Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46436c02-9fe1-30a7-be61-4c7eb0a2b20c.roa
File:                     46436c02-9fe1-30a7-be61-4c7eb0a2b20c.roa (raw, json)
Hash identifier:          Kz6CzQOMiZyCHKR6Ohyd6OUOuCyXdLKGufd2vBta9OU=
Subject key identifier:   CA:9B:BB:B9:EC:CC:9A:D9:00:CB:4D:B1:F3:8C:6E:5A:01:C6:A4:7F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858452FF9323BBD2784D9B6A6CE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46436c02-9fe1-30a7-be61-4c7eb0a2b20c.roa
Signing time:             Tue 12 Mar 2024 22:11:10 +0000
ROA not before:           Tue 12 Mar 2024 22:11:10 +0000
ROA not after:            Mon 10 Jun 2024 22:11:10 +0000
asID:                     41264
IP address blocks:        104.132.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:f9:32:3b:bd:27:84:d9:b6:a6:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 12 22:11:10 2024 GMT
            Not After : Jun 10 22:11:10 2024 GMT
        Subject: CN=507cc208-cd2f-4bf4-af21-aff6c1e64e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:22:90:cf:57:c9:14:df:dd:ba:0a:e1:79:
                    cb:0d:19:b8:3a:c3:7d:ae:e8:bc:99:62:fe:76:7e:
                    ef:a9:48:17:7a:e6:c7:08:77:91:e8:90:80:f4:87:
                    67:11:fb:9c:9b:e1:4c:88:75:dd:42:71:43:f0:50:
                    87:d3:90:49:13:85:71:58:21:44:35:4b:f2:d0:8e:
                    86:2d:69:5b:9c:6b:d1:f8:ff:fa:06:20:9b:80:8f:
                    fa:48:2b:05:ef:b5:59:4a:e6:fc:d8:89:e2:47:21:
                    2b:84:d0:95:5e:87:b2:b7:c4:44:30:f7:1c:e6:f4:
                    c2:b5:8a:de:84:39:24:3a:4e:9e:11:b3:6c:8a:37:
                    58:0f:13:0d:85:4f:c3:e7:35:74:ba:71:cf:1e:3b:
                    2b:d6:60:f2:fd:69:d2:d1:01:bc:fe:44:13:be:1f:
                    b2:4a:37:25:39:fd:e2:d4:34:1c:69:f3:ba:f0:23:
                    2d:89:f8:19:1e:b8:e6:07:3c:bb:c0:08:14:a9:e8:
                    a6:79:55:2f:dd:c2:9a:b4:f0:a7:6c:74:7a:aa:55:
                    e8:e7:ee:8f:68:35:5e:d7:e6:67:ad:84:bd:55:a2:
                    8c:ee:f4:72:bc:4e:31:a1:57:ea:d5:5d:0b:49:58:
                    fd:c5:a6:07:26:bd:bd:a0:9f:22:2a:a0:ce:d2:fa:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:BB:B9:EC:CC:9A:D9:00:CB:4D:B1:F3:8C:6E:5A:01:C6:A4:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/46436c02-9fe1-30a7-be61-4c7eb0a2b20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:06:f6:42:f6:a1:44:31:e8:67:ff:05:fa:8d:de:84:3b:ee:
         02:24:3f:2e:9f:9c:a9:f6:ee:3b:ae:37:10:fd:3f:62:19:f7:
         e1:0f:b4:09:4d:60:c2:de:95:1b:8e:7b:d8:0b:1d:a5:26:f3:
         74:a3:55:a5:6b:cd:0d:1b:3d:29:72:2a:00:cf:07:ac:d5:5b:
         4c:de:4e:13:32:16:5d:cb:44:e2:af:76:46:a2:7a:da:a8:e0:
         5a:8e:44:a3:c7:93:51:14:6f:cd:09:b8:4a:aa:55:4f:ca:6f:
         2b:15:89:8e:f5:d4:d8:9f:7e:37:9a:01:e7:7a:b1:ae:89:ae:
         a9:fe:77:7c:76:b3:23:18:f3:4a:94:9e:7e:a3:e1:16:02:6b:
         06:1d:a2:b0:73:76:a4:84:80:de:fd:93:c9:45:e8:88:c3:72:
         b5:b2:4c:96:6a:8d:fb:87:ee:40:f5:13:d5:ff:4f:c1:b4:f1:
         31:cf:1b:9b:ac:cd:99:c4:a8:ff:e3:60:10:5d:7d:25:53:1b:
         12:b8:de:52:cd:a9:f9:df:f4:1b:38:aa:be:86:b1:b9:5f:bc:
         6b:d0:d6:09:54:b5:5a:a9:bf:3f:e6:d1:0c:f4:84:fa:87:e3:
         d1:f4:41:9d:1e:f6:49:23:8f:e8:f5:e3:73:a2:ed:32:c2:b8:
         21:71:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:21 2024 by rpki-client on console-fra.rpki-client.org