Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa
File:                     5aeacd74-e399-342f-a107-f69488f9e9e1.roa (raw, json)
Hash identifier:          A2+oa5eSzV004ajO9n+bAbNq2ifsCcLKpd0PovPaxGk=
Subject key identifier:   DB:E5:59:CE:BA:FB:2F:46:1C:72:AF:21:44:AA:F5:2C:EB:00:87:DE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1BAF171ADE50C606E300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     395973
IP address blocks:        104.134.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:1b:af:17:1a:de:50:c6:06:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=a45af981-5254-4c13-952a-a7b6ec6d1ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:88:99:3c:d8:94:80:52:7c:c5:aa:81:88:
                    03:d1:25:8e:ff:fe:03:7e:d7:c4:61:fb:ab:5f:a5:
                    29:4c:26:3e:2a:79:f9:ce:0d:d2:eb:50:2d:7d:35:
                    6e:ab:dd:47:df:c3:6f:a4:51:d3:46:c5:38:4b:c2:
                    03:6e:42:65:2c:49:00:94:03:42:f1:54:ad:db:60:
                    71:af:04:91:90:df:99:1a:18:5c:e3:ac:f4:b1:11:
                    16:28:0e:af:e2:2a:35:94:78:be:88:f7:bb:a2:76:
                    07:87:0b:94:ce:e2:c0:70:d8:7a:2b:dd:62:53:e2:
                    62:c5:eb:62:97:1f:5f:06:be:94:8a:cf:39:9e:f8:
                    48:56:b7:df:95:b1:56:34:f7:b3:7f:48:8c:26:aa:
                    c2:0f:b3:62:c6:75:47:8d:d8:6d:cb:99:06:59:80:
                    e0:a8:f4:6a:fc:26:aa:5d:02:60:79:3e:58:11:9a:
                    a8:cc:eb:86:b3:ad:4a:03:13:d1:76:50:f5:2d:0e:
                    7f:6b:1c:93:f6:dc:d0:73:11:63:8e:1e:d6:3e:9c:
                    41:54:0e:f8:bb:01:37:f3:94:b3:98:1a:44:ef:ea:
                    29:f0:07:0a:d0:42:b0:a9:90:26:db:13:ad:de:53:
                    b3:b2:d1:3a:e2:d0:3a:03:a2:ba:23:b4:96:5c:26:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E5:59:CE:BA:FB:2F:46:1C:72:AF:21:44:AA:F5:2C:EB:00:87:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:5d:d4:25:8b:89:80:0e:af:4c:a3:8e:d8:81:92:cd:de:
         4a:74:17:76:7e:26:50:fe:8c:7f:d5:26:70:7d:f3:ff:10:7e:
         d9:b1:7e:47:49:78:42:6f:fd:3a:24:ec:a0:02:62:d7:aa:66:
         d3:85:d7:d3:15:51:10:b3:ad:22:2c:fb:89:3a:c0:e2:b4:81:
         b2:4e:66:f1:2b:82:45:74:b5:98:ee:36:4d:12:c4:69:dc:70:
         ae:97:b5:fb:19:8b:c1:e7:dd:33:0b:8f:9b:53:3c:34:31:9e:
         c0:18:18:ad:a5:96:e6:83:6e:b1:7f:25:70:e6:1e:6a:79:40:
         d3:e9:c5:36:2e:2c:3b:79:c5:7c:44:e1:5b:10:b7:31:77:92:
         12:1b:d2:7a:2e:ce:bb:69:96:96:be:42:9e:41:71:97:6b:4b:
         51:c2:aa:48:c8:fe:68:1f:02:26:e4:51:0c:3a:5e:86:af:3b:
         42:5a:31:4d:c2:6c:cd:ec:bb:76:18:97:c9:a6:4c:7c:36:2a:
         ca:27:7f:17:f9:58:65:61:dc:42:8a:46:d6:2d:74:ff:a2:40:
         63:7e:c0:50:cd:92:d1:4c:27:45:45:c0:7e:10:0f:61:d0:75:
         1a:e2:0e:68:2c:04:51:1e:90:0e:43:40:4f:d2:58:3e:e2:1d:
         ca:e5:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:13 2024 by rpki-client on console-fra.rpki-client.org