Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa
File:                     8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa (raw, json)
Hash identifier:          C7B8Wt7AkiTeax9QjQV+xFzH53mtUT0+HMyVsp51FcQ=
Subject key identifier:   D2:28:17:77:4C:09:B4:27:72:87:D7:A5:0B:C6:0B:17:6E:59:F9:94
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B870E4080FABC8E7A423C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa
Signing time:             Mon 18 Mar 2024 22:09:26 +0000
ROA not before:           Mon 18 Mar 2024 22:09:26 +0000
ROA not after:            Sun 16 Jun 2024 22:09:26 +0000
asID:                     15169
IP address blocks:        104.134.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:70:e4:08:0f:ab:c8:e7:a4:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:09:26 2024 GMT
            Not After : Jun 16 22:09:26 2024 GMT
        Subject: CN=818128be-4380-4e10-8b2a-b782b01a15ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:a7:69:8d:2f:0e:6f:63:d4:6f:8a:c7:13:
                    22:a8:5f:82:d8:8e:ad:44:57:64:04:03:47:47:dc:
                    ce:cd:a1:ef:4f:65:77:b5:a6:cd:2c:77:87:12:b8:
                    aa:26:7d:55:e5:bd:b3:88:b0:23:f9:f3:60:e4:a7:
                    5e:79:17:19:0d:5d:5b:05:46:48:a6:80:86:2e:b2:
                    b7:42:aa:9b:29:9e:44:af:ef:44:b3:15:71:9b:fa:
                    55:3e:96:b0:a0:ea:c8:0b:89:ac:59:54:da:a2:65:
                    09:fc:47:d8:54:2b:4e:25:c6:29:f5:01:bd:89:c5:
                    d6:f2:0c:2e:8b:0d:ac:51:57:03:b3:3c:79:f8:ec:
                    26:05:84:b1:43:c1:d8:17:84:76:09:cb:ce:d9:4b:
                    03:40:24:a7:32:34:80:cb:61:cf:a7:ee:8d:7f:04:
                    f8:be:a9:ae:8b:0a:04:50:84:75:2d:e0:67:99:56:
                    86:6c:8c:b2:c3:76:0c:d8:9c:29:25:f0:3b:98:54:
                    76:04:86:89:82:91:94:4a:aa:48:43:e4:b4:fc:65:
                    89:96:fd:d7:63:f0:f9:cc:29:3c:d7:ab:6d:34:36:
                    68:88:75:cf:1d:a0:63:b7:2d:7a:19:00:24:40:3b:
                    6a:f4:62:23:6f:d4:09:ac:60:2e:ec:35:b2:09:11:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:17:77:4C:09:B4:27:72:87:D7:A5:0B:C6:0B:17:6E:59:F9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:6c:5c:df:cd:87:15:6c:bd:f3:29:aa:9e:14:d7:a7:c6:
         35:8c:4e:71:5d:c4:b9:c4:8c:f5:9e:2d:21:6f:b9:a6:03:2f:
         e2:91:3c:f2:7e:7d:78:be:ea:75:14:24:99:fd:f4:a1:27:e8:
         0c:de:f7:f6:0e:8d:3a:2f:fe:83:34:d8:82:b7:d3:d8:8e:e0:
         64:5c:0c:52:4f:f8:ae:1e:d9:4e:da:09:e9:fe:f8:9d:51:a4:
         bb:5d:6c:60:ab:26:62:f4:23:5e:d9:21:42:b7:68:a8:62:6a:
         9f:e1:b2:66:dd:7f:30:01:86:e0:df:ed:af:f5:0b:ed:2a:fe:
         96:ab:3c:61:e6:8c:d9:b0:dc:4f:65:88:48:ad:77:7a:d3:2d:
         fe:d1:78:a7:50:f5:80:9d:1d:08:90:49:87:8f:ba:14:4c:fa:
         1a:d1:9a:97:6d:75:86:3c:08:03:d5:78:b0:49:6e:95:93:79:
         e0:9c:93:9c:1d:f9:d3:78:08:dd:a0:12:63:a2:50:ad:06:b0:
         08:9b:5e:11:06:06:28:22:cd:28:f6:dd:82:52:13:33:ea:1b:
         38:da:e8:26:09:76:f1:2f:43:29:d5:e0:24:cc:97:67:77:62:
         da:1b:d6:60:22:f8:61:c1:49:cd:6f:86:8d:32:a5:61:6a:f8:
         36:b9:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:31 2024 by rpki-client on console-fra.rpki-client.org