Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/554644c6-bfc2-3054-8bb1-b578305cea99.roa
File:                     554644c6-bfc2-3054-8bb1-b578305cea99.roa (raw, json)
Hash identifier:          Ig6jFmc3wsfjBJNOya+y5cmebSUi6wNGBt5AGAKmXmE=
Subject key identifier:   08:D9:E0:70:B8:8E:2E:8E:B5:3E:E3:77:0A:BD:6E:69:A4:D4:39:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584532835AFE80BA9E0FFF838800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/554644c6-bfc2-3054-8bb1-b578305cea99.roa
Signing time:             Wed 13 Mar 2024 20:01:09 +0000
ROA not before:           Wed 13 Mar 2024 20:01:09 +0000
ROA not after:            Tue 11 Jun 2024 20:01:09 +0000
asID:                     41264
IP address blocks:        104.132.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:5a:fe:80:ba:9e:0f:ff:83:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:01:09 2024 GMT
            Not After : Jun 11 20:01:09 2024 GMT
        Subject: CN=1c28238d-267f-4652-937f-2d9229a14939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:8c:7a:88:dc:92:70:4f:d6:12:cf:23:e0:
                    e9:79:61:eb:46:17:54:30:a2:e3:a1:d2:32:67:05:
                    e9:63:91:40:a8:2d:8f:6a:e8:fd:b8:df:bd:09:ca:
                    6d:aa:9f:81:33:92:3e:92:74:6e:e5:11:51:76:91:
                    2b:29:4b:b5:d3:1a:63:f3:af:93:cd:ef:d1:7f:38:
                    fd:8a:85:6d:0c:58:7c:96:e6:33:b2:12:95:21:cd:
                    c1:51:0b:39:33:53:65:20:c2:f2:87:74:da:52:97:
                    99:4f:5a:c9:95:32:9b:8b:91:2a:04:c5:cf:5c:da:
                    51:eb:85:c2:b9:bf:b5:86:dd:5b:eb:f1:1e:50:22:
                    7f:1c:e3:bf:cb:9c:2f:31:15:f0:8d:54:0b:4c:34:
                    be:46:61:2d:55:e9:87:e6:30:1a:a7:c3:5b:71:a4:
                    ad:e4:a9:58:22:32:5b:4b:6a:0e:3e:c3:82:91:56:
                    4d:5c:eb:9f:1d:9e:52:84:9b:73:d6:a5:be:bc:8b:
                    10:e8:00:e9:4e:24:d4:bd:e6:85:e2:a7:45:e0:b4:
                    79:ed:0d:a4:ca:f5:1b:16:ef:7f:b4:45:40:cb:dc:
                    15:05:16:b0:f7:07:c3:03:89:cf:e6:fa:28:3b:a4:
                    31:ec:65:c3:d3:6a:29:a8:17:6c:d4:83:74:31:74:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D9:E0:70:B8:8E:2E:8E:B5:3E:E3:77:0A:BD:6E:69:A4:D4:39:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/554644c6-bfc2-3054-8bb1-b578305cea99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:15:bb:88:23:d9:41:ad:a9:82:10:98:69:75:ed:75:cf:51:
         21:81:91:cf:42:0c:f3:1f:1e:6d:7d:78:66:27:13:f8:11:28:
         a9:ca:5b:de:6e:26:7a:a0:71:e4:6f:d8:aa:2c:60:68:14:1f:
         29:37:70:de:7e:33:16:ee:b7:c0:8d:7e:88:9c:1d:a8:aa:9b:
         18:46:3f:67:31:f8:fe:ae:e7:11:4f:c8:33:2b:ca:d4:f1:38:
         70:51:0a:f3:99:5d:14:f6:1b:2d:b0:8b:ba:07:85:ed:e5:ec:
         4e:19:1f:e1:12:cb:43:a8:d6:aa:9c:9e:43:c1:3a:0f:89:6f:
         80:f0:59:b1:b8:34:7c:80:2d:2c:08:c0:28:eb:bd:99:6b:8a:
         37:4a:6d:4c:08:f7:68:38:5e:35:cb:0f:35:8f:5c:da:29:bf:
         c9:88:68:80:86:5d:e0:1f:f2:22:e3:8c:7f:85:88:30:d4:2d:
         4e:8f:07:d3:4c:e5:c4:cd:37:a9:93:66:0a:c3:38:f6:d0:d4:
         03:1f:73:9a:44:f3:ab:06:9d:a0:b7:1b:b8:ff:b7:6f:1f:8f:
         e8:c9:16:94:17:f6:75:1b:b4:86:90:8f:a7:c1:24:cf:53:5b:
         ad:bb:45:e7:eb:0b:27:87:42:a2:f1:f7:3a:7a:01:59:a5:36:
         33:ad:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:22 2024 by rpki-client on console-fra.rpki-client.org