:87:
                    2d:e2:df:64:aa:fc:c8:93:f0:56:7f:68:4a:6d:bd:
                    38:79:b3:fd:d3:51:a5:a3:bc:31:b7:df:a4:1f:2d:
                    04:75:e9:87:e6:ad:2b:a2:9f:2f:40:84:e7:4b:2b:
                    98:d8:5e:d0:1d:91:f6:35:c3:fa:51:f3:cc:2f:5f:
                    ba:53:fc:a1:1f:6a:99:ff:76:80:d7:b4:b5:80:2c:
                    2d:0a:4a:e4:5a:fa:40:9e:a0:59:b5:72:74:f8:ec:
                    c1:93:11:1d:8e:4d:65:1f:02:00:76:6d:38:7a:5e:
                    05:a6:a4:81:0b:c5:d1:7c:81:81:34:a8:15:4c:f9:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D7:FA:0F:4B:D9:A6:5E:91:88:FF:42:26:A5:AD:3E:DF:5C:9F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:cd:14:0b:37:d3:be:84:e6:9a:de:d3:87:c7:8a:73:74:
         c4:ce:3b:fe:10:98:03:5d:d1:26:45:4f:e2:e5:ea:d2:10:f0:
         53:2d:f4:37:27:18:26:28:4a:a2:38:5e:bc:e7:26:f9:13:fe:
         d1:36:cd:33:b9:02:43:ea:cf:4e:f1:95:dc:0f:a5:73:cc:a4:
         ad:fd:60:4c:07:14:99:44:bd:2a:e1:c7:2f:96:94:22:57:f5:
         2d:43:97:95:62:a8:ca:f8:82:cf:1e:69:f8:85:a8:5a:da:b4:
         ea:13:d1:e2:20:76:e2:5d:a7:be:69:1e:af:41:f9:af:90:ba:
         b6:7f:f6:40:b9:bb:9e:95:4f:b8:7e:69:73:5f:66:a6:6d:1c:
         5d:49:2f:37:a2:02:c2:55:65:74:10:fe:b8:74:2f:1b:f0:e0:
         92:11:f7:60:25:1e:5d:90:71:d0:06:d7:91:af:bd:76:5b:29:
         1e:bc:d4:ba:26:86:5c:b2:d0:55:c7:92:6f:3f:8e:31:07:58:
         cd:b6:84:75:c9:8a:b2:53:06:21:7b:84:fb:92:48:96:72:c5:
         35:01:ad:c0:43:fe:f6:8e:9c:67:7f:09:fe:3a:6d:b0:ff:c1:
         a2:26:e7:bd:5f:36:7b:54:de:bc:b5:26:9f:c4:88:92:bd:b4:
         c8:e4:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:56 2024 by rpki-client on console-fra.rpki-client.org