Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
File:                     72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa (raw, json)
Hash identifier:          dQDjbjxnKr0/XVRulH4J1JyHcjWGupIh+k40Xq/V/3U=
Subject key identifier:   35:A1:CF:A0:90:A8:B1:F7:7D:38:8E:06:B5:CF:F5:99:AF:68:C0:B5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453586777502FEECABA3B04DF0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
Signing time:             Thu 14 Mar 2024 21:54:51 +0000
ROA not before:           Thu 14 Mar 2024 21:54:51 +0000
ROA not after:            Wed 12 Jun 2024 21:54:51 +0000
asID:                     395973
IP address blocks:        104.134.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:77:75:02:fe:ec:ab:a3:b0:4d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:51 2024 GMT
            Not After : Jun 12 21:54:51 2024 GMT
        Subject: CN=0116ac46-4030-4286-8346-419ec8cd39e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:af:54:e0:8a:7b:9f:84:6f:62:f5:08:3c:
                    21:50:75:27:03:a6:63:07:7a:06:19:1e:a6:30:26:
                    86:d1:57:6d:5c:df:10:97:2b:48:34:b1:e2:b2:78:
                    86:66:3b:f0:d9:0b:02:f7:98:9d:b0:ab:52:e4:99:
                    e5:b5:6a:c2:1e:ec:a0:5f:f1:a9:43:f0:55:63:b0:
                    3f:40:8d:b8:dd:2b:02:1e:74:1e:88:2e:9f:6a:d3:
                    c5:c9:f3:b1:3b:27:29:a0:98:72:91:e7:e3:79:0f:
                    0f:cf:c6:7e:bd:eb:54:bd:fe:95:85:9f:ba:99:11:
                    49:39:ce:63:17:57:63:2a:5e:83:77:16:25:2e:40:
                    47:ec:71:62:0e:1f:ec:92:4e:76:d6:7a:ff:22:be:
                    71:b9:b1:a3:f2:a4:b7:96:e9:1b:e7:9a:54:07:9c:
                    0f:b4:e9:d0:49:2d:06:60:6a:07:b9:9b:8f:39:64:
                    fd:63:cd:d5:14:85:0d:e3:a3:54:a4:c0:7a:50:dd:
                    cb:57:c0:ae:a6:b5:97:8d:dc:c2:01:c1:60:f3:e9:
                    15:2d:64:d6:19:f8:85:c0:44:99:eb:33:be:ba:62:
                    18:cc:64:b6:85:45:6a:57:92:f4:59:4e:28:bb:03:
                    fa:7a:db:65:58:eb:43:a3:a7:9f:bb:2c:c4:b3:b0:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:CF:A0:90:A8:B1:F7:7D:38:8E:06:B5:CF:F5:99:AF:68:C0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:6a:fd:75:bb:4e:49:0d:30:d1:14:b0:84:ca:97:72:34:
         b3:32:b8:0b:01:f2:36:fb:c9:96:2d:d6:38:0e:2b:18:b6:18:
         93:ae:cf:af:ea:1b:73:52:1c:23:18:a0:fa:13:64:47:70:da:
         22:a4:b1:92:7b:51:cc:e6:2b:08:41:94:10:24:47:fe:93:40:
         11:75:6e:bb:92:7d:34:2d:43:69:f9:7a:67:91:30:cc:7e:61:
         d9:07:14:51:e1:cc:1f:e3:79:d5:6b:db:07:62:b4:1d:d4:a3:
         99:2c:86:02:4b:8e:ef:d6:32:31:21:1f:ae:50:5d:a4:ef:9a:
         23:94:a7:1d:44:9a:ec:0d:04:f9:3e:c3:da:b6:3a:7d:a2:ad:
         88:75:ef:30:d4:40:87:de:66:4a:f2:5f:77:ea:7a:fe:31:a7:
         4a:9f:88:c4:ea:f8:02:27:7b:66:b0:6e:e5:90:b7:4d:5d:2c:
         6f:80:60:07:4c:fd:09:bc:3c:5d:b3:6c:dd:1b:86:92:77:16:
         3b:9c:cc:84:c8:20:0e:50:53:e0:97:55:3e:fd:f8:95:98:01:
         a9:82:f2:75:e4:13:94:43:5d:62:50:45:cb:37:5f:26:58:0a:
         f1:17:9e:52:0a:3d:07:85:13:35:37:42:fb:9e:fe:69:26:90:
         69:65:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:36:24 2024 by rpki-client on console-ams.rpki-client.org