Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa
File:                     454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa (raw, json)
Hash identifier:          mppst+eyXEi6p82YAeEJ1rXx+3yiohBG59wzVMXNMsg=
Subject key identifier:   C5:31:AC:EF:8B:20:0A:BD:27:08:B1:50:88:26:C7:C6:2A:D8:14:AE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858452FF927B719A69901A29CDE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa
Signing time:             Tue 12 Mar 2024 22:11:05 +0000
ROA not before:           Tue 12 Mar 2024 22:11:05 +0000
ROA not after:            Mon 10 Jun 2024 22:11:05 +0000
asID:                     41264
IP address blocks:        104.132.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:f9:27:b7:19:a6:99:01:a2:9c:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 12 22:11:05 2024 GMT
            Not After : Jun 10 22:11:05 2024 GMT
        Subject: CN=21c3ad69-fa7d-46fe-af72-f5123b50f22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:cf:63:73:93:de:da:a5:87:d9:62:27:86:
                    56:f1:02:02:b5:1d:e7:00:44:4a:c0:8f:26:58:eb:
                    86:15:3d:0f:be:2b:f8:46:85:a7:ce:ef:a3:32:16:
                    df:18:d2:09:a0:8e:28:ff:39:c3:3e:ec:1b:e0:09:
                    a6:25:20:91:0f:b7:b2:4c:c7:44:85:0f:51:44:93:
                    27:18:71:3a:80:06:25:ce:b2:35:8b:dd:91:29:08:
                    69:f4:79:5d:3e:27:42:a6:43:06:bf:74:b6:59:59:
                    dd:ca:0c:73:60:75:3a:0c:ac:8f:f1:0b:af:17:ba:
                    e6:90:8e:cf:80:e0:c0:45:31:65:0c:dd:4f:e4:7b:
                    0d:19:8d:f0:15:aa:c6:73:ab:49:1b:e8:1d:20:c0:
                    6c:d5:91:d2:45:4e:fd:10:13:02:76:6b:3f:57:b5:
                    86:cb:5e:da:24:5f:46:3e:d0:8c:1e:6c:16:83:44:
                    bd:a7:cf:ce:10:d8:f6:2f:e9:1d:29:d1:56:8c:4a:
                    76:8b:90:01:c0:19:ed:86:93:97:b9:a2:4f:e3:2a:
                    c1:ea:c9:ee:15:79:88:d2:b8:96:95:4e:ca:4c:5c:
                    5d:ca:f9:9a:ae:21:e2:7f:59:35:99:10:0d:03:cb:
                    2b:ae:8a:a7:cc:b4:bb:21:3b:78:d0:53:15:7b:50:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:31:AC:EF:8B:20:0A:BD:27:08:B1:50:88:26:C7:C6:2A:D8:14:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:2c:ce:65:6a:19:b8:7c:21:39:88:a6:07:4f:f8:2e:38:
         03:1b:41:f3:05:b7:d4:2e:8b:51:6c:fa:a4:6c:2c:0f:d8:bc:
         d1:d0:ef:53:a4:c8:eb:76:d8:37:40:7f:21:e8:f1:63:a1:d9:
         7a:58:da:74:01:4a:fb:7b:22:9f:5c:24:5e:eb:41:17:88:81:
         35:a9:60:07:cd:89:96:29:ed:ca:0d:97:69:a0:1b:5b:3c:13:
         76:d4:a9:6b:35:19:03:76:4c:14:f2:57:bc:84:51:a1:6a:fa:
         82:c4:12:47:55:86:0d:42:23:4c:40:55:c9:c0:47:c6:50:bf:
         b2:a5:6f:0f:e7:44:b5:00:bf:27:b2:76:7c:36:d3:bb:43:c1:
         cc:64:05:7e:df:67:9c:f9:53:ad:19:32:f3:26:5b:0e:b6:c0:
         cd:49:97:7a:b7:30:ef:b7:d8:e7:72:23:dc:51:7b:d8:f4:5c:
         0b:b4:50:10:da:a6:4b:a2:47:6f:c6:d6:f4:a4:84:5c:da:2c:
         0a:6d:0e:11:ea:f9:9a:e0:1e:8e:1c:bf:9a:fa:6a:88:21:44:
         12:0b:ea:72:1e:88:6a:49:22:ce:e3:aa:28:85:15:2b:4a:f6:
         30:0b:fe:4e:52:b0:2a:1e:f6:94:f7:34:36:0e:1f:6a:48:71:
         d8:c5:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:37 2024 by rpki-client on console-ams.rpki-client.org