Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a03c631-7665-3689-a573-0017916dbb40.roa
File:                     7a03c631-7665-3689-a573-0017916dbb40.roa (raw, json)
Hash identifier:          SQTBppp2YnqJkS7Lw+8+N7RSOhRGhUsEhh4o/JU5bFw=
Subject key identifier:   BA:7C:A5:CF:94:64:D9:FF:78:09:28:4B:52:C1:81:B0:32:7B:E0:C4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A15E581530009AECEEA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a03c631-7665-3689-a573-0017916dbb40.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:15:e5:81:53:00:09:ae:ce:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=d2e3917b-5a83-43c3-a458-4c17a8467fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:e6:7e:0f:89:2f:89:70:6a:d7:3c:fa:6a:
                    c2:b4:32:0c:b1:c9:f3:99:dd:65:15:60:91:52:67:
                    33:83:c6:e8:ab:a2:fa:43:26:08:e4:e2:17:f6:d6:
                    f7:18:a6:1f:2a:ca:82:21:1d:18:e4:d6:6f:c7:5d:
                    85:cf:59:02:ce:aa:a9:8e:bd:d8:f8:a8:13:b5:71:
                    96:38:a6:47:52:d7:87:85:db:be:7b:ee:a7:8d:a0:
                    ff:41:4b:0b:97:4f:0f:45:22:59:0a:fa:67:db:d1:
                    d7:11:09:37:c5:a8:45:08:41:06:62:1e:f2:48:bb:
                    45:1f:2a:16:6b:2c:1e:17:a9:27:86:4e:17:75:71:
                    6a:5d:84:5b:c8:f1:b1:7d:77:4b:78:83:69:75:8a:
                    8a:3a:57:7b:e3:fc:9d:41:b5:87:14:49:1e:dc:82:
                    0a:a3:68:6c:e6:f1:ef:b3:25:4e:90:09:29:15:28:
                    17:f4:22:fd:24:63:e0:cc:69:3a:b8:5f:46:9a:f5:
                    95:f3:44:a0:ee:ae:ee:b3:0a:e8:cd:ec:cf:b3:82:
                    cc:6b:5d:7d:7f:a5:e0:e8:4f:6f:c4:53:c7:f1:0b:
                    b8:df:aa:55:01:9e:65:0b:94:d4:ed:cc:5d:6b:8a:
                    8a:a4:88:a5:ca:5a:4b:f7:0e:b7:15:2f:81:ac:01:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:A5:CF:94:64:D9:FF:78:09:28:4B:52:C1:81:B0:32:7B:E0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a03c631-7665-3689-a573-0017916dbb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:de:66:7b:86:36:fa:41:c1:24:39:4c:27:fb:c4:71:ca:21:
         23:a7:d9:17:96:46:7f:9b:d9:67:42:b7:76:15:3f:89:1d:93:
         fd:20:e7:ac:bb:d6:8a:cf:22:04:34:1e:f2:03:bb:d6:3d:87:
         88:e4:54:f1:16:bb:14:a3:09:11:a5:a1:cf:ff:db:e4:5f:63:
         8c:86:54:06:b4:37:ce:1b:a4:be:87:c8:c8:99:c4:58:de:98:
         33:8e:ef:c2:be:0d:1d:0e:b6:fc:fc:6b:9e:94:5e:92:64:63:
         b3:06:f2:df:30:9c:02:e2:8a:5b:92:71:ca:b4:1d:56:a9:c4:
         29:06:74:b3:05:37:5a:ee:f2:84:c2:19:88:03:e7:41:dc:e2:
         c7:08:cd:27:15:93:2a:02:e5:0f:3b:ff:8f:57:38:38:83:5b:
         7c:b7:22:90:63:7a:f2:46:ac:ca:04:00:bc:eb:db:56:05:ff:
         02:de:a7:ba:e5:a8:3c:d5:13:1a:bc:cd:85:46:48:4d:5d:92:
         a4:71:fe:19:27:ec:2a:aa:9b:a1:e9:27:88:d6:64:bb:9c:5f:
         0c:fb:f2:fc:6a:25:16:82:7b:66:c0:7a:b5:b5:88:6c:20:34:
         69:8e:a9:ed:29:84:1c:11:09:44:be:bb:ba:18:e8:73:ec:21:
         3f:2d:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:14 2024 by rpki-client on console-fra.rpki-client.org