Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa
File:                     932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa (raw, json)
Hash identifier:          R5dtEL9U2ZLmOxntBGOdPmBAsQKJ3XkaqPXobmCqncE=
Subject key identifier:   9B:FC:32:F6:5E:BC:80:E1:C8:F4:13:AD:1A:48:B4:0E:45:2B:AE:41
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358450DCCABCB4CCD705DE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa
Signing time:             Thu 14 Mar 2024 21:50:31 +0000
ROA not before:           Thu 14 Mar 2024 21:50:31 +0000
ROA not after:            Wed 12 Jun 2024 21:50:31 +0000
asID:                     41264
IP address blocks:        104.133.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:50:dc:ca:bc:b4:cc:d7:05:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:50:31 2024 GMT
            Not After : Jun 12 21:50:31 2024 GMT
        Subject: CN=58adee2f-5c99-4db6-81d8-c75ee19a4bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:61:1e:cb:2d:79:ab:17:f9:90:9e:82:0e:fe:
                    34:3c:0d:7a:ee:fe:e8:1f:b5:10:1e:1d:4e:5e:d1:
                    a5:dd:43:4e:cd:3c:2e:73:46:8c:aa:0c:58:62:3e:
                    a1:67:15:56:38:bf:5c:d5:ac:e0:a4:9f:d0:95:63:
                    88:f3:a5:4c:a2:b2:3c:6c:34:aa:1b:65:08:eb:a9:
                    a5:df:14:d7:0a:0c:5b:54:3d:dc:6a:13:e4:07:85:
                    9e:f9:45:5a:9d:ad:bc:82:9d:51:14:59:90:26:82:
                    59:b8:5d:4b:81:91:91:33:c4:07:b5:f5:a1:23:01:
                    91:fd:94:5d:9f:81:40:0c:41:35:ad:9d:d6:e0:dc:
                    cb:be:c5:4b:c9:65:b3:22:50:60:a3:97:02:30:d4:
                    03:bd:54:f3:b5:f2:9f:6c:5b:1d:a6:3a:ae:e2:0f:
                    38:55:a1:ac:f0:5e:3b:0e:3c:22:0b:3b:15:39:7e:
                    46:a8:92:71:32:23:ae:20:fb:23:c6:76:2d:7e:6d:
                    11:d0:5c:3b:b1:9c:79:00:dd:ba:fb:04:34:06:55:
                    ee:a3:dc:ca:82:67:f8:ae:8e:04:f7:2e:74:df:14:
                    85:75:72:fb:b2:fe:3c:4e:db:0f:8d:12:bc:d7:34:
                    70:03:65:05:cd:a9:ce:18:3e:d2:ed:db:82:8d:fd:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FC:32:F6:5E:BC:80:E1:C8:F4:13:AD:1A:48:B4:0E:45:2B:AE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:74:73:ee:4a:c6:92:ab:ff:ec:aa:1f:01:53:8e:f3:24:4a:
         88:4d:8c:c8:81:09:cb:83:05:84:a8:5d:fb:25:6f:d4:a0:cb:
         55:69:f2:e7:3e:a5:64:58:77:49:36:52:41:71:a9:75:96:34:
         ac:01:ca:bf:fc:20:fb:9c:c1:0a:03:19:20:93:9a:0a:d6:f7:
         e5:4d:27:91:66:a6:79:82:54:ea:c7:ba:3f:3c:23:df:56:b1:
         20:92:b8:8d:f4:a0:29:75:97:cb:4b:18:9b:ab:22:4d:17:5f:
         44:2f:da:bd:7b:88:72:a7:f3:24:7d:df:58:85:25:ef:a7:3e:
         0b:53:d1:c7:e7:58:59:b9:d6:58:8e:cb:3d:69:26:de:9f:6f:
         7c:31:02:2e:4a:d2:db:44:45:c0:02:ea:d4:dc:cc:68:d9:15:
         75:44:15:bd:40:3c:59:0b:e1:2c:57:d3:21:d4:e7:7f:f4:7c:
         fd:5c:e1:21:48:9a:e4:56:19:f5:14:d3:c0:15:ac:9c:d3:fa:
         42:c6:65:e2:a1:b6:f1:b7:5f:0a:92:a7:f7:3b:bf:03:40:a5:
         3e:21:13:ff:38:d5:54:da:7b:cb:45:40:4f:62:81:c7:58:bc:
         7d:47:db:b4:23:a4:c7:d8:13:f4:61:44:c3:60:1a:98:f6:7d:
         91:4f:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:38 2024 by rpki-client on console-ams.rpki-client.org