Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa
File:                     88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa (raw, json)
Hash identifier:          Fc99+JQ36FujwgDfub5oGsXMLOQYRI6Yh7hHFj77QLw=
Subject key identifier:   AF:93:6A:CB:6B:DC:DE:8A:C9:46:36:BB:FE:98:B6:72:6F:0B:57:BC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7B2BCFA140B9B164CCC40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa
Signing time:             Mon 18 Mar 2024 22:07:56 +0000
ROA not before:           Mon 18 Mar 2024 22:07:56 +0000
ROA not after:            Sun 16 Jun 2024 22:07:56 +0000
asID:                     15169
IP address blocks:        104.134.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:b2:bc:fa:14:0b:9b:16:4c:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:07:56 2024 GMT
            Not After : Jun 16 22:07:56 2024 GMT
        Subject: CN=e5d3e034-f02f-47cf-a9ce-6a6b0877ccc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:36:34:31:b2:ae:02:8c:81:15:d9:8e:2a:
                    8a:4d:ee:0f:92:9a:5c:2e:b6:bd:86:23:f8:44:df:
                    4a:77:81:d4:1d:9f:7b:9a:59:b5:99:31:59:30:94:
                    2c:eb:2f:f6:4b:63:19:47:6b:4e:fa:62:3f:d9:f1:
                    43:e8:9d:13:e2:fe:cf:11:82:ec:98:41:d2:cf:7a:
                    6f:69:a9:ed:de:5e:39:91:03:13:cb:4e:4c:21:e8:
                    be:5a:fc:1b:12:51:85:de:a9:a1:8f:36:8a:1c:cc:
                    5a:da:1c:b4:25:5d:20:96:e4:45:1b:d3:aa:33:3e:
                    43:2a:02:95:2f:89:44:a3:51:41:1d:27:ce:90:89:
                    76:4d:03:5d:0c:0b:0a:9e:68:9e:7c:0a:7e:a0:a3:
                    ba:65:73:fc:dc:19:67:1d:de:7b:e4:40:9e:ee:11:
                    c1:d0:49:40:29:ab:7d:8f:9d:0d:c8:45:33:4e:ba:
                    b4:a6:08:5a:cc:e2:ea:21:17:9d:56:39:6f:1f:5e:
                    31:8c:f6:b7:c5:44:af:e6:fa:35:67:7f:91:49:45:
                    68:05:07:c3:49:1d:87:bf:91:e0:43:74:a5:9b:c8:
                    2b:7c:f8:8c:d4:1e:3d:a3:8c:cc:d2:f6:06:64:bc:
                    b2:0c:5e:56:a9:24:eb:f8:ca:d1:a5:6c:1f:9f:db:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:6A:CB:6B:DC:DE:8A:C9:46:36:BB:FE:98:B6:72:6F:0B:57:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:78:18:ef:1a:87:44:8c:6e:76:b2:c7:af:39:b0:21:6f:3f:
         28:3d:8a:f2:60:d5:70:7b:b9:1b:8e:ab:5e:23:27:21:29:c4:
         f4:f4:18:64:82:82:90:5e:2c:57:40:16:4a:f7:62:f9:18:a0:
         be:0f:01:a6:83:1d:4f:24:81:68:17:24:87:c6:73:5f:57:68:
         66:ba:47:8d:34:c6:a5:7a:4d:37:10:bf:bf:78:f6:66:e1:0e:
         9d:29:a9:ef:f0:1f:44:90:e2:55:26:4e:09:62:05:38:b6:8b:
         95:53:e3:b3:44:ce:cc:7d:0a:0b:4a:c9:ea:88:80:bc:98:45:
         cb:0c:d5:3c:88:ce:98:fd:ca:88:b8:3f:e4:09:c3:50:88:c1:
         44:61:d7:d9:28:1e:dd:8c:7f:2d:0e:f5:06:95:5e:f4:7f:52:
         e0:8a:6c:2b:ed:cd:e0:88:ab:e1:16:8e:09:f6:d2:df:a2:d8:
         ba:98:0c:6a:4f:76:6e:7e:25:26:23:83:54:d1:85:d5:36:3b:
         63:81:80:34:83:dd:6f:b1:b6:f0:d1:ed:a7:66:2d:f1:b3:6d:
         0d:fd:f1:0a:17:8e:3e:91:11:a1:19:ae:64:30:fa:1c:d7:76:
         f7:d1:03:39:03:c2:63:e0:2a:84:5e:f9:4d:09:79:5a:f4:d1:
         6f:88:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:36 2024 by rpki-client on console-ams.rpki-client.org