Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa
File:                     5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa (raw, json)
Hash identifier:          Gl6mrfjiPew62epAvvKZ92sPQpneq4C5SNwScgPblIg=
Subject key identifier:   89:97:04:98:CE:84:82:8B:85:03:B2:6F:86:7B:36:B1:7E:B2:FA:93
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B6FEB2752F828B77BB77C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa
Signing time:             Mon 18 Mar 2024 22:06:31 +0000
ROA not before:           Mon 18 Mar 2024 22:06:31 +0000
ROA not after:            Sun 16 Jun 2024 22:06:31 +0000
asID:                     15169
IP address blocks:        104.134.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:fe:b2:75:2f:82:8b:77:bb:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:06:31 2024 GMT
            Not After : Jun 16 22:06:31 2024 GMT
        Subject: CN=01f06166-57bf-4711-946f-3810e09b012f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:79:04:e3:2a:0f:d8:dd:02:79:4f:9a:ac:
                    b3:da:33:f3:57:6d:a0:37:79:5f:37:de:0e:9e:fe:
                    ac:4c:9b:f5:c9:d9:e6:97:cd:f4:31:f9:34:10:0a:
                    56:ea:aa:2c:1f:0d:33:45:79:e1:88:99:5c:9d:0b:
                    12:32:3f:59:4a:23:50:c9:11:ed:c2:1e:e6:6f:be:
                    5d:ef:64:35:40:0c:8c:fa:85:cb:d5:73:49:20:ea:
                    18:92:cf:83:ee:4c:09:ae:95:00:d1:26:41:dc:65:
                    e3:5e:c3:64:9e:5f:1d:ed:2d:12:2d:9e:ae:dc:03:
                    62:dc:f5:34:9c:ce:fc:32:be:b8:b4:f4:00:bc:08:
                    0f:4b:9b:54:f5:fd:83:58:65:54:a5:58:b9:1c:96:
                    76:7e:f5:83:db:fd:33:3b:fd:df:d7:e4:fc:fb:c2:
                    61:d6:22:62:f2:be:9e:98:f6:ef:5e:17:09:d1:1d:
                    77:9f:4d:c3:f2:e2:38:0f:0c:5a:7a:6a:c2:69:32:
                    1c:d2:c6:f5:6f:88:5f:7f:01:9e:74:9a:33:31:6b:
                    37:92:8e:7a:aa:a8:b9:b2:38:ff:ad:fb:36:6d:79:
                    cb:fa:66:79:ae:8f:34:45:cf:e3:1f:67:a0:c6:d6:
                    b1:17:32:b0:79:46:d3:db:9c:48:a8:0b:80:ab:dc:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:04:98:CE:84:82:8B:85:03:B2:6F:86:7B:36:B1:7E:B2:FA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:d9:87:0d:f4:7b:97:1c:2a:c4:c1:40:f5:77:6c:24:17:
         0a:13:d6:6c:a8:4b:9f:3d:ab:ce:38:1e:b3:3d:99:ab:69:ed:
         79:fe:52:c1:cc:d1:ac:1c:cb:d2:5d:9c:5e:d1:20:bf:eb:7b:
         7e:92:9c:28:ab:14:ee:16:96:15:fe:14:fe:a2:96:e1:fd:ff:
         98:36:99:8c:87:8b:9f:71:53:b0:ca:a2:85:ec:e5:2a:7c:36:
         1d:9e:1a:38:9d:60:80:54:be:5a:72:a0:36:be:11:d9:2e:0e:
         68:62:93:b5:9d:92:06:27:e2:7d:0d:fa:76:d3:0e:b9:b9:e4:
         15:e4:48:8d:03:7e:f8:d4:b2:dc:42:01:fd:4e:5d:40:4f:94:
         32:5f:72:b8:14:23:4b:0b:c9:d0:74:65:ba:51:a5:a2:bc:10:
         85:8d:25:d6:ac:5c:e9:a9:7d:3d:f3:99:ea:d8:1f:0a:39:4e:
         fc:74:aa:6c:ef:77:0e:08:ad:08:e4:14:e2:53:85:8d:70:4d:
         93:80:88:2f:24:a8:d6:d1:89:3c:29:45:0d:b9:95:20:13:8a:
         b8:48:8b:04:32:32:00:30:0d:0b:92:ca:de:19:97:b3:c5:92:
         73:b4:c3:ad:a7:10:be:4d:64:2b:e4:61:8c:3c:70:a8:8b:14:
         8a:20:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 09:50:05 2024 by rpki-client on console-fra.rpki-client.org