Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/87c6769b-8145-3a16-81d0-272934e3838e.roa
File:                     87c6769b-8145-3a16-81d0-272934e3838e.roa (raw, json)
Hash identifier:          w/CAy+HhWE32qaQ3JkcE8h8ICWuoS1U5LYioWZOjjxk=
Subject key identifier:   A5:C7:54:D7:F1:EB:6B:FB:10:50:51:96:4D:86:7F:01:27:87:46:71
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584C558AE903B1A8C5B2D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/87c6769b-8145-3a16-81d0-272934e3838e.roa
Signing time:             Thu 14 Mar 2024 21:51:26 +0000
ROA not before:           Thu 14 Mar 2024 21:51:26 +0000
ROA not after:            Wed 12 Jun 2024 21:51:26 +0000
asID:                     41264
IP address blocks:        104.133.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:c5:58:ae:90:3b:1a:8c:5b:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:26 2024 GMT
            Not After : Jun 12 21:51:26 2024 GMT
        Subject: CN=cc632211-25e8-4e9d-8ef9-d526b042c4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:02:20:8e:79:7b:76:72:da:84:37:37:b7:
                    bc:ba:c2:4f:51:63:af:18:61:8d:82:33:4f:10:49:
                    c9:0e:29:71:08:2e:0e:cd:1d:b0:8b:9a:16:50:3b:
                    51:56:7a:f9:6a:33:f3:51:96:f4:23:47:0d:b5:30:
                    46:05:8f:d3:ff:54:77:37:81:e4:44:69:9f:aa:21:
                    c1:d7:ce:91:b5:14:e9:7a:77:1a:1c:ef:88:2e:41:
                    44:ed:75:32:03:c1:de:b4:6d:7b:85:cc:ca:c3:18:
                    d4:79:e4:34:b2:ed:0b:9b:b0:38:09:c0:7f:38:28:
                    1d:8c:39:89:10:5d:5d:73:f7:ff:5a:d7:e0:31:86:
                    20:44:db:77:53:1d:54:57:fc:17:38:49:b6:a7:36:
                    7a:e8:99:3f:be:f0:c1:28:2d:84:8e:f3:c9:36:a0:
                    a1:62:6d:c9:59:b3:9f:c7:11:9f:fd:6b:2c:e1:5d:
                    ed:64:41:45:c8:10:10:ef:aa:a3:cd:e5:37:a3:76:
                    33:a2:be:7e:4f:77:24:cd:7c:8d:27:46:7c:ca:0b:
                    dc:9d:11:ad:22:54:8e:9e:f1:3f:9b:a9:0c:1b:38:
                    03:7c:78:0a:b6:4c:16:a0:06:36:a7:79:21:5d:15:
                    d8:95:16:7b:2f:88:23:ba:16:59:d1:d7:2f:e3:16:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:54:D7:F1:EB:6B:FB:10:50:51:96:4D:86:7F:01:27:87:46:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/87c6769b-8145-3a16-81d0-272934e3838e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:59:de:96:96:c8:cd:a4:2a:34:97:d5:92:50:1f:bd:ee:
         9b:25:24:1e:8d:03:2c:d5:58:a1:66:90:fe:f0:48:8c:8c:45:
         53:ce:ed:0c:81:40:f9:a2:c7:0a:9e:ac:1b:6f:6d:b5:13:e4:
         38:81:db:01:04:43:a9:bb:de:ff:49:26:73:2b:3d:97:88:c0:
         a9:76:65:f5:9c:89:23:e5:e9:a6:a3:63:78:2e:7e:3e:55:27:
         31:4a:83:95:bb:9f:22:a0:80:0a:81:7c:6b:db:2e:1d:ff:eb:
         a0:05:2f:2e:cb:a9:19:90:6d:da:fa:a7:c5:66:39:35:ba:df:
         5f:1e:90:ca:d0:fa:c9:eb:da:10:39:ad:73:bf:bd:b7:7a:39:
         55:d3:9c:1d:21:0b:80:ba:e2:aa:3a:0a:cd:08:73:91:26:7a:
         2e:4a:d5:e6:fa:8b:a2:ff:85:16:37:cd:08:51:6c:b4:07:fa:
         be:17:4b:f3:38:1f:f3:b3:6c:78:99:3f:10:88:af:d3:2e:97:
         1c:40:76:6a:fb:d4:98:89:f8:88:f0:bb:b5:3d:7a:f9:61:1d:
         21:da:4e:00:de:6f:2c:80:3a:9f:90:11:e8:3b:3d:3c:af:f2:
         16:86:7c:85:cf:e4:c2:cd:d6:56:79:d5:99:24:9f:4f:39:a4:
         fb:aa:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:42:54 2024 by rpki-client on console-fra.rpki-client.org