Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa
File:                     6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa (raw, json)
Hash identifier:          mlSEHj60U2XxaHY2lMHvrU0X2+FLf1veZUJLPrMhHvQ=
Subject key identifier:   00:91:B0:8D:E3:2A:A2:B4:76:C9:06:0C:DB:FF:47:D9:5E:59:5D:A0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845328350688720D161E2E53600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa
Signing time:             Wed 13 Mar 2024 20:01:04 +0000
ROA not before:           Wed 13 Mar 2024 20:01:04 +0000
ROA not after:            Tue 11 Jun 2024 20:01:04 +0000
asID:                     41264
IP address blocks:        104.133.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:50:68:87:20:d1:61:e2:e5:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:01:04 2024 GMT
            Not After : Jun 11 20:01:04 2024 GMT
        Subject: CN=53a02ea1-178f-4df6-b07f-a5d096be28f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:24:a6:5d:89:1a:05:b4:38:07:76:ba:3f:
                    72:c4:0a:96:92:09:26:60:61:1f:4e:02:7b:78:26:
                    da:11:a9:12:c6:09:50:99:d7:69:57:4c:8a:d5:9f:
                    8f:05:ac:6a:a0:52:11:cd:0a:24:d5:20:ae:47:0b:
                    eb:51:b8:0c:de:20:b0:76:4e:31:cf:55:36:f2:da:
                    f5:b8:ae:b8:91:31:22:f0:d7:d3:24:e0:82:74:00:
                    cd:2f:98:3f:97:c3:4b:ec:93:12:a8:a0:c4:bd:d2:
                    1a:ff:a3:4b:63:42:ec:f9:0a:a9:7b:ea:a6:55:95:
                    67:a2:aa:9e:c4:d5:42:7a:9d:34:a8:4e:b3:80:ed:
                    c8:00:12:75:fd:4f:59:9c:8e:e1:22:99:48:fb:c0:
                    22:00:8c:4e:c9:03:82:5b:00:3b:0d:1a:62:8f:4f:
                    90:3c:46:d7:a3:ad:7a:2d:d0:18:64:04:95:69:2e:
                    7d:ef:c3:d0:64:be:3c:1f:c1:d6:77:f8:5d:f4:75:
                    c9:0f:4a:14:b3:44:5d:f0:d7:aa:ae:36:d5:e6:85:
                    69:8e:18:ef:a0:f8:ed:a1:2d:cb:66:98:e4:32:10:
                    41:43:26:6e:98:d5:4a:4e:41:2c:06:17:7b:85:41:
                    df:48:29:7f:51:68:db:12:36:da:8f:dc:b9:31:d2:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:91:B0:8D:E3:2A:A2:B4:76:C9:06:0C:DB:FF:47:D9:5E:59:5D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:53:f6:63:9e:32:2d:ca:72:4f:56:39:82:33:4d:d3:2d:47:
         0b:e7:d7:13:13:56:29:cc:2d:c2:c9:ff:b2:4d:02:05:e4:05:
         c2:91:69:64:1d:68:ea:d4:45:ab:9c:3b:09:5f:29:5c:d2:ff:
         e8:ff:0c:7d:06:9e:ed:94:3c:ad:48:b3:13:02:3b:52:cc:ab:
         d0:a2:1c:6c:9a:b1:a8:8a:99:a0:a2:24:ac:fb:3e:ad:21:91:
         15:80:59:8e:ac:c0:a2:2b:9f:90:33:b6:be:9b:e6:75:50:41:
         22:92:87:cc:ca:20:a0:9d:e7:aa:8d:c4:7b:d1:2a:04:8d:60:
         5f:04:b6:75:46:2d:54:2a:37:74:8b:27:f5:08:5c:90:24:dc:
         58:b9:41:ad:71:a1:66:40:13:81:57:0e:f5:03:08:53:e0:94:
         4b:6f:d3:6c:e0:32:44:34:8c:98:c1:a8:3b:fa:4a:ba:11:c8:
         6f:fe:6e:99:ec:f8:34:c8:05:63:64:92:68:b1:9d:ea:7b:cf:
         f7:79:42:b1:75:18:2c:91:23:b8:18:f8:ac:01:ae:cf:96:4d:
         6f:06:f9:79:8f:ff:03:34:da:a3:8d:86:f2:e8:ba:19:50:b5:
         d0:b3:24:29:29:63:91:70:cf:89:9c:4e:9e:27:6b:eb:5a:46:
         f7:50:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:39:55 2024 by rpki-client on console-ams.rpki-client.org