Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6281ab38-6bf6-3668-ac27-e1b4b9dccb98.roa
File:                     6281ab38-6bf6-3668-ac27-e1b4b9dccb98.roa (raw, json)
Hash identifier:          6Yvsu3MzNnUgkhKrYCo9ZqbAvvJFZskt+C5l6MXvo78=
Subject key identifier:   88:B6:D2:5C:23:2B:AB:15:F7:46:57:00:D5:E3:4D:E4:A8:80:0A:53
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584F1CE9DB97694511153A8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6281ab38-6bf6-3668-ac27-e1b4b9dccb98.roa
Signing time:             Thu 14 Mar 2024 21:51:47 +0000
ROA not before:           Thu 14 Mar 2024 21:51:47 +0000
ROA not after:            Wed 12 Jun 2024 21:51:47 +0000
asID:                     15169
IP address blocks:        104.134.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:f1:ce:9d:b9:76:94:51:11:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:47 2024 GMT
            Not After : Jun 12 21:51:47 2024 GMT
        Subject: CN=3c5025c0-ed28-4853-87a6-ea39256f3adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:db:ff:37:9c:cd:95:2b:dc:76:1a:e1:76:
                    f1:c5:88:0e:89:93:b5:94:7d:7b:27:56:d5:92:74:
                    2c:2b:e7:97:c4:ad:8f:3b:38:65:0e:b3:16:4c:da:
                    d4:b3:33:c8:57:77:49:0d:6c:c8:9b:89:18:6e:d1:
                    f9:ae:38:e3:99:82:48:01:ee:79:61:41:3e:b3:29:
                    9b:aa:dc:82:f6:6b:5e:17:f6:92:f8:d6:42:29:91:
                    91:e7:52:cb:ac:2d:c9:5f:a0:27:f9:bb:c0:3f:ae:
                    5c:70:1d:0a:1e:60:da:15:e9:ab:3b:76:60:07:11:
                    da:63:68:90:9e:0f:20:3b:4c:4f:d7:69:7f:55:f5:
                    1d:ae:a3:f3:71:7d:f3:65:f8:44:93:b0:f5:d0:f6:
                    13:aa:24:c4:91:cf:2c:eb:f2:29:f4:32:26:e4:46:
                    e2:73:cb:11:98:c3:73:77:2a:a6:cd:73:1e:1f:c1:
                    8d:7c:bf:07:e5:7c:4f:c8:00:48:4d:d3:6d:9f:1e:
                    87:6e:31:02:01:78:36:f3:d2:19:6b:80:11:2c:5b:
                    fc:95:61:60:44:48:5a:ca:77:a8:60:3c:68:97:1e:
                    86:d2:44:b3:8f:f1:66:32:1c:ba:b8:ea:ef:a6:d3:
                    5d:88:46:6f:93:73:41:d1:98:56:95:13:73:ae:6d:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:D2:5C:23:2B:AB:15:F7:46:57:00:D5:E3:4D:E4:A8:80:0A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6281ab38-6bf6-3668-ac27-e1b4b9dccb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:95:d4:e6:31:bb:93:0f:da:7f:d9:74:bf:d2:42:c5:58:
         ef:f3:46:da:57:00:70:89:c3:66:74:94:d0:94:43:1b:d8:c4:
         ee:6d:27:b1:64:85:71:a6:be:70:37:dd:fa:ac:8a:d4:3c:01:
         2f:a1:f4:3c:dd:ed:69:5d:b1:b9:5b:19:ac:8a:a9:52:59:19:
         16:10:b4:e5:05:63:1d:89:d9:8b:17:49:41:d2:3d:77:d9:eb:
         88:f6:a6:ad:53:de:c9:28:14:57:c1:ef:5f:76:ad:6e:50:77:
         ba:32:1f:bf:4a:9c:31:20:7e:e5:bf:8c:e1:1c:8e:84:1c:91:
         a5:41:67:e2:01:67:25:fa:85:76:42:78:ea:b5:58:05:d7:f3:
         da:67:7e:f3:78:0f:7e:09:3a:f9:5c:dc:60:72:06:6b:31:f2:
         6e:41:3d:e9:c5:8f:94:9c:43:a6:17:c3:b4:a0:71:4f:7b:be:
         48:0b:d4:66:c6:43:1e:82:0c:f1:a8:25:1c:90:e3:93:bc:18:
         3e:65:84:dd:fc:05:d2:e7:b2:cb:ef:b6:4f:ea:36:83:98:c4:
         92:b9:64:8b:f8:4e:8e:58:9d:a3:ee:24:94:de:28:60:59:a2:
         1e:a2:53:f7:af:23:ce:76:ac:f5:0e:cb:e1:1e:e3:b4:5c:28:
         27:f5:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:27 2024 by rpki-client on console-fra.rpki-client.org