Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa
File:                     8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa (raw, json)
Hash identifier:          pGnOy43x8V6TuJgQQo8xatYmUMQNcQptQYjqZ32ch0U=
Subject key identifier:   07:8C:B6:C5:05:6F:82:53:BF:07:AC:E7:E3:30:73:5E:9D:0A:77:AB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584F60A4AAFBB9ADA104AC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa
Signing time:             Thu 14 Mar 2024 21:51:49 +0000
ROA not before:           Thu 14 Mar 2024 21:51:49 +0000
ROA not after:            Wed 12 Jun 2024 21:51:49 +0000
asID:                     41264
IP address blocks:        104.133.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:f6:0a:4a:af:bb:9a:da:10:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:49 2024 GMT
            Not After : Jun 12 21:51:49 2024 GMT
        Subject: CN=242e6f0d-53b3-48e0-b4d2-1a0ece144374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:b4:6e:eb:a0:e1:a1:f2:5a:c2:44:49:93:
                    3f:ee:8f:58:37:63:11:80:12:66:83:1f:e8:37:76:
                    fb:81:fd:0c:23:1a:37:79:29:c9:b7:c2:f5:b7:b0:
                    a5:72:a8:5f:59:94:19:79:14:af:f0:87:c3:bd:20:
                    15:6d:90:f3:a9:7d:f3:67:45:73:d5:5c:ba:dc:c0:
                    1c:3b:84:27:11:9d:49:6a:71:c9:63:bc:3a:2e:a3:
                    79:9a:98:df:e5:78:87:56:7e:af:b1:ce:dc:7e:db:
                    ca:f4:bc:06:95:36:92:33:a5:39:e8:0f:0d:69:63:
                    0a:b3:c2:02:c8:dc:8e:6c:a9:af:66:ba:7b:ba:a5:
                    38:30:09:5f:b8:9e:2c:41:2c:72:40:f9:22:db:00:
                    69:d4:47:6c:95:b0:f6:1e:b9:3d:41:1b:d0:ba:42:
                    d5:02:1d:5a:48:78:b3:38:c4:a7:8d:bf:c9:26:8f:
                    49:49:51:00:f0:26:f9:ca:1e:4c:54:4c:84:65:79:
                    59:01:3c:58:15:14:fa:a4:6e:a7:a4:76:2d:82:74:
                    c7:c8:98:ad:ea:0a:74:c6:6b:de:01:fb:c0:cd:87:
                    ce:a5:d2:9f:c2:4e:36:a7:b5:50:2c:25:03:be:9c:
                    7a:89:3d:69:ae:18:37:b1:54:49:c7:7c:ae:b9:b7:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8C:B6:C5:05:6F:82:53:BF:07:AC:E7:E3:30:73:5E:9D:0A:77:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:a0:89:d7:26:b8:29:17:73:34:c5:aa:be:43:98:29:eb:
         17:0a:27:c9:28:a7:5f:c4:50:12:39:06:e2:e9:09:ae:57:c9:
         42:62:11:77:e6:ae:51:31:0b:f6:c2:d0:80:8b:3f:25:5b:a0:
         c1:c3:02:0a:d6:36:07:c0:6c:82:de:c1:d2:7d:44:41:49:bd:
         82:6f:ae:65:6d:d5:bd:7b:38:ea:41:95:53:95:6a:0c:e6:bc:
         30:bc:e3:46:6c:7d:4d:e7:18:87:b7:d9:1a:3e:0f:42:f8:02:
         aa:f7:26:44:1b:8d:58:ad:99:12:34:90:69:65:35:fb:f3:d5:
         38:ee:e4:aa:bf:d0:d3:48:e8:bf:6f:1d:50:38:25:b6:3d:a4:
         3e:bb:e8:9f:b7:eb:07:fc:66:e6:04:e7:2d:ab:bd:dd:ce:e7:
         62:2f:54:24:90:1d:fe:48:67:2a:8f:88:6f:e7:43:d3:df:6e:
         34:6a:65:06:f2:00:e4:ed:8f:19:d6:2a:48:d7:74:2a:de:09:
         2a:25:2f:a6:55:de:86:81:81:11:23:ea:c0:96:f9:cb:18:0d:
         df:36:01:bf:76:ca:9f:f6:9a:04:a9:a7:ef:81:b7:04:c1:05:
         b8:c9:02:2f:38:06:25:47:e8:38:d4:1b:38:9a:b1:1a:b1:13:
         e3:5f:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:38 2024 by rpki-client on console-ams.rpki-client.org