Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa
File:                     78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa (raw, json)
Hash identifier:          ILRknE16vxkqzgSTeIOd7vv2jKbrBjdCzfjqn5O8Aio=
Subject key identifier:   5A:74:C7:BB:9D:93:E4:00:8D:8F:35:50:BE:45:E2:FF:C9:9C:B7:B3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584289FC76147D09EF03E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa
Signing time:             Thu 14 Mar 2024 21:50:12 +0000
ROA not before:           Thu 14 Mar 2024 21:50:12 +0000
ROA not after:            Wed 12 Jun 2024 21:50:12 +0000
asID:                     15169
IP address blocks:        104.134.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:28:9f:c7:61:47:d0:9e:f0:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:50:12 2024 GMT
            Not After : Jun 12 21:50:12 2024 GMT
        Subject: CN=bcc4db4a-f669-4cc7-885f-0be715db83fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:23:a8:53:47:1f:05:dc:1f:fa:e9:9e:c2:
                    6a:86:3a:35:4a:cf:d9:b6:19:70:70:40:b3:a2:e7:
                    fa:23:2e:14:f9:ae:c5:51:db:0f:da:65:4c:b4:9c:
                    2a:3b:e5:72:af:5a:95:be:f5:11:ca:ec:1a:57:37:
                    44:dd:dd:72:90:7a:95:55:cc:67:ec:58:7c:29:30:
                    06:21:3a:de:a8:d6:cb:e4:8a:17:0a:55:fc:a8:2c:
                    16:cd:97:7e:f6:e0:50:db:37:17:87:c7:82:fe:ea:
                    52:37:57:57:fd:5f:53:30:d9:1f:f2:d5:13:96:d2:
                    0b:6c:3a:a1:a0:1a:3c:d6:70:5e:1a:d1:da:f8:d2:
                    38:e4:90:5f:71:5f:70:ad:bc:9b:d4:40:5e:a5:8b:
                    6e:90:73:db:87:c1:1b:0b:84:13:ca:df:0a:2b:83:
                    b1:ee:7e:fd:97:fa:2d:1f:95:67:48:5b:de:7b:94:
                    62:bc:98:f9:99:88:e4:fc:1b:32:b7:68:0d:67:b2:
                    29:be:8f:9a:7f:1f:7c:f6:73:1c:a6:89:1c:be:a6:
                    26:c9:f0:d5:ba:da:5f:a3:34:a0:58:4d:a1:14:91:
                    86:dd:8b:63:52:ac:00:57:24:d4:5d:83:6f:8d:82:
                    6d:02:e4:42:c3:95:bb:32:2f:a7:68:68:9c:7b:94:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:74:C7:BB:9D:93:E4:00:8D:8F:35:50:BE:45:E2:FF:C9:9C:B7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:4a:56:4d:c4:f7:c4:a8:84:3a:19:97:1e:cc:3c:13:2d:
         7b:0a:cc:5a:ba:7a:c3:f8:2d:3c:1e:29:c9:a2:24:fd:9c:7c:
         00:06:9e:37:41:e0:9c:4f:14:2c:28:49:9f:bd:f2:48:cd:a3:
         ac:09:27:83:60:db:bf:97:71:91:77:b4:24:02:1e:15:9e:d5:
         86:16:5f:95:07:7c:d5:9e:fd:26:14:61:d2:bd:95:30:af:81:
         98:73:a7:76:ce:b5:e7:c8:b0:bf:1a:4e:9c:f6:95:43:74:3d:
         65:4d:67:8e:81:23:56:e7:41:b3:d1:c3:41:72:2d:b6:e3:14:
         be:48:31:ed:5b:bf:6a:4d:67:0e:ff:7a:aa:d7:ab:70:89:32:
         8d:e3:60:21:51:7b:34:ce:09:61:cc:2d:56:45:32:f3:14:81:
         25:07:02:e0:61:01:c5:35:bd:d0:27:21:53:c7:29:81:9f:1e:
         94:36:c3:10:d3:74:27:8a:ed:21:cb:0d:ca:55:fc:22:21:31:
         10:87:1f:9e:f3:96:75:66:e9:f5:4b:f6:eb:1b:05:f3:3f:89:
         6c:9b:56:75:62:7a:6f:3a:24:24:50:de:e6:80:f5:0c:1d:55:
         9b:66:1a:ac:20:6e:1c:7e:37:f1:b5:5d:21:2f:3f:d5:31:10:
         7b:00:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:29 2024 by rpki-client on console-fra.rpki-client.org