Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa
File:                     4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa (raw, json)
Hash identifier:          92Lj6M4z626L3VIPYzy9+9274wTXm2fDM/27kAHL+UU=
Subject key identifier:   97:39:0B:19:12:2B:C1:7E:CC:8A:E1:93:56:BE:28:6D:E4:56:27:C1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453283BA4B36B6882AD07FF000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa
Signing time:             Wed 13 Mar 2024 20:01:54 +0000
ROA not before:           Wed 13 Mar 2024 20:01:54 +0000
ROA not after:            Tue 11 Jun 2024 20:01:54 +0000
asID:                     41264
IP address blocks:        104.133.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:ba:4b:36:b6:88:2a:d0:7f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:01:54 2024 GMT
            Not After : Jun 11 20:01:54 2024 GMT
        Subject: CN=e34ac740-8c75-4b52-8e98-6997464adc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:71:c2:c5:da:99:dc:6b:92:9a:29:0f:df:
                    2a:c3:9e:8e:fc:e1:4c:bf:ea:fb:fd:de:5a:ec:3a:
                    49:be:f6:31:d1:f4:3b:ef:58:53:51:5b:1c:90:03:
                    1a:ae:9b:bd:24:ad:35:52:a0:01:1d:f0:c9:e6:b1:
                    b6:d9:fd:20:06:b8:a2:a3:a2:8e:15:01:61:ab:0d:
                    63:63:61:c5:5c:f7:04:d2:ed:bb:22:c7:46:59:2d:
                    77:8a:b1:80:a7:e4:5e:10:9f:02:35:f0:15:c5:8c:
                    9c:2f:29:8d:a9:3d:29:35:3f:01:3c:5d:45:de:5e:
                    bc:af:2b:69:dc:0a:92:31:2b:bb:df:a6:a7:15:fc:
                    28:7b:6f:92:82:27:7b:5d:f6:15:d6:16:eb:07:35:
                    1c:c2:d0:d4:dc:e7:ae:5a:7c:72:68:09:03:f3:6b:
                    c6:6a:f7:03:02:f6:22:3d:34:a6:c6:28:0d:19:5f:
                    93:3f:00:5c:8c:8e:e7:25:3b:ab:20:dc:0f:20:55:
                    08:94:29:9c:c2:52:45:08:17:da:8f:4e:07:84:0c:
                    81:ce:b7:5d:80:11:48:f2:69:10:d1:d2:4c:55:1b:
                    c2:0e:c7:0c:d2:50:34:ec:7f:6c:42:94:11:ce:45:
                    45:7b:7b:5a:24:04:0d:f3:34:d7:8e:e8:90:df:25:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:0B:19:12:2B:C1:7E:CC:8A:E1:93:56:BE:28:6D:E4:56:27:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:21:71:b4:52:79:09:40:28:f4:da:e1:04:a8:96:86:5e:76:
         b9:b3:dd:ff:c5:6e:f7:c6:42:12:a3:f7:b8:05:b9:f3:7b:d2:
         6f:82:d9:0d:81:a9:d8:43:5e:38:fc:f7:ed:bc:d8:cb:bc:75:
         c8:28:97:14:d0:0a:a3:74:07:7a:2b:ec:7b:93:93:0d:0e:75:
         04:7d:6b:e6:2f:97:6f:25:f2:30:81:53:e1:c9:26:be:cb:d8:
         9c:13:ce:67:df:54:b1:7e:1a:64:15:33:ff:f7:7b:cb:36:16:
         87:e5:22:5d:6e:9f:80:ed:42:e3:e2:b1:fd:e6:a1:b4:22:13:
         6f:d9:0f:55:00:16:d0:eb:c3:d6:bf:e0:1e:b2:aa:c7:e6:34:
         14:8c:b8:40:d1:d1:bc:59:df:93:2f:07:2b:44:17:f5:7a:49:
         8d:1a:ed:ec:9a:8e:55:9b:6f:ce:85:36:f5:d4:1e:1a:55:90:
         c3:1b:74:61:a5:bd:75:7f:e0:76:fb:54:64:90:3b:f8:fd:49:
         a1:87:6a:b3:4c:e8:db:49:44:77:a2:d2:d6:19:e7:be:5b:45:
         33:37:b1:b8:b4:cf:0d:a9:7f:a7:86:24:2b:be:b8:51:c8:09:
         bb:5c:42:b4:d8:95:be:e0:02:2d:c6:0e:e8:10:dc:60:ce:41:
         22:2f:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 10:23:40 2024 by rpki-client on console-ams.rpki-client.org