Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ab187e-585b-31f6-8e42-5ccc9657a6d8.roa
File:                     41ab187e-585b-31f6-8e42-5ccc9657a6d8.roa (raw, json)
Hash identifier:          tUnwHV4nXcx3EOkHHe8SQ8vZj3qdLVFuJ4UX2hu6xGQ=
Subject key identifier:   23:36:21:34:E2:4E:50:EF:2B:A0:6A:B3:FA:B6:8C:EA:FD:6B:EC:E0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535835D499C7C76046DA17880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ab187e-585b-31f6-8e42-5ccc9657a6d8.roa
Signing time:             Thu 14 Mar 2024 21:48:36 +0000
ROA not before:           Thu 14 Mar 2024 21:48:36 +0000
ROA not after:            Wed 12 Jun 2024 21:48:36 +0000
asID:                     41264
IP address blocks:        104.133.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:5d:49:9c:7c:76:04:6d:a1:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:48:36 2024 GMT
            Not After : Jun 12 21:48:36 2024 GMT
        Subject: CN=f1a4b3be-cb16-42a0-9c8e-7224882cd066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:93:17:54:7e:dc:d4:48:50:5a:5d:ff:04:
                    90:30:88:99:fa:11:63:ac:3a:6b:47:8f:08:c5:c3:
                    f9:ca:2b:50:28:af:6e:0a:97:3c:f4:de:ee:6e:6e:
                    99:e9:f1:40:76:c3:80:bb:1d:9f:ad:81:db:15:cb:
                    22:a9:8d:44:a1:dd:e1:23:e4:b8:ec:67:33:b0:99:
                    4b:45:96:64:9a:a1:70:7f:ce:88:83:e9:f8:21:f1:
                    ba:73:01:8a:dd:bf:a9:dc:63:7e:91:40:0f:60:1c:
                    d0:93:e9:9d:00:25:a9:ba:b0:eb:82:20:5a:ef:9d:
                    83:09:ea:d4:51:13:de:6e:54:76:f3:94:15:64:41:
                    f7:db:11:62:e6:cb:12:06:62:21:ca:71:37:55:c0:
                    29:6c:3b:3c:a1:83:b8:35:e8:ba:ed:a2:53:a8:12:
                    e8:06:79:da:51:da:17:42:90:55:d5:b4:3b:0f:17:
                    ea:f7:8c:83:b2:19:4a:36:2f:c4:2d:45:21:62:03:
                    f6:fb:37:40:84:fa:92:cf:9a:59:b8:f5:9c:b4:ee:
                    33:1e:20:ce:19:db:5d:79:f5:19:d1:7e:a3:60:c8:
                    26:45:c8:90:f6:bb:65:68:f2:ed:62:d5:4c:55:96:
                    12:67:1f:c5:5a:84:bb:c4:64:02:36:04:c0:8d:0e:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:36:21:34:E2:4E:50:EF:2B:A0:6A:B3:FA:B6:8C:EA:FD:6B:EC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ab187e-585b-31f6-8e42-5ccc9657a6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:07:2d:5e:0b:47:e4:4a:e3:72:43:4c:9e:4a:8b:d8:7e:
         c5:9b:fe:cc:0d:20:3e:34:1f:59:f6:1f:f8:5f:ec:3d:1a:04:
         15:26:57:05:76:ee:1d:f1:44:e8:99:31:36:95:26:f2:83:8d:
         f0:13:08:fb:e0:9f:93:77:77:d4:23:08:8a:23:e5:37:b4:5a:
         c1:d9:db:f8:49:fd:ec:ca:b3:e4:f6:03:e8:f0:73:31:82:3b:
         f3:7a:c7:00:aa:cb:6f:17:a4:25:05:2e:60:5a:72:31:fb:c5:
         5b:61:85:10:68:e8:5c:26:da:f4:2c:30:1e:f7:69:6e:ce:71:
         53:94:32:fb:cf:4d:e9:54:df:cc:2e:6c:17:10:9e:c7:cf:33:
         ab:7e:f3:73:47:70:af:a6:4a:5b:f6:b3:c6:bc:1e:19:3e:1c:
         4c:8f:ff:b3:67:60:89:56:5b:cc:04:a5:af:b1:2a:57:ae:e3:
         b9:ce:a0:98:38:cf:a5:38:fd:7f:3f:1d:ad:31:2e:dc:9b:d4:
         04:4d:26:2f:de:85:10:ee:ee:b1:46:16:2c:2e:50:89:fe:e9:
         ff:33:3c:18:79:4d:7b:59:fe:7e:74:1f:5d:31:d4:18:ec:39:
         ac:52:22:34:9d:18:ba:ab:3c:9c:eb:60:71:29:cf:e1:76:6c:
         5c:08:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:29 2024 by rpki-client on console-ams.rpki-client.org