Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa
File:                     4c290c10-a245-3f26-b6d5-71393a805d03.roa (raw, json)
Hash identifier:          8Ya974JwPvrs6saGHELhCICCn/IPrA4C/KCxcofNNVA=
Subject key identifier:   46:B0:70:5E:53:40:96:2F:2B:BE:B1:DB:A7:DB:BF:FC:26:45:FF:9E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BC0DAF81CBFCABB1360F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa
Signing time:             Mon 18 Mar 2024 22:16:43 +0000
ROA not before:           Mon 18 Mar 2024 22:16:43 +0000
ROA not after:            Sun 16 Jun 2024 22:16:43 +0000
asID:                     15169
IP address blocks:        104.134.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:0d:af:81:cb:fc:ab:b1:36:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:16:43 2024 GMT
            Not After : Jun 16 22:16:43 2024 GMT
        Subject: CN=82e5ea51-2c84-4c70-830d-b0b5523d5a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:6c:c8:bc:85:84:1f:ad:92:2b:ec:5b:e7:
                    5c:11:ae:73:8c:32:c3:ee:ff:a6:a3:0f:f1:e1:8a:
                    3b:e5:f1:57:4f:dc:8b:ba:15:c4:92:71:b4:6a:6f:
                    81:87:85:f5:9f:1d:6e:2f:71:ee:d5:e9:09:5b:2a:
                    aa:bb:55:71:0a:ef:fb:60:9e:ac:f2:11:89:84:4c:
                    1d:28:2d:89:39:b0:82:16:02:76:23:fc:1e:e5:37:
                    b5:3f:a6:f2:17:0c:54:f4:b5:82:a3:24:28:3f:6f:
                    67:22:57:41:08:e4:6d:4d:4e:43:82:5e:3b:d7:9d:
                    66:63:84:1f:44:f6:fe:5c:6f:b0:d4:cd:d7:1a:da:
                    72:f2:50:fc:32:af:5d:65:79:9e:64:9d:a0:b9:e2:
                    61:fa:6b:10:f0:e2:78:97:90:9c:2a:28:d1:52:a6:
                    53:d1:27:13:35:d5:07:1a:14:31:6a:6b:e3:7f:b0:
                    69:33:bf:9d:d2:aa:4a:84:db:21:70:6e:5f:9a:48:
                    54:14:41:6d:ad:56:a0:c1:d5:84:e6:96:df:52:b8:
                    26:a1:e8:62:15:83:ec:56:ed:f6:92:38:0d:ed:62:
                    d8:56:75:39:60:01:71:74:7e:d2:46:ad:32:cc:e5:
                    30:a4:d8:c1:f9:b1:c4:d0:58:a7:3d:2e:f1:06:d0:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B0:70:5E:53:40:96:2F:2B:BE:B1:DB:A7:DB:BF:FC:26:45:FF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:78:a7:dd:ba:6b:81:02:bb:18:af:8c:b2:26:5c:2c:67:9a:
         8c:27:8e:3b:8b:a5:d9:bc:c1:d4:a7:ab:ea:d8:15:7d:c2:65:
         25:c6:8f:8a:e2:6a:a1:89:60:54:0f:8f:72:da:1f:c3:0b:68:
         06:01:07:45:5f:44:5f:6b:dd:4b:bb:33:b7:f5:06:a9:0c:3e:
         af:64:a3:55:4e:ff:87:0f:00:ac:dc:fe:29:71:48:5f:10:84:
         ab:d3:fc:4a:2e:29:b4:67:aa:8e:d5:0e:90:54:3e:44:4f:89:
         1b:82:24:df:bc:e9:29:40:2c:1f:97:c8:24:94:5b:4a:07:87:
         aa:e9:4e:19:33:36:f7:39:85:f6:52:0f:f2:ca:bb:07:21:d9:
         93:e9:2c:bb:e5:3f:ab:41:8c:d1:f9:f2:67:3f:7b:cf:80:74:
         ba:ca:b2:ce:f0:1f:6b:7e:33:d9:55:df:08:c6:3c:84:e0:5d:
         cf:2a:89:04:a2:af:30:36:7d:3d:a2:50:31:7a:b6:df:ac:43:
         26:0d:5a:ba:24:d1:66:44:12:ba:08:6a:97:03:ad:0f:ea:49:
         d7:e9:c0:db:ba:7a:79:09:0f:33:96:5a:9a:ef:5a:f2:61:6b:
         c5:cb:6a:c4:35:e1:38:75:1f:1d:a3:72:6a:41:af:85:98:8b:
         56:68:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:31 2024 by rpki-client on console-ams.rpki-client.org