Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa
File:                     89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa (raw, json)
Hash identifier:          +iPq+BxNMI6jfvrVBsIxMLHcvBmhfaITH741arpYy7M=
Subject key identifier:   DA:96:86:C6:DC:FC:07:05:BD:A1:C9:D0:83:0B:3F:1E:CE:2E:92:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0EA5B049EDFDCED5E34C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:ea:5b:04:9e:df:dc:ed:5e:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=c41aaa21-b949-47b6-a5ce-36b0cd06857a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:83:01:47:2f:41:5e:0e:7a:0f:a9:35:c7:
                    fc:a6:0a:60:c0:ac:5d:90:e2:d3:6d:b9:57:b8:c5:
                    6d:da:c0:65:03:8a:7d:bf:16:65:a0:06:e2:3f:cf:
                    1d:2b:b9:d7:44:f3:73:5f:7e:93:c8:0c:99:24:be:
                    54:7b:b6:f9:62:11:93:2f:79:7f:d8:57:c1:22:73:
                    5e:7b:60:c6:54:27:5d:38:30:52:bc:92:cd:97:0d:
                    72:23:67:87:f6:7e:4d:65:94:9f:38:bd:2c:26:21:
                    c3:ad:e8:e2:50:1d:80:b9:c0:5f:f5:4e:da:fd:62:
                    81:b0:6d:20:11:3f:8c:f6:eb:a8:47:ba:73:aa:3e:
                    6f:83:40:43:8c:63:2b:28:a0:55:d2:1a:2a:94:de:
                    17:f9:23:cd:09:3c:65:33:9d:07:4b:c8:c2:58:61:
                    7c:4a:ae:86:62:bc:55:88:13:bc:20:29:c0:c2:6a:
                    84:c3:40:c2:68:fa:89:4f:0d:5c:6d:ce:46:cd:cb:
                    aa:29:d6:51:84:b7:c4:dc:7e:ac:55:40:04:f5:7d:
                    bd:44:55:82:bb:df:c5:41:e0:e9:1f:52:da:d3:04:
                    aa:88:65:db:70:01:86:31:f7:e8:01:f0:fb:e5:45:
                    31:1b:f6:4e:33:c2:12:d5:38:23:76:c5:58:46:09:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:86:C6:DC:FC:07:05:BD:A1:C9:D0:83:0B:3F:1E:CE:2E:92:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:68:76:47:22:ec:7d:a2:94:f5:e5:b0:07:4e:a9:8b:1b:
         9d:af:25:57:ad:e3:be:69:ed:9b:3f:7c:0e:e1:75:76:fd:ab:
         64:19:60:c5:c2:47:81:58:dc:3e:59:cb:83:c4:4f:bb:11:99:
         9f:d4:17:95:29:47:fb:55:a0:d8:7b:d5:71:0a:d1:59:20:02:
         05:fd:76:77:27:bb:c6:52:d3:e0:7c:88:45:7d:22:c9:42:23:
         ab:dc:ae:a8:0a:50:92:6b:b7:fd:6a:11:70:8b:38:90:9f:cd:
         04:54:30:fd:12:29:f1:84:a4:8f:d2:28:75:74:ad:2a:fa:50:
         e1:d0:4d:26:74:dc:a4:27:f6:ab:c1:e5:c7:97:af:15:a7:02:
         7d:59:36:8e:f7:4d:96:57:ae:33:87:92:b8:8c:3e:89:c1:b5:
         f3:e0:56:fd:00:bb:fe:e9:ba:3c:bc:13:89:ab:a1:d6:a8:ed:
         72:11:60:42:7c:e3:dc:f2:56:a3:0a:db:66:46:4f:b0:76:b5:
         14:c7:b0:df:83:84:85:83:d1:4a:9d:62:b1:35:92:6e:7e:7a:
         11:77:ba:c6:c3:bd:ad:b1:3c:d6:ed:c3:e3:78:71:7d:87:40:
         82:71:5e:8f:14:b4:86:cb:f8:64:6a:9a:02:cd:c2:42:1d:4e:
         ea:05:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:04 2025 by rpki-client