Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
File:                     3e575422-583a-3199-b11f-06ff93271a69.roa (raw, json)
Hash identifier:          ve8oBi5OvGsL2WeoBuftKuzDJj+6JuBQ24cm6fNRSG8=
Subject key identifier:   FF:AB:94:F5:25:F0:85:E0:E3:FB:06:1C:51:0F:DB:ED:A7:77:91:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BC99615AA9148D095F37E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
Signing time:             Mon 18 Mar 2024 22:17:49 +0000
ROA not before:           Mon 18 Mar 2024 22:17:49 +0000
ROA not after:            Sun 16 Jun 2024 22:17:49 +0000
asID:                     15169
IP address blocks:        104.134.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:99:61:5a:a9:14:8d:09:5f:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:17:49 2024 GMT
            Not After : Jun 16 22:17:49 2024 GMT
        Subject: CN=bed87301-8666-418b-92bd-eeef478ff48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:fb:c7:fb:25:05:33:bc:c3:90:24:f0:47:
                    c0:5c:4a:98:3e:26:81:72:ac:7c:bb:2d:0d:97:78:
                    16:b0:8a:1d:71:11:e3:42:07:3a:5c:fc:82:03:81:
                    2f:a0:30:c3:a9:18:a0:c8:42:f1:67:3a:26:0f:7a:
                    bf:fa:c1:92:86:3c:3b:f6:c1:ee:98:a0:1b:8a:e5:
                    d2:92:27:a3:3e:d2:b3:7e:8a:9c:5a:80:64:e5:5b:
                    e0:69:d2:fc:0c:c1:ad:19:0e:1c:e3:11:21:24:e2:
                    49:6d:5e:b7:7e:ae:74:80:5c:a6:dd:54:f9:b2:1c:
                    61:a5:6d:0f:9e:99:5f:8b:d4:87:a0:b7:b5:73:ab:
                    ca:f5:d6:8c:48:ba:97:ac:cd:99:5b:8e:70:5c:18:
                    b5:14:cd:f6:24:af:98:25:8c:7a:4f:5b:a3:f0:41:
                    b5:fb:9c:a6:99:bd:af:49:91:b6:69:25:45:e4:aa:
                    f8:93:7a:80:e0:2b:fb:40:fb:27:d8:e0:de:1f:a0:
                    61:db:7a:03:ec:58:57:44:25:4a:7c:4e:33:27:7b:
                    d6:99:03:93:34:1b:d9:ea:da:58:5e:13:1c:df:57:
                    9a:5f:ab:d8:8b:2a:2b:7e:d9:14:e6:b3:e5:2e:93:
                    c4:cd:67:81:97:35:3b:3f:8c:b6:db:f6:5d:91:1e:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:94:F5:25:F0:85:E0:E3:FB:06:1C:51:0F:DB:ED:A7:77:91:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f3:aa:d0:4a:a0:4a:82:eb:88:9a:dc:1c:58:a3:3e:aa:4f:
         ad:da:d8:cf:00:76:dc:89:ca:f2:e6:99:a7:ac:51:ba:ca:5e:
         0b:8c:33:e8:6d:5e:be:6c:14:f2:57:39:cb:a7:19:e5:0a:0f:
         03:b1:76:d7:36:37:ca:55:df:28:3f:9a:92:af:89:16:41:43:
         ea:9d:ed:2a:84:9c:f3:92:43:38:b6:b2:41:91:04:a0:fd:b5:
         29:b2:1d:58:6f:bb:14:7b:e6:04:af:d9:ac:39:8d:55:db:26:
         6d:22:a2:14:75:28:1a:c8:2b:c1:32:00:be:f0:51:7c:d9:dc:
         52:35:81:81:e9:f4:16:bd:94:50:73:37:6a:44:c4:c5:f8:02:
         e1:87:1d:ae:e5:8a:33:1a:37:b6:b4:40:ab:3c:ba:0a:11:cd:
         2d:7c:ec:72:97:84:b0:d4:b9:55:32:ff:fd:a8:65:cf:c7:6d:
         06:66:1c:70:38:ae:51:70:dc:87:d4:b9:8e:8d:6e:28:2c:ef:
         12:63:8b:88:20:d4:ae:a3:5d:47:d9:6d:3f:4a:56:f2:2f:12:
         27:b6:77:2e:4b:52:49:83:b0:64:bb:c4:7a:d2:2c:8e:b3:f1:
         11:58:cb:a0:8c:16:b1:c9:d4:a9:f5:b1:05:85:02:3b:53:92:
         64:aa:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 09:50:04 2024 by rpki-client on console-fra.rpki-client.org