Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cbc9424-b8fd-3d83-9ce3-da9408aeaa31.roa
File:                     5cbc9424-b8fd-3d83-9ce3-da9408aeaa31.roa (raw, json)
Hash identifier:          kh3Ucgyyl7JiHT6R514T1/eAIoo1WU/HR4cX38cABPA=
Subject key identifier:   D9:4F:4D:B9:10:57:D7:06:45:08:83:73:F5:5A:25:AF:38:40:6E:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584532837AC28F222B2426A4A500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cbc9424-b8fd-3d83-9ce3-da9408aeaa31.roa
Signing time:             Wed 13 Mar 2024 20:01:24 +0000
ROA not before:           Wed 13 Mar 2024 20:01:24 +0000
ROA not after:            Tue 11 Jun 2024 20:01:24 +0000
asID:                     41264
IP address blocks:        104.132.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:7a:c2:8f:22:2b:24:26:a4:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:01:24 2024 GMT
            Not After : Jun 11 20:01:24 2024 GMT
        Subject: CN=ebaac33e-925e-4d7c-a1f8-9ac8791fbf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:10:22:05:5a:e1:b7:dd:9a:7e:52:d6:ca:
                    b5:25:a8:d7:35:71:e0:46:c7:94:c3:29:43:25:d0:
                    6f:a6:68:09:f2:45:d9:3a:66:bb:f1:71:ab:76:f7:
                    dc:a6:5e:57:d7:c0:ec:4f:c6:b4:fe:b2:43:95:8d:
                    07:46:63:16:71:91:cf:3d:2d:c7:0f:98:5c:34:a1:
                    95:e8:2b:6a:0c:62:74:49:7d:85:7b:10:f2:1b:3c:
                    92:88:c3:4c:27:d9:12:d5:27:8f:9e:76:0f:7b:7d:
                    a0:98:74:e2:47:43:97:16:ac:68:df:fa:73:1e:0c:
                    78:6c:9b:fd:b3:8d:88:f0:29:ae:86:18:32:91:f0:
                    62:bd:38:2d:60:c4:32:b7:c6:c7:b7:a2:a1:d6:7b:
                    8f:8c:75:35:f6:b6:48:06:44:b2:da:5b:92:5b:25:
                    cd:da:fe:69:89:50:e7:70:c2:88:4c:78:6e:88:c5:
                    01:ef:bb:b3:0a:17:be:0f:ca:f4:07:d4:ed:11:f2:
                    ec:78:e7:ca:35:7f:75:12:c0:d6:81:46:28:01:12:
                    df:bb:d7:a5:80:b7:c3:d5:10:2c:7f:4f:01:e8:7e:
                    53:02:ed:ef:a2:3e:a7:10:7f:79:08:a6:f8:08:32:
                    69:a5:58:f8:ee:4f:ab:63:f4:cb:36:e7:14:90:ae:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:4D:B9:10:57:D7:06:45:08:83:73:F5:5A:25:AF:38:40:6E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cbc9424-b8fd-3d83-9ce3-da9408aeaa31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:16:3b:c9:b9:4a:75:88:2a:d6:6f:15:13:2c:14:12:35:
         29:85:91:ce:cc:d7:55:60:31:aa:c7:06:94:42:d5:01:db:c6:
         58:e4:9a:7c:b0:e6:97:86:71:76:e0:7a:3a:b5:e6:9d:6e:d1:
         04:25:72:b1:85:f2:00:e9:71:2d:0a:ec:29:f9:0d:2d:49:74:
         f9:9b:c6:17:5c:27:7f:79:96:be:6e:ab:c0:fd:ca:92:4f:6f:
         1a:3d:b9:bd:7c:a6:90:05:2b:2b:9b:7c:51:48:1e:fb:7a:a0:
         3c:c2:89:b4:ce:16:14:46:aa:13:47:de:34:47:c4:e2:dc:c8:
         b6:68:92:bd:05:c7:84:76:16:f6:35:05:40:0d:9f:89:89:ea:
         ec:84:e9:ef:34:91:1e:1f:98:27:a8:e7:7f:f4:e9:b4:b3:d3:
         50:11:c0:35:4e:9c:3a:27:99:ac:57:ad:33:23:97:bc:70:e2:
         de:e7:e7:04:1a:b9:c6:7a:01:aa:ba:c5:58:a6:7d:46:1b:48:
         80:9c:fe:7c:be:4e:62:ee:ec:85:7d:14:3e:75:70:b1:cc:dc:
         48:ec:61:ac:0a:0b:53:88:c9:81:4a:9c:bc:d8:97:96:87:bb:
         f6:23:a1:f6:4b:ce:95:62:23:03:6b:c8:7c:46:cd:54:15:07:
         63:ad:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:58 2024 by rpki-client on console-fra.rpki-client.org