Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
File:                     8c2421a7-aed0-38f0-8398-80b20002570a.roa (raw, json)
Hash identifier:          w935oIY16ytDIpzMaQvwsj0c4nUlXMY5leKxlnrLclc=
Subject key identifier:   95:45:C0:98:65:D2:DF:74:67:78:54:7F:24:60:12:F6:05:69:7C:C2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B6852296AA4184DE37E080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
Signing time:             Mon 18 Mar 2024 22:05:34 +0000
ROA not before:           Mon 18 Mar 2024 22:05:34 +0000
ROA not after:            Sun 16 Jun 2024 22:05:34 +0000
asID:                     15169
IP address blocks:        104.134.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:85:22:96:aa:41:84:de:37:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:05:34 2024 GMT
            Not After : Jun 16 22:05:34 2024 GMT
        Subject: CN=194326d6-86fb-46cc-943f-cc5c2a8c8693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:a0:1b:69:33:fb:45:49:02:58:91:d7:53:
                    e0:2c:44:d3:19:41:9e:21:b7:19:15:db:52:60:34:
                    62:5d:a9:86:00:b4:2b:69:f0:79:78:e8:a6:6b:12:
                    b9:01:d3:4a:10:72:37:18:06:f3:6f:c2:84:b9:0d:
                    f4:5b:2c:da:4d:4a:37:15:66:4e:3f:39:12:fc:99:
                    12:a3:8e:20:89:09:6b:ae:de:ab:e9:a2:d5:36:48:
                    b7:6f:91:ce:76:4a:e4:a7:7a:ca:1e:db:b2:e2:8b:
                    1d:b9:40:d8:d9:07:21:00:30:8b:61:69:38:cb:9d:
                    1c:d4:9f:2c:50:1f:ca:42:44:e8:c8:97:ee:f1:c3:
                    fa:82:b0:46:37:bd:b2:41:d4:95:b7:aa:0e:db:61:
                    7a:6a:d5:44:6a:b3:a1:ff:02:8d:d0:b2:38:91:e6:
                    db:ad:33:80:71:f6:17:4f:71:3a:55:12:35:c4:e2:
                    04:b9:76:46:0b:80:71:25:a8:88:c9:4e:97:cf:7e:
                    60:84:be:1d:e7:a0:ee:fe:bd:dd:15:1e:2b:43:a3:
                    c8:3d:ec:8f:61:76:5f:12:7c:f9:96:dd:b9:a3:f8:
                    6c:42:9c:fe:f8:04:e1:b2:7a:2b:1a:f4:f3:0d:30:
                    71:53:5c:6f:fc:27:3c:2c:62:0e:04:34:b3:c7:62:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:45:C0:98:65:D2:DF:74:67:78:54:7F:24:60:12:F6:05:69:7C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:5f:38:1f:ae:88:b4:8e:de:1a:36:23:7f:dc:3d:56:6b:
         16:1f:5f:f3:97:2c:a7:e5:71:81:ed:f3:f6:03:0a:67:c1:52:
         9e:e5:c0:07:1c:81:68:dc:e0:0f:67:83:3b:96:1e:fe:b0:6c:
         f5:93:54:1e:25:a5:9b:6a:4e:98:f4:1b:c1:81:d3:3b:60:f1:
         0d:11:8c:93:30:a8:b0:ad:c3:f3:05:f7:c1:db:c0:cd:b0:e8:
         a4:bf:ef:c6:4d:63:2d:92:5d:9b:7f:6a:46:55:a7:b6:c3:97:
         0f:dd:24:e3:52:dc:26:15:98:cf:34:c7:30:46:56:8d:c3:20:
         9d:e2:05:4c:b3:fe:d4:57:bc:63:a9:89:d9:0e:5f:30:bf:6d:
         8e:03:e4:a1:dc:cc:93:b9:06:85:15:d8:af:58:14:4c:9d:95:
         1a:2b:00:e2:2a:6c:77:30:0c:dd:55:79:d1:ea:5f:53:14:6f:
         98:dd:56:39:52:e2:87:b7:78:96:75:14:f7:6e:67:de:9c:6f:
         ea:5a:c5:cd:b5:dc:33:6b:ec:1c:93:f6:77:92:b8:f2:dd:b2:
         20:cf:c5:9e:ec:dd:37:f1:fb:85:13:1b:98:2d:11:45:54:00:
         55:e5:fc:f4:13:80:aa:b9:50:a4:53:1f:33:37:65:d6:24:ab:
         0a:a0:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:38 2024 by rpki-client on console-ams.rpki-client.org