Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa
File:                     785106ff-56d5-3672-b19b-4db474832dc6.roa (raw, json)
Hash identifier:          Vd/LMNUZWRZCY3GaZ/5V2sDyxGBuEFyV76QsQqHKkBk=
Subject key identifier:   AC:8B:17:87:FF:AF:4F:B9:3D:CD:63:15:1B:D2:B8:B6:43:7E:40:90
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453583DC594A06BC99900ED280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa
Signing time:             Thu 14 Mar 2024 21:49:36 +0000
ROA not before:           Thu 14 Mar 2024 21:49:36 +0000
ROA not after:            Wed 12 Jun 2024 21:49:36 +0000
asID:                     41264
IP address blocks:        104.133.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:dc:59:4a:06:bc:99:90:0e:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:49:36 2024 GMT
            Not After : Jun 12 21:49:36 2024 GMT
        Subject: CN=18285d8f-cba3-42bd-9b42-967261cd3425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:55:5d:7a:6c:33:c6:de:fc:c8:e4:b5:ed:
                    c5:83:9c:23:58:bb:3d:b0:04:5f:a8:71:ae:7a:ca:
                    e2:23:bf:08:ab:ce:e2:b1:e4:79:9c:c8:78:14:8c:
                    e9:8c:d5:62:4b:e8:73:c3:b2:4b:de:ec:c6:4f:8c:
                    4a:fe:21:0b:2e:a3:b0:87:78:09:6f:68:a6:75:87:
                    2d:08:40:ea:28:17:e0:38:17:6f:86:4b:20:33:b0:
                    0c:ca:a0:b0:22:ca:af:6b:cc:be:cc:af:a0:8e:f2:
                    07:c8:d5:64:8c:0b:d1:46:b2:38:87:80:5f:09:38:
                    0d:67:e3:ef:62:72:16:64:9d:b9:3d:59:b1:5f:bd:
                    85:42:78:0f:75:51:0b:f1:78:e7:f3:d6:fc:60:f2:
                    9c:24:57:3e:98:9f:6b:2c:bf:2c:0c:77:6d:ce:e8:
                    cd:70:74:78:a4:b7:fb:7c:6c:f5:0f:0e:e7:cd:ea:
                    c9:89:7a:9c:b9:f6:83:ab:55:f7:52:2a:c6:36:0e:
                    02:ac:fd:67:5d:3c:fb:80:02:cd:a9:98:cd:ee:40:
                    68:9e:f7:80:94:17:84:96:f4:1e:2a:46:25:40:e1:
                    18:dc:07:59:67:94:f9:9b:8d:04:89:73:be:c0:3f:
                    20:72:53:c3:b5:31:a0:73:16:9c:78:85:da:cc:87:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8B:17:87:FF:AF:4F:B9:3D:CD:63:15:1B:D2:B8:B6:43:7E:40:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:45:6f:c6:15:08:c2:87:46:91:a0:55:6c:70:7a:fd:17:bf:
         9b:ea:13:55:d7:da:4f:30:05:e7:3d:4f:37:f5:bd:4c:a0:cf:
         1d:15:a9:36:9f:34:ce:88:be:12:eb:b2:47:c6:5f:67:31:30:
         b2:8e:f1:09:40:33:d8:49:ca:7f:80:8d:a5:5c:c8:83:e1:9f:
         ff:2d:a0:94:24:70:cd:5d:ba:0f:0c:2d:7f:fc:de:6c:23:f6:
         31:9d:72:b9:76:89:ea:e3:b9:7b:94:1c:d8:66:77:d9:11:a6:
         2e:1f:76:24:49:2a:e0:81:a5:8c:bd:cc:09:29:dd:6c:c8:25:
         30:85:f0:30:d8:f3:be:ea:ba:0c:28:95:98:4a:dd:46:84:9f:
         1a:28:df:06:5d:99:bd:f1:27:ae:e7:b5:0d:8a:0f:80:9b:2c:
         51:ef:6f:1c:23:07:c8:dd:ba:8c:6a:2b:a5:6f:87:85:fc:71:
         8a:fe:92:9a:97:95:af:52:6e:d2:74:1c:ab:c9:98:df:a6:3f:
         99:2e:b8:d5:39:99:76:e7:3a:5e:8a:15:cf:a9:bb:b3:13:87:
         71:46:81:68:d0:cb:1a:7a:4e:80:a2:4f:3c:a8:3c:8c:4e:04:
         05:d1:bc:29:66:56:90:10:82:75:14:12:31:b5:bf:7a:04:13:
         70:d8:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:00 2024 by rpki-client on console-fra.rpki-client.org