Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
File:                     4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa (raw, json)
Hash identifier:          p49FhPwRxyGNnlsbrBGpCgiuLTML0XLGASuszQNeb3M=
Subject key identifier:   30:14:B2:DE:21:31:E0:1D:E6:E1:E9:A0:25:6A:BF:38:E8:A3:E8:BF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B910217A6980D5BC039000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
Signing time:             Mon 18 Mar 2024 22:10:41 +0000
ROA not before:           Mon 18 Mar 2024 22:10:41 +0000
ROA not after:            Sun 16 Jun 2024 22:10:41 +0000
asID:                     15169
IP address blocks:        104.134.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b9:10:21:7a:69:80:d5:bc:03:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:10:41 2024 GMT
            Not After : Jun 16 22:10:41 2024 GMT
        Subject: CN=3f18741b-6412-4b94-91e5-a1240b81d1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:5a:5e:9b:c7:1a:42:65:c6:de:d2:3f:ef:
                    30:a2:bf:ef:77:bf:8a:73:de:cb:ab:15:3d:04:4c:
                    22:73:6a:20:80:66:24:31:cd:18:ff:6e:02:eb:d2:
                    c7:ac:dd:5d:6a:99:9a:6c:bd:34:5f:85:7c:b9:0a:
                    6a:3d:b6:af:e6:36:ee:c5:f5:88:f1:f6:74:b6:34:
                    37:2a:ef:8c:8e:0d:d4:41:bf:a7:e7:74:51:db:31:
                    cb:45:1b:91:15:aa:1d:6d:11:1a:30:d6:c3:1a:78:
                    ba:d3:8c:2a:8a:92:cf:01:a0:e0:c1:cd:81:cd:ba:
                    84:8d:83:1d:14:eb:a2:90:50:cd:46:82:b4:78:d3:
                    76:6a:64:b9:3f:f5:39:fa:03:b1:f8:de:a5:f0:13:
                    b1:bc:34:09:f2:c7:d2:93:49:88:7f:1e:1b:fb:8b:
                    bb:6e:ea:68:88:11:f5:08:0f:de:db:83:b6:2e:58:
                    96:22:30:fe:cb:d2:98:7c:2d:b4:22:d8:a1:aa:16:
                    48:2d:d5:3c:97:c7:67:d4:22:88:be:9e:d2:60:cb:
                    f3:03:0f:de:0c:11:42:fa:03:fe:8b:3b:2a:76:07:
                    e1:8e:84:28:f2:2d:8d:45:65:bd:af:79:44:d4:98:
                    de:30:c2:8c:e2:d5:fe:24:fa:ac:35:b7:a8:90:07:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:B2:DE:21:31:E0:1D:E6:E1:E9:A0:25:6A:BF:38:E8:A3:E8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:62:02:c7:e3:53:f3:2e:e2:51:3a:72:af:08:72:68:ea:3e:
         c2:3d:2f:ab:bc:e0:af:74:0a:fd:e6:51:dc:bc:6d:7d:7d:86:
         80:09:bf:2c:c9:00:b9:74:49:f5:69:44:f6:45:d4:da:0c:c9:
         b5:43:8e:51:e2:4d:d8:9c:81:a9:95:69:41:6a:f3:a1:cc:9c:
         27:b2:8f:b3:38:f4:40:52:5e:e2:4d:37:20:06:0d:6c:e7:af:
         6f:96:2f:47:23:6b:e4:20:3a:dc:19:f6:89:d0:b0:88:76:78:
         15:3b:8f:7f:99:a9:ea:30:d4:74:f2:bb:25:c3:c9:95:c6:17:
         c3:8b:30:dd:a2:a1:ab:aa:1d:33:12:10:07:a9:9e:3e:1b:34:
         7e:fe:97:25:80:2b:fa:9c:e4:08:2f:23:79:31:0b:b1:ad:34:
         fa:fc:19:ff:c0:cb:3c:f1:79:14:87:a2:0a:71:db:53:e0:7e:
         b9:27:ad:72:0f:6e:b2:bd:68:14:47:aa:40:cf:d7:36:11:14:
         51:65:ed:e5:1e:ae:48:dd:f6:00:bc:57:08:fc:27:a4:53:8e:
         c7:e2:a5:fd:f3:33:08:b1:1e:28:7f:35:4b:14:43:be:87:ea:
         5b:f3:83:49:4d:5a:44:be:a4:9f:df:c0:7c:b4:ef:09:06:78:
         c3:8d:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:29 2024 by rpki-client on console-ams.rpki-client.org