Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/459e4f7c-10d6-3301-91fb-62c0fe058816.roa
File:                     459e4f7c-10d6-3301-91fb-62c0fe058816.roa (raw, json)
Hash identifier:          fvHL5bBV90vvt+4BNdT7ZE/1LYD+venAVDhmDuG+i44=
Subject key identifier:   2E:5A:6F:54:04:00:26:77:E6:B1:57:D3:3A:80:18:3B:4B:95:43:E4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453284A5619E12FA9DBAB47500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/459e4f7c-10d6-3301-91fb-62c0fe058816.roa
Signing time:             Wed 13 Mar 2024 20:03:45 +0000
ROA not before:           Wed 13 Mar 2024 20:03:45 +0000
ROA not after:            Tue 11 Jun 2024 20:03:45 +0000
asID:                     41264
IP address blocks:        104.133.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:a5:61:9e:12:fa:9d:ba:b4:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:03:45 2024 GMT
            Not After : Jun 11 20:03:45 2024 GMT
        Subject: CN=c7f336e4-951a-46b3-83b1-d7677f28c61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:ae:6f:92:74:08:01:f6:9c:33:d6:a7:9a:
                    0d:97:c9:06:b5:d6:56:64:e6:4d:a1:f7:8d:e7:cc:
                    ba:fa:c6:ae:7f:9b:6c:09:1c:cf:7b:c6:d9:08:7e:
                    e5:41:4f:1c:6e:3a:e0:78:da:9b:af:32:68:d2:0b:
                    6f:3a:74:9f:50:aa:2f:32:3d:f7:e5:ae:72:6d:64:
                    72:2f:9d:de:01:9b:9d:bf:9e:cf:c0:04:49:70:3a:
                    b5:28:2f:c1:5a:fa:10:c9:08:6c:23:ec:f4:f5:b2:
                    05:59:62:c6:13:2b:62:86:0d:a4:e9:3a:12:08:b9:
                    1d:17:e9:fd:d4:ba:7f:11:1e:cb:f4:e5:c1:8b:bc:
                    76:2a:83:63:35:52:87:56:6f:8d:85:af:19:94:79:
                    22:d1:7b:c7:d8:03:55:6f:f5:89:37:2c:64:af:36:
                    4c:dc:56:b0:38:7a:49:6a:57:85:09:2c:d8:3f:ad:
                    84:26:28:9a:1e:38:af:c8:78:f2:82:c6:40:1c:9f:
                    e6:20:58:17:a6:c2:89:1d:14:85:d5:97:8d:c4:d7:
                    6c:66:1d:25:af:8b:c6:0f:ea:ba:7d:62:3a:e3:73:
                    e3:52:15:0c:7f:c9:56:82:21:1c:9a:1f:59:a5:0a:
                    a0:2d:b3:f5:e7:20:f2:a2:7a:8e:ce:d1:73:4d:99:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:6F:54:04:00:26:77:E6:B1:57:D3:3A:80:18:3B:4B:95:43:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/459e4f7c-10d6-3301-91fb-62c0fe058816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:3e:02:e4:c6:f7:76:a9:17:96:54:0b:57:db:49:9d:f1:
         34:e4:6c:d7:cd:13:7c:27:46:02:d5:db:4d:1f:53:8e:8d:7e:
         ff:6d:57:0b:4b:6f:8a:83:93:c1:93:5d:f3:69:8b:28:b9:53:
         f2:6b:ea:f1:cb:f6:e7:cd:f3:0d:72:3f:40:62:61:41:60:95:
         6f:91:17:87:9b:76:71:80:9d:9f:9b:0a:da:a8:53:66:95:e4:
         80:ea:46:51:64:9f:bd:48:ff:a7:7c:94:22:be:d6:87:f6:39:
         56:28:52:4d:48:f6:31:2c:2f:54:db:78:ff:2f:ce:c2:46:95:
         49:da:cc:b0:5f:6f:98:f7:4c:fb:3f:43:8c:b8:5e:dd:e9:ec:
         8b:7b:22:48:2d:ea:84:2e:9f:b4:b0:ae:6c:f4:83:91:c4:b7:
         aa:da:50:8c:7a:52:6d:ac:9b:87:4f:f5:04:15:31:13:3a:a9:
         d4:bf:5f:7d:d6:9f:6a:d1:93:7a:61:79:69:78:cd:fc:1f:b3:
         73:17:ef:fd:28:e0:ad:5f:9b:cc:18:0f:05:c9:03:81:8c:73:
         7e:0f:ee:de:6c:0d:1c:02:5d:4a:1c:a9:49:b1:d1:60:79:84:
         0c:b1:39:50:e3:6c:9d:31:dc:7e:a5:e2:e6:84:d0:3f:ba:98:
         55:72:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:30 2024 by rpki-client on console-ams.rpki-client.org