Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa
File:                     5afeb378-224a-3c24-b822-69b5d1a03f18.roa (raw, json)
Hash identifier:          YgyfVGqKgFTMj6Te3d3TdY8dyo2oUXHqqlOcuL8qJus=
Subject key identifier:   3A:48:94:3B:A0:1C:84:13:2B:CF:A6:C2:53:92:2A:EA:B1:E7:AC:D6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535862B350D249E37E35B5340
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa
Signing time:             Thu 14 Mar 2024 21:54:15 +0000
ROA not before:           Thu 14 Mar 2024 21:54:15 +0000
ROA not after:            Wed 12 Jun 2024 21:54:15 +0000
asID:                     41264
IP address blocks:        104.133.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:2b:35:0d:24:9e:37:e3:5b:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:15 2024 GMT
            Not After : Jun 12 21:54:15 2024 GMT
        Subject: CN=0428d79f-d72c-48e0-b56f-2c34e76ebb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:99:08:ed:a6:4c:08:fd:7d:ad:82:0c:2f:
                    59:7d:5e:cb:a0:00:80:db:f1:a7:1d:a2:7f:75:87:
                    3d:e5:00:74:0d:0c:81:4c:5a:44:ca:98:23:c8:ea:
                    38:0b:98:95:c9:65:78:c7:eb:17:4c:d2:27:47:24:
                    9f:92:79:94:1a:b9:cd:f1:85:41:d4:e2:12:bb:80:
                    eb:02:a7:73:de:d2:51:c6:54:bd:9d:73:6f:79:ff:
                    4d:fc:de:02:0a:5e:6e:b2:34:72:3d:7d:d8:4c:e3:
                    cd:1b:69:c7:ed:83:1c:63:06:0d:24:66:f2:c2:ae:
                    9c:b0:d1:09:11:ef:55:a0:60:c6:a9:49:87:c2:d4:
                    80:df:f5:4f:58:bc:bb:f0:22:cc:e1:c1:53:ca:65:
                    71:72:97:1f:04:12:ee:6b:c0:c0:17:8a:0c:5b:a0:
                    f4:04:2c:b4:a8:f9:69:bd:dd:ee:70:b3:4c:de:b6:
                    e1:44:90:6b:97:51:c2:84:4f:66:81:18:4c:16:a7:
                    44:28:f2:ed:f7:20:0d:67:29:58:c6:b2:b7:9f:05:
                    c8:59:4d:05:8b:70:24:4d:aa:96:ba:1b:05:d7:ef:
                    2c:48:78:47:94:fa:7e:e7:a2:fc:99:06:0e:f6:73:
                    4a:b0:ee:7f:d4:bf:43:96:78:17:86:7c:d0:8d:d8:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:94:3B:A0:1C:84:13:2B:CF:A6:C2:53:92:2A:EA:B1:E7:AC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:2a:24:27:22:a3:c7:94:bc:64:6f:35:b5:9f:0d:d7:27:
         9c:b6:f7:a8:ed:5c:60:e0:bc:4f:f1:1a:56:ae:db:12:8d:8f:
         4b:8b:f8:2a:af:fa:70:8b:4b:84:5f:13:3d:ac:57:3a:86:15:
         8f:d3:18:ad:19:62:96:39:b0:00:5d:66:82:ff:15:2e:97:9a:
         15:4e:b7:e3:50:7c:de:e7:4a:0f:58:1a:d2:bb:51:90:22:dd:
         9b:56:b7:17:de:f4:44:f6:1b:7e:a8:20:65:67:36:5b:fe:4b:
         04:e5:1b:82:06:a7:6e:94:b8:62:c3:e6:09:0b:78:56:02:81:
         bc:c6:93:89:7f:0d:9d:49:2d:0a:74:30:be:21:2a:18:2c:09:
         05:87:ae:6e:da:2a:69:d5:8b:17:50:57:76:61:04:a4:18:95:
         07:76:8c:ab:fc:ad:26:ce:80:22:e5:e6:29:1b:2b:1a:a6:e3:
         ed:f2:21:52:bb:ba:67:84:9d:4f:49:f6:9a:5d:29:9a:bb:96:
         a9:2d:4e:d2:76:c2:73:57:96:5c:fa:03:c1:47:30:45:2b:14:
         e0:77:34:4e:c2:dc:c0:13:65:cb:d4:ce:32:ff:ae:b0:97:2c:
         c3:91:a2:4b:aa:d0:37:6f:bc:b6:ff:73:f0:bd:d3:28:b3:09:
         9f:cb:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:22 2024 by rpki-client on console-fra.rpki-client.org