Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa
File:                     5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa (raw, json)
Hash identifier:          SGZvYnCX/LEeVS0ARJJgeIbsVxXWHyCFJ0ajmkdhadA=
Subject key identifier:   5D:04:8F:FC:10:D6:CB:31:20:CC:10:85:F9:86:36:CA:25:3E:31:D4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453283A74AE79685511B2B9258
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa
Signing time:             Wed 13 Mar 2024 20:01:45 +0000
ROA not before:           Wed 13 Mar 2024 20:01:45 +0000
ROA not after:            Tue 11 Jun 2024 20:01:45 +0000
asID:                     41264
IP address blocks:        104.132.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:a7:4a:e7:96:85:51:1b:2b:92:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:01:45 2024 GMT
            Not After : Jun 11 20:01:45 2024 GMT
        Subject: CN=97a4e2a6-1728-4e5e-88b1-3b8067124476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:f6:96:c5:90:ee:da:f9:2e:c2:b7:4e:aa:
                    f4:a2:41:7c:f0:cf:17:de:48:58:4d:f8:ec:79:81:
                    5f:b7:19:63:98:d5:c2:cb:a3:5e:cf:2f:89:71:2b:
                    1d:c7:a1:60:f3:a9:8a:3b:b8:2f:08:ce:02:7b:14:
                    51:a8:bb:a5:be:92:22:13:d1:83:55:40:d0:e5:40:
                    e2:29:4a:8d:23:77:5e:40:c4:be:c0:d5:8e:58:12:
                    e3:a7:17:f3:be:d5:5a:53:f5:54:44:a3:cb:0a:00:
                    d7:e5:1b:96:37:ca:8c:46:75:b5:d9:df:3f:01:a8:
                    10:c9:6d:81:5e:bf:fa:a9:c2:d3:12:c0:91:8b:63:
                    94:26:1f:fc:6e:ef:b7:48:79:21:f7:29:27:c0:d9:
                    ea:6b:8f:31:9e:ab:05:7d:af:e5:a2:7e:66:96:28:
                    1f:17:94:ef:e4:74:1b:72:67:bb:d8:a3:69:71:02:
                    3a:0d:53:90:bc:b7:f5:10:aa:9a:67:ea:ea:00:36:
                    ba:b1:d5:de:8a:bc:3c:9f:f3:f9:08:07:3c:0f:ee:
                    d0:4a:80:ad:1d:29:73:eb:9b:c5:48:61:db:d1:33:
                    5c:05:bb:f8:6e:91:87:7a:04:2f:aa:a2:0e:48:e5:
                    2f:29:67:ed:05:5b:2b:a4:cb:15:26:20:ef:77:cf:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:04:8F:FC:10:D6:CB:31:20:CC:10:85:F9:86:36:CA:25:3E:31:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:b0:2b:42:01:da:c9:b3:b2:da:74:5a:cc:38:43:61:49:
         4f:80:30:c2:93:b9:5e:6a:a4:81:14:d9:71:14:3e:87:73:41:
         06:d5:c1:24:09:ac:75:6f:52:22:8c:12:4d:e5:17:cd:a5:18:
         8e:40:d7:f6:64:2b:15:69:1b:a5:8f:fe:a0:60:08:80:fb:02:
         15:bd:6c:7c:02:3a:25:12:77:2a:4d:51:5a:00:9e:33:f9:d5:
         3a:51:df:7a:63:e0:e9:ca:48:d6:6c:cd:20:c6:e7:57:3e:74:
         c0:24:e9:e8:f9:39:4e:08:72:69:b3:28:d9:a2:11:21:64:7c:
         b3:f2:7c:65:fa:a3:ce:b3:ba:97:28:72:52:18:02:ab:c2:f7:
         3e:e2:98:1a:a3:4b:ce:ac:9f:e6:d9:a7:14:66:76:34:13:ae:
         62:70:dc:b5:3e:7d:f7:9f:7c:6c:64:e0:78:4f:ea:8c:3d:16:
         2b:45:6c:ce:e5:62:f3:2e:1c:b4:5e:73:a1:fa:f6:ff:48:b7:
         0f:ed:ea:17:a8:44:84:5c:e9:4f:09:67:f5:f4:7a:00:94:58:
         2f:18:dc:f8:37:76:81:91:f6:0a:f2:b1:49:75:c3:64:a9:71:
         19:8c:cd:67:87:f5:04:a5:e9:6f:d4:76:22:bf:99:b6:e5:6b:
         57:4a:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:42:33 2024 by rpki-client on console-fra.rpki-client.org