Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60d40097-3c9d-3f4f-a6bf-8c55b3266ecc.roa
File:                     60d40097-3c9d-3f4f-a6bf-8c55b3266ecc.roa (raw, json)
Hash identifier:          fiOCWDa6nuTGTJGjL1VzJQySxPHP7JKkhvJplgNsp90=
Subject key identifier:   9F:1A:37:45:59:5C:61:AC:1E:7E:A8:BA:00:9B:A1:AF:87:BA:B2:BD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584A7B2B37E8AC7DAB17FFA
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60d40097-3c9d-3f4f-a6bf-8c55b3266ecc.roa
Signing time:             Thu 14 Mar 2024 21:51:12 +0000
ROA not before:           Thu 14 Mar 2024 21:51:12 +0000
ROA not after:            Wed 12 Jun 2024 21:51:12 +0000
asID:                     41264
IP address blocks:        104.133.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:a7:b2:b3:7e:8a:c7:da:b1:7f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:12 2024 GMT
            Not After : Jun 12 21:51:12 2024 GMT
        Subject: CN=c5c3f558-c50a-4d1b-8ab9-869eeeb9900c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:4f:dd:db:0c:1c:bc:32:f4:d8:d6:d1:ae:
                    df:cd:72:d6:a8:81:da:cf:40:be:82:b5:4f:21:94:
                    bf:45:d6:6e:aa:17:01:49:6d:b5:62:9d:0c:6e:6c:
                    a8:21:4b:32:bd:17:64:6b:be:95:02:90:c8:6a:b6:
                    29:5c:e6:c2:7e:08:53:e2:38:9e:ea:3c:09:2f:11:
                    83:f6:13:52:5a:c8:72:e8:3c:1c:05:e5:7c:f6:3e:
                    bc:1c:85:dd:ad:7c:9c:ad:c0:79:e7:21:c0:fd:41:
                    d1:19:30:81:39:28:34:0c:48:09:86:10:34:a8:20:
                    98:00:c7:fb:32:b2:0a:48:8c:9f:23:af:b0:7a:eb:
                    b8:0f:b6:0b:41:89:bd:fe:8c:55:3c:64:aa:f2:c8:
                    55:be:7d:e4:c5:8d:69:24:b6:f3:f6:90:6b:ba:d8:
                    06:06:6c:75:31:41:25:79:d6:e0:38:e1:f3:71:ca:
                    ba:af:35:b0:05:83:a0:d9:79:48:c0:fa:55:ce:70:
                    40:f1:e4:12:51:9e:f2:82:56:e2:12:f6:bb:6e:fc:
                    3a:24:7c:01:57:4f:4c:24:cb:00:d6:69:41:9a:ec:
                    67:08:fc:3d:c6:de:3b:13:8a:5e:37:36:e9:80:a2:
                    f0:4e:f0:14:8f:d0:4a:2a:0e:f7:e1:5f:9e:41:e7:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1A:37:45:59:5C:61:AC:1E:7E:A8:BA:00:9B:A1:AF:87:BA:B2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60d40097-3c9d-3f4f-a6bf-8c55b3266ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:64:b3:53:fd:66:ce:31:79:1a:f3:bf:c0:e7:07:cc:77:65:
         46:fa:e0:00:f7:70:9c:09:f5:a7:92:b8:64:e8:8a:b5:73:82:
         85:f2:c8:1a:53:1b:f4:78:21:9b:cd:fa:bd:03:ed:76:5f:da:
         67:5d:24:23:48:b8:59:0c:a7:14:34:00:ed:60:04:8a:9d:75:
         5e:2b:86:59:eb:48:d8:21:9a:ca:d2:19:93:59:97:1d:42:18:
         6a:b8:73:ae:2d:3a:bc:35:9e:00:7c:da:be:4c:39:01:76:64:
         22:6b:ba:2a:27:79:4c:bd:06:4a:95:36:ce:a4:d7:da:6a:1b:
         f7:79:7e:c5:20:7f:39:f8:ed:26:ef:9d:8e:97:3f:8b:c1:13:
         a3:45:18:5b:c9:04:e7:d9:fe:86:54:e3:66:9a:ae:80:ad:57:
         b1:9e:ff:3a:59:15:86:8e:b0:0a:1c:ac:08:02:96:63:0a:1d:
         d9:fb:52:7d:fa:31:8f:ea:7e:2b:91:30:99:24:cf:58:25:fe:
         f5:b4:e4:f0:58:a5:7c:c3:c1:03:d0:f3:bf:dd:24:64:05:ab:
         7c:99:31:15:bf:b7:47:2f:77:e9:60:d7:71:d0:c8:29:98:37:
         52:9d:a5:b9:79:52:82:5a:f9:c5:d2:3c:22:68:9a:e5:52:cb:
         25:7d:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:37 2024 by rpki-client on console-ams.rpki-client.org