Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc5b8ec-dd3e-3f3b-a29e-6a9c1e5b0d46.roa
File:                     5cc5b8ec-dd3e-3f3b-a29e-6a9c1e5b0d46.roa (raw, json)
Hash identifier:          nKmFQH4TqauEfnH/WaYT5paZ7gDCQ+Of6i8+IAUOlCQ=
Subject key identifier:   EF:AA:F8:1C:F4:1D:B7:FE:12:16:2F:D4:9E:06:22:75:5B:67:D9:78
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094CD1BFAD9A3E168280180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc5b8ec-dd3e-3f3b-a29e-6a9c1e5b0d46.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:cd:1b:fa:d9:a3:e1:68:28:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=7a1e512e-a2ba-430f-8e8c-0a3c03c37437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:29:ee:8f:2b:82:e5:4e:07:64:a2:ec:4c:
                    6c:1f:66:7c:c6:e3:90:19:22:fa:6f:b0:6b:b2:5b:
                    62:94:0e:21:87:cd:6f:14:62:c5:dc:fa:c1:cb:23:
                    89:54:a8:ea:a2:a5:12:1a:e6:c7:55:ce:91:90:a9:
                    48:b5:00:e4:b1:88:26:04:3d:90:88:e5:2f:5f:b8:
                    f6:e3:01:59:43:6b:88:c2:3f:d2:9d:ae:a8:3a:ba:
                    6a:9a:bd:d7:05:24:a3:c8:47:db:76:8a:6b:8a:b3:
                    1a:0b:02:35:05:4e:58:2c:c9:94:db:05:a3:af:5f:
                    5a:2a:65:73:2f:7a:6b:ed:d2:d2:58:c4:9c:de:a6:
                    28:69:84:22:e9:c6:ff:b6:31:76:77:a9:86:69:33:
                    58:0a:0b:5c:dd:5d:39:2c:b1:35:a6:a8:c6:cf:ca:
                    a2:5c:c6:11:13:f8:27:93:29:7a:93:a4:ef:31:bc:
                    db:31:c8:d7:73:48:a6:41:0b:5d:68:bb:c4:25:30:
                    80:81:04:5d:92:00:1c:77:34:ed:7c:b4:87:72:2f:
                    ad:eb:ae:e5:ad:df:d8:28:69:4e:85:ef:52:b3:4a:
                    2b:b8:c6:79:36:06:77:cf:33:f3:b0:cc:4a:78:e4:
                    ab:94:58:02:90:f0:ca:04:d3:81:87:5c:38:e7:6b:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AA:F8:1C:F4:1D:B7:FE:12:16:2F:D4:9E:06:22:75:5B:67:D9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc5b8ec-dd3e-3f3b-a29e-6a9c1e5b0d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:af:1f:97:b4:64:a0:30:61:46:56:82:5c:30:16:c5:10:77:
         20:68:76:a0:33:10:8e:ee:a8:c3:c8:29:05:31:59:69:5f:61:
         c8:b7:c8:78:97:ed:6d:0e:5b:b9:6e:d7:95:17:d0:2d:af:d8:
         04:c1:a3:b2:53:51:64:f2:9d:78:fa:52:57:93:e7:b5:3a:a1:
         10:d9:95:49:ab:df:d1:4e:62:06:2c:e4:24:56:6a:1b:9f:d1:
         88:dd:9b:08:f8:07:67:19:4d:9c:eb:7c:7a:61:7b:cd:71:c6:
         72:1c:30:ee:55:8b:60:ed:01:8f:6b:e0:3b:2e:8a:0e:5a:33:
         4e:f2:2f:b6:8c:8a:67:33:6e:8f:ed:9a:75:1b:0a:aa:a5:63:
         a4:2d:23:d7:eb:30:fb:83:5f:ec:96:bb:e2:84:3a:b4:1e:b4:
         99:52:bd:4d:e6:9b:39:c1:cf:da:c7:fe:f5:19:5c:ce:f2:96:
         ae:62:0a:37:29:58:d7:bc:9b:a7:ce:c4:b8:73:f1:07:31:cf:
         13:09:d7:ce:68:38:53:48:f6:a5:39:af:2f:65:39:9e:03:57:
         a8:45:34:a0:4a:04:39:11:01:a4:cf:f5:c9:39:b8:da:69:5b:
         56:12:01:a0:b3:95:d7:64:0c:c3:74:c7:bc:50:60:1e:da:7b:
         7b:32:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:44 2024 by rpki-client on console-ams.rpki-client.org