Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
File:                     6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa (raw, json)
Hash identifier:          ZOFhqZ0uxU2gC3olYbofF/V8wHYHgt72Nro9h6jZ4uk=
Subject key identifier:   08:33:BC:BB:08:6B:DC:99:1F:8B:78:FF:CF:2C:86:FE:D9:A6:AB:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858471E708F7EBB6C6B4E96E0FF80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     41264
IP address blocks:        104.133.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:8f:7e:bb:6c:6b:4e:96:e0:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=ce4c8253-7b4b-4313-b1f5-26dc185c1942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:17:a6:17:1f:df:59:d0:9c:a4:25:9e:44:
                    93:5f:82:5e:cd:f3:df:78:0e:1a:d0:17:15:dd:57:
                    69:7e:21:9b:9a:e7:15:84:21:bf:0b:93:e6:d9:82:
                    38:c8:60:6c:89:78:d8:8c:e2:5a:3d:61:9d:60:76:
                    e6:da:a8:4d:48:f3:9f:1e:69:e9:39:0a:96:49:a9:
                    fe:c2:d9:e8:5f:f8:08:19:00:59:56:e4:74:a3:d6:
                    e7:6a:bb:7c:63:3f:e8:d3:e8:b4:15:8c:d3:65:d3:
                    a6:4d:d5:37:0d:66:9f:ed:50:70:fe:28:d6:24:b5:
                    30:d2:76:26:b3:b5:02:f1:8f:13:b5:c6:95:1a:ad:
                    22:6f:ae:22:04:37:d5:4c:78:3d:f6:62:ac:61:9b:
                    e7:b3:41:81:26:d7:73:14:1d:ba:91:f1:1e:c3:57:
                    a6:43:3a:e6:c1:fb:f4:74:be:1e:7e:3b:03:4a:72:
                    77:72:51:46:96:dd:49:79:61:66:cc:41:73:05:7e:
                    8e:3e:c5:79:bb:c5:e1:1c:ef:94:06:09:cd:2e:f6:
                    98:2a:8b:1b:56:33:2f:ab:5e:44:dd:c5:90:80:a5:
                    a5:c0:09:17:13:43:74:79:00:91:ae:1c:d0:b4:aa:
                    6c:da:1e:8b:14:f7:78:66:ab:0a:e7:35:99:9c:68:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:BC:BB:08:6B:DC:99:1F:8B:78:FF:CF:2C:86:FE:D9:A6:AB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:74:87:c9:75:4e:0a:b1:98:7d:4a:eb:0e:bf:e0:fa:d7:f2:
         f6:c6:39:45:da:b8:a3:59:e8:8b:5e:ce:0a:73:a6:fa:78:e9:
         a3:fb:65:b0:0e:90:63:53:b1:2d:ac:c9:9c:fd:9d:9f:9f:fc:
         aa:eb:b6:47:6f:ca:42:14:40:97:a5:68:de:a0:fc:f5:1f:f5:
         fd:29:64:f3:f6:02:fa:ce:c7:28:e5:8e:60:cf:4f:8f:d4:05:
         f2:3c:56:2c:ca:2e:03:9a:95:ab:27:06:01:20:13:30:46:66:
         49:54:38:cc:0d:73:b6:56:e3:91:eb:7a:2c:3a:dd:59:ff:bb:
         6b:2b:29:9d:d5:63:17:15:d0:41:84:74:e3:d0:8b:6c:9a:95:
         5c:39:b4:f3:61:ad:65:e7:82:29:ca:12:1f:92:71:a8:a9:19:
         81:ec:f6:bd:75:41:7f:a1:9e:9a:07:af:fa:23:48:de:d2:94:
         99:97:44:2c:f0:8b:0b:3f:bc:79:db:ba:c8:82:a9:5e:71:ab:
         1f:dc:23:3a:de:1a:ec:55:8f:b5:c2:b7:77:6a:a6:5f:dc:d7:
         f4:05:40:9b:1f:e4:1b:8d:4b:cc:26:de:da:8f:60:0f:98:a2:
         02:3d:02:dc:5e:5d:5e:60:e0:f3:8f:14:fa:40:cd:dc:18:89:
         31:ea:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:11:30 2024 by rpki-client on console-ams.rpki-client.org