Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6fb1743e-1076-31e4-a574-8f683fead57a.roa
File:                     6fb1743e-1076-31e4-a574-8f683fead57a.roa (raw, json)
Hash identifier:          PYu1XqtRfw8yiVhLzir86JrXzk+fPwMixg7NCWtOzpA=
Subject key identifier:   90:7A:A2:7A:80:42:60:22:F3:B4:B2:0B:88:F6:82:EF:DB:01:D1:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585A192A6B64F680ACD6580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6fb1743e-1076-31e4-a574-8f683fead57a.roa
Signing time:             Thu 14 Mar 2024 21:53:10 +0000
ROA not before:           Thu 14 Mar 2024 21:53:10 +0000
ROA not after:            Wed 12 Jun 2024 21:53:10 +0000
asID:                     41264
IP address blocks:        104.133.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:a1:92:a6:b6:4f:68:0a:cd:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:10 2024 GMT
            Not After : Jun 12 21:53:10 2024 GMT
        Subject: CN=22df0719-d960-499c-8807-c102ac11038e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:ba:ff:2a:90:bc:3c:80:4b:7e:1d:c1:62:
                    e2:42:03:75:97:8f:43:87:1e:04:6c:48:ca:2b:b1:
                    b4:74:c0:16:4d:28:28:e6:22:21:7b:de:69:3f:29:
                    09:dc:ec:12:57:3c:8a:4c:b4:b1:14:83:ff:b0:2b:
                    a3:99:aa:f9:96:43:e2:dc:2a:74:7c:da:3b:d0:b4:
                    42:73:cb:a2:bd:77:a8:ac:ea:4a:d4:09:86:4d:09:
                    16:67:6b:57:61:2e:02:6d:58:3a:93:a0:0a:63:bc:
                    19:96:0d:e5:f2:f1:e7:da:cf:c4:41:09:19:40:0b:
                    31:96:4c:19:93:ea:f7:e0:f1:bc:fe:93:9e:d5:84:
                    e1:f6:ed:b7:fd:ac:f0:73:07:53:84:49:9a:87:19:
                    01:69:b2:d8:e7:46:1f:81:40:02:e6:29:fd:b3:4d:
                    ec:73:c6:18:5b:f3:59:9b:df:42:db:56:e6:a7:e1:
                    0e:eb:9b:5f:ef:88:53:11:1f:8e:ed:3b:d1:26:ff:
                    6a:d9:dd:e2:83:f3:78:b3:70:5d:03:49:b9:53:81:
                    57:a7:f1:1b:66:67:da:aa:74:e7:db:3b:e6:7f:a6:
                    27:67:6a:29:17:be:e5:89:57:73:67:22:8f:82:93:
                    09:a7:bd:f9:21:73:42:60:25:d6:3f:ca:86:ba:1b:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7A:A2:7A:80:42:60:22:F3:B4:B2:0B:88:F6:82:EF:DB:01:D1:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6fb1743e-1076-31e4-a574-8f683fead57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:c8:04:1f:54:ec:a0:bf:c8:e7:0b:1c:26:c4:eb:37:79:
         d3:47:b0:02:a9:12:80:a1:ca:e3:9f:7c:42:c4:02:ac:d3:c6:
         d6:11:60:02:a5:9e:ea:63:a1:48:80:fa:aa:e5:e5:a5:9e:40:
         47:be:65:7e:c2:a0:9a:39:a4:a2:ef:bc:5d:63:bb:44:a9:0c:
         9c:ff:31:5d:25:a9:7e:41:43:15:92:a9:0d:bc:e9:7d:56:51:
         81:ba:ff:c0:d4:74:e2:2b:ab:6c:13:03:c7:33:94:26:96:44:
         b2:96:07:0a:34:24:70:67:00:d1:b4:8c:a8:95:32:29:a9:f8:
         45:cf:b2:c5:23:b7:7f:64:33:aa:97:52:e0:58:27:8c:a3:1d:
         dc:00:ca:14:7c:d4:eb:16:67:6b:cf:03:14:6f:77:e9:c7:48:
         7f:c5:8d:db:b9:58:d4:f9:55:24:f0:7e:35:92:b7:58:fd:7d:
         93:e1:e1:50:72:05:c1:c7:d1:25:de:dd:f8:fc:33:9f:87:ff:
         a9:a6:b1:c5:96:23:ec:77:bf:3f:f2:e2:e3:67:1f:6c:c3:94:
         f0:b4:4b:bf:d9:eb:00:af:d9:44:ea:bf:c0:9c:ce:6d:6c:c5:
         4e:76:01:09:59:f8:ea:d1:21:b9:8a:b6:0c:ad:12:63:c5:81:
         ec:91:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:39:55 2024 by rpki-client on console-ams.rpki-client.org