Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa
File:                     41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa (raw, json)
Hash identifier:          DUz20IH9juLLLgZ3lNidiL8KZm1pO8kAve9tFOCZBMM=
Subject key identifier:   FC:21:54:9D:EB:C0:72:BC:C1:D4:B8:1F:33:DF:CE:D4:69:12:07:2B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453284B2093C08B8BFB89DFDC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa
Signing time:             Wed 13 Mar 2024 20:03:51 +0000
ROA not before:           Wed 13 Mar 2024 20:03:51 +0000
ROA not after:            Tue 11 Jun 2024 20:03:51 +0000
asID:                     41264
IP address blocks:        104.132.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:b2:09:3c:08:b8:bf:b8:9d:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:03:51 2024 GMT
            Not After : Jun 11 20:03:51 2024 GMT
        Subject: CN=0913c229-2c42-4335-b2cd-9a461c129d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:4b:1a:34:85:86:2e:eb:9f:2b:67:2b:69:
                    61:79:3a:b7:c8:8a:7d:22:44:89:40:bf:07:8d:59:
                    00:e3:72:0e:2c:be:8a:75:46:18:29:d9:1a:75:ab:
                    41:bf:1d:a2:f1:b4:ad:8b:2d:bb:24:2d:16:c6:34:
                    d6:e3:c4:cb:d1:d8:61:5d:99:d8:2b:db:9b:f4:0d:
                    fb:7f:f9:cf:b8:8e:a7:e9:75:bd:ea:55:7c:28:33:
                    d1:19:db:b7:9f:e6:6e:3f:ec:10:9b:0b:18:42:8d:
                    57:63:97:47:6e:9d:a3:62:19:5c:18:14:07:4d:4c:
                    0e:dd:5d:e6:5a:55:a2:45:3a:a5:11:f1:b2:77:90:
                    60:e3:70:c1:71:16:cf:d1:b9:81:ee:3b:ac:41:35:
                    46:1e:ad:9a:89:75:80:a8:1d:20:3c:78:15:cd:20:
                    ed:9c:6a:71:c2:e0:85:64:79:5a:e5:d6:58:c1:b0:
                    96:36:f0:49:50:ca:97:8d:33:c7:85:d4:99:8c:2b:
                    ec:9d:87:d5:e8:16:38:be:0d:60:5e:b5:ab:5d:af:
                    97:ba:7c:ca:29:21:e0:4d:8f:ed:31:88:f4:34:a1:
                    05:43:2d:a5:90:23:02:53:1b:a4:21:cc:65:dd:a5:
                    02:c7:a2:f7:e8:66:69:cc:42:f2:dd:4f:8b:55:55:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:54:9D:EB:C0:72:BC:C1:D4:B8:1F:33:DF:CE:D4:69:12:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:b5:62:3b:21:33:41:03:11:2c:1e:5e:ab:f1:84:ba:5e:04:
         2f:24:34:a2:dd:be:b9:6a:bb:0d:58:c8:d4:b0:ea:17:54:84:
         63:bf:44:d8:03:8a:ca:46:9e:9e:4b:9b:1b:52:08:1d:84:ed:
         41:cb:a7:07:d9:32:30:0e:cd:b4:bd:f9:48:07:1e:32:01:cf:
         1c:39:14:e0:aa:c0:b9:55:32:a8:97:27:03:87:78:86:87:2d:
         c4:5f:69:bf:3f:32:0f:67:0a:e4:2c:52:10:3f:69:b0:22:e8:
         a5:b9:ea:72:bd:15:cb:ef:fa:9e:7d:3c:fc:f9:31:b0:2f:b5:
         68:32:24:c3:51:b7:04:b6:18:be:74:b7:b3:ea:d0:08:13:17:
         1e:26:f6:27:78:54:08:b1:6c:90:2c:41:71:61:be:c2:59:b2:
         37:c4:ad:7c:17:5c:0f:47:0d:23:a0:6a:51:92:7e:a6:5e:33:
         01:98:bf:94:79:13:e3:37:f5:c5:75:59:16:d1:60:5c:fb:9c:
         b1:45:7a:f0:4a:8a:0f:7a:61:ed:1e:35:7e:1c:4c:47:7b:c8:
         1f:12:bb:da:31:12:5a:aa:3a:d0:0f:bf:ca:84:91:d3:28:5b:
         56:c7:9f:0c:94:a6:1e:1c:8f:1d:65:7d:54:2f:e3:38:55:03:
         a2:b4:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:56 2024 by rpki-client on console-fra.rpki-client.org