Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85c8a864-4287-31a5-901d-56acfec8a68f.roa
File:                     85c8a864-4287-31a5-901d-56acfec8a68f.roa (raw, json)
Hash identifier:          ILp3qh5XSqNiQb60Nl+zM5KHMMX17HMcRxnjiHMc4Yw=
Subject key identifier:   32:BD:3E:33:C7:1A:02:24:CE:9D:55:47:F0:BD:1F:FC:CC:1D:20:49
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A062D8145444E22EADB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85c8a864-4287-31a5-901d-56acfec8a68f.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:06:2d:81:45:44:4e:22:ea:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=66a28df7-5f03-418b-b908-8fd3207af55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:f3:d5:e9:3c:a7:c9:a8:46:bd:d3:6a:68:
                    fb:8b:c2:d7:8e:14:f4:8e:0e:62:74:fd:37:86:df:
                    ac:23:89:37:e9:9c:fe:55:5a:48:e3:dc:6d:ba:07:
                    b2:69:26:81:67:37:9d:f0:f4:f3:a2:56:3b:60:d2:
                    f7:a4:7d:61:1b:c8:16:aa:27:be:e0:c4:7d:ff:80:
                    c5:d5:e7:61:a3:ef:2d:08:26:f2:7b:f3:62:0e:25:
                    0a:2a:12:76:b3:10:ca:fa:85:3a:00:b1:38:4f:18:
                    fb:ef:3c:f6:81:cc:97:9c:b2:9a:f6:ea:ad:57:48:
                    d6:46:70:bd:d5:b3:4c:31:e9:82:31:1a:0a:6b:6f:
                    43:b0:8c:c8:61:b3:1c:ea:51:f2:52:65:92:a8:89:
                    3d:d4:fa:05:43:0e:39:a4:34:c7:53:94:9b:19:75:
                    f1:64:13:7d:f6:30:f6:f2:8e:b0:e3:e0:1b:79:48:
                    99:45:ca:44:80:67:f9:e9:7a:57:40:60:4f:e1:14:
                    09:a9:81:19:ae:28:bb:73:90:1f:47:ce:a7:51:7b:
                    bb:45:70:85:90:3b:dc:1d:ec:95:ce:eb:be:bc:79:
                    f6:06:71:10:a2:03:5b:7f:69:de:2f:7c:50:36:05:
                    35:8b:1a:2e:2c:7a:ef:d4:81:5c:17:45:d7:d0:44:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:3E:33:C7:1A:02:24:CE:9D:55:47:F0:BD:1F:FC:CC:1D:20:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85c8a864-4287-31a5-901d-56acfec8a68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:fc:3c:0c:be:a7:ff:62:12:dd:5e:3a:c4:20:bf:09:a8:
         3b:02:45:69:5a:10:89:b2:7e:59:c4:25:5c:15:55:a8:6b:06:
         ee:0f:58:2e:20:f3:61:ef:ec:80:e3:5c:80:6d:d5:42:1b:35:
         e4:4f:0e:07:fd:e1:44:f9:8d:fd:0f:12:c0:55:a6:e9:af:d5:
         ca:66:43:73:21:a7:f3:08:7e:93:e9:13:7d:3f:b9:b4:d0:52:
         4d:e1:62:77:88:5a:27:4e:80:c1:7c:e9:43:5f:50:ae:99:ba:
         ce:81:81:78:24:88:ed:85:f3:8d:4d:0a:fe:81:cb:da:cf:50:
         79:db:61:47:9e:e3:3f:5a:7a:5a:8b:7b:13:cb:a1:6f:a0:ab:
         ef:25:20:11:65:f8:67:97:ec:ef:1f:75:77:6a:29:f0:c6:a0:
         56:8c:63:b0:4e:77:92:0c:39:18:84:3e:f8:70:f1:43:45:58:
         42:d9:05:e3:70:c6:ee:c9:dd:62:8d:12:88:29:86:87:ad:5b:
         0b:e4:88:2c:e7:38:17:0d:ca:58:78:77:25:91:1b:d2:93:7a:
         14:03:33:f0:bf:ec:16:bb:5d:2b:56:18:8d:00:09:1d:55:0f:
         bf:b1:7a:1d:e3:41:dd:00:63:00:d7:68:b7:d4:e8:40:58:46:
         79:97:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:21:27 2024 by rpki-client on console-fra.rpki-client.org