Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
File:                     543dded8-773c-37ac-918d-3d2bf1c75c74.roa (raw, json)
Hash identifier:          ZCAyBkrzZVkzz28iJ+JAZaDtJURtIfxSAND62j2rJ6Y=
Subject key identifier:   02:E8:05:79:52:53:DB:34:29:EE:B1:D5:9B:2F:ED:AD:18:07:1D:D0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585489111FB589D0C0C9480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
Signing time:             Thu 14 Mar 2024 21:52:28 +0000
ROA not before:           Thu 14 Mar 2024 21:52:28 +0000
ROA not after:            Wed 12 Jun 2024 21:52:28 +0000
asID:                     41264
IP address blocks:        104.133.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:48:91:11:fb:58:9d:0c:0c:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:28 2024 GMT
            Not After : Jun 12 21:52:28 2024 GMT
        Subject: CN=affc1f6d-6728-46e1-a4b6-91ec3d186cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:6f:f5:20:10:88:39:2a:86:3c:21:90:c1:
                    7f:3f:56:85:50:58:ab:b9:da:1a:57:92:81:0a:a8:
                    b2:91:98:7f:64:75:0c:6f:9c:81:c8:86:86:5a:10:
                    2b:47:15:6a:ad:01:b2:0a:d3:14:de:06:45:3c:ac:
                    2f:2f:04:0e:b3:e1:ef:d2:75:68:6e:e9:a0:fe:b9:
                    f2:f8:11:c1:d3:76:f4:4c:78:9b:6f:81:d0:8d:c6:
                    29:7d:7a:45:98:51:77:d2:ae:ce:98:a7:92:82:fb:
                    33:91:6d:80:c3:0b:d0:01:b3:19:be:1b:24:33:e7:
                    b9:e1:98:ed:93:e1:ae:d6:13:40:67:92:97:c5:2b:
                    20:c9:ee:83:92:09:2c:81:80:fe:8d:02:60:34:e4:
                    d1:22:6c:f9:48:d9:67:90:16:d8:d9:1c:f3:86:6b:
                    7f:b8:12:1f:e8:39:f9:30:6f:a1:f7:34:2a:e9:88:
                    9f:40:10:c6:06:cf:77:3d:b9:68:4b:1f:3b:b2:3d:
                    e4:33:b9:cf:0e:ed:d4:92:36:a7:d4:66:2f:99:97:
                    75:c9:e5:7f:ca:10:74:96:db:c1:7a:2b:b6:f2:b4:
                    2a:94:03:a8:d4:17:d2:44:22:f6:0e:0e:28:0e:e0:
                    f2:2c:de:ef:ce:1b:c7:c6:ba:3d:5a:f3:32:a9:24:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E8:05:79:52:53:DB:34:29:EE:B1:D5:9B:2F:ED:AD:18:07:1D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:77:aa:27:8a:17:f7:01:69:cc:93:65:e4:ca:52:61:8c:63:
         19:f4:72:ac:92:06:54:82:7b:bd:5b:46:ec:2f:8e:9f:4a:ee:
         33:ce:5c:8c:26:03:3b:56:89:8b:a4:5d:a8:e1:93:1e:d2:b0:
         c8:e1:6c:88:1b:1f:1b:8b:67:ee:9f:d1:7f:37:3f:cc:35:38:
         1a:ae:71:0a:c6:dc:52:2d:d2:8c:97:6a:9b:37:64:38:a2:8d:
         18:fa:71:5b:77:49:13:98:10:01:69:9a:b9:62:e6:4d:04:c0:
         e9:e6:9b:1f:2f:02:7d:78:8c:30:f4:14:f7:f4:57:0d:2a:a4:
         37:68:4f:0c:09:ff:fe:b5:fc:73:2f:2f:a6:da:de:1a:93:98:
         d7:48:62:43:a1:04:79:86:ff:03:93:74:bf:83:92:92:09:69:
         47:f1:cd:a4:25:a0:e1:2e:8e:82:3f:68:f8:c5:b2:69:7e:37:
         97:36:db:0f:e7:24:7a:93:37:6a:76:b4:a4:91:58:9b:68:c9:
         56:82:4f:bc:4a:95:c9:dd:0b:e9:65:cd:af:ff:b5:d9:73:67:
         d0:9a:9b:b8:f5:8b:6e:3c:2f:c9:18:d4:f6:53:78:78:f4:b4:
         ac:78:b3:c7:f5:e1:f2:98:29:10:d8:9c:a8:f2:d4:91:36:e0:
         6f:58:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:57 2024 by rpki-client on console-fra.rpki-client.org