Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/81afab69-cee7-37bc-bde8-51d333f40d3e.roa
File:                     81afab69-cee7-37bc-bde8-51d333f40d3e.roa (raw, json)
Hash identifier:          SLYAWl0QAnCoNywlrJHQpd4EjantcvJSiXvWsVCWSNQ=
Subject key identifier:   6C:BC:45:D5:E3:DB:42:6F:E5:0C:1F:54:DB:B8:8B:65:A5:0C:17:58
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B60C5FA4A84231063A0E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/81afab69-cee7-37bc-bde8-51d333f40d3e.roa
Signing time:             Mon 18 Mar 2024 22:04:37 +0000
ROA not before:           Mon 18 Mar 2024 22:04:37 +0000
ROA not after:            Sun 16 Jun 2024 22:04:37 +0000
asID:                     15169
IP address blocks:        104.134.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:0c:5f:a4:a8:42:31:06:3a:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:04:37 2024 GMT
            Not After : Jun 16 22:04:37 2024 GMT
        Subject: CN=1c7439f4-f236-42b3-bc79-0253a0c042c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:8b:13:c9:dd:60:c8:4e:b0:af:56:e2:e9:
                    9b:31:fb:e3:d9:3f:c7:a8:1c:6c:01:ec:0b:a5:ce:
                    b7:b5:04:20:4c:f6:b3:b3:2c:f6:ab:ff:5e:73:ff:
                    f5:36:70:21:d9:b9:0a:0f:3a:43:52:9f:9c:b6:a0:
                    f0:5b:a7:68:37:b8:6d:fc:a5:a4:56:ec:96:c5:fa:
                    8f:1f:ea:46:8d:48:f9:76:91:c8:d5:03:88:7c:4b:
                    74:a9:7b:10:3a:c4:4b:45:8d:96:69:a3:9e:0e:1d:
                    de:b2:61:94:b1:07:76:7e:be:44:14:35:ac:46:a1:
                    fb:9a:ff:d2:05:5b:99:98:5e:52:e7:df:e2:ce:f2:
                    ce:94:bd:50:5b:0c:3e:9b:47:1c:3b:c8:54:82:04:
                    36:15:45:cd:67:70:7b:2f:f5:f8:87:0b:62:73:a8:
                    a6:79:27:c4:c1:0f:3d:84:30:af:61:a7:db:dd:03:
                    6c:7b:3d:98:8f:4c:fe:53:8d:0e:5a:3f:17:9a:46:
                    51:11:16:b6:41:cb:c9:52:95:9a:81:40:46:ae:a9:
                    80:3e:df:fd:3f:c9:d4:4a:9d:8e:45:6a:fd:32:7d:
                    71:c0:f7:c3:94:71:cb:da:a4:e0:d2:14:f7:6a:d1:
                    4e:51:8b:3e:53:d8:1d:cb:8f:a4:01:7b:e5:b7:7f:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:45:D5:E3:DB:42:6F:E5:0C:1F:54:DB:B8:8B:65:A5:0C:17:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/81afab69-cee7-37bc-bde8-51d333f40d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:33:d0:d4:fb:f0:31:cb:19:38:1d:2e:48:0e:f5:2a:4f:
         f1:12:b6:42:ff:da:2e:c9:42:a8:aa:1a:f0:46:fc:cd:db:81:
         4c:5c:de:ba:d8:a3:7f:e2:27:08:d2:7f:9e:7f:1d:bc:ee:1d:
         2e:b6:a9:e4:15:0d:fd:9d:b5:ea:b6:73:48:89:79:ab:0b:d7:
         97:88:6c:b2:79:25:db:14:26:ff:a3:b0:5c:d3:d2:04:7b:58:
         4f:66:c1:96:fd:2e:fc:8c:84:4b:af:3d:78:6c:82:ff:ab:5f:
         c4:59:9f:bd:28:19:65:52:6d:ce:14:67:c0:41:8a:9c:89:a6:
         a6:68:6d:97:ec:8e:33:9a:db:58:7c:0f:b0:4e:b5:e6:f2:8c:
         22:1f:0a:b4:6e:ea:14:87:b8:3f:3f:bc:09:25:16:f5:26:f6:
         e4:73:95:d6:ac:e5:2b:b8:16:60:4d:b9:5a:1e:c7:4a:f9:e5:
         48:c4:6e:5c:f5:7a:83:03:fc:c0:8a:3a:90:e8:34:6e:10:8a:
         49:b1:87:33:04:a7:83:73:9f:47:aa:15:cb:c7:b4:e6:8f:d3:
         94:c2:7c:dc:3c:1d:eb:85:1d:7c:c3:e1:92:fe:37:5f:4e:83:
         ff:70:dd:fb:22:48:fe:cc:c7:e9:b6:e1:65:b2:3b:bb:6d:62:
         43:24:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:39:55 2024 by rpki-client on console-ams.rpki-client.org