Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa
File:                     934900f6-3393-3f77-a474-3b0867fbee72.roa (raw, json)
Hash identifier:          10+oSxSmufCmG54YupV7sjVS/fm1goEjLOinwCTdPDE=
Subject key identifier:   E9:04:9B:38:D9:C5:33:4A:C5:3B:10:83:BB:C7:93:A4:7C:86:D4:7B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453284177F3A681F965D4683E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa
Signing time:             Wed 13 Mar 2024 20:02:38 +0000
ROA not before:           Wed 13 Mar 2024 20:02:38 +0000
ROA not after:            Tue 11 Jun 2024 20:02:38 +0000
asID:                     41264
IP address blocks:        104.133.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:17:7f:3a:68:1f:96:5d:46:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:02:38 2024 GMT
            Not After : Jun 11 20:02:38 2024 GMT
        Subject: CN=0e79b0e5-b52e-4a7a-88a0-47f4492f78d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:f5:3c:45:55:d3:5e:83:67:63:6f:69:7e:
                    17:3e:25:99:d8:42:92:fd:cd:26:48:0f:96:53:ee:
                    45:b1:03:6e:19:19:3d:26:b6:ac:ab:d3:37:c6:7c:
                    aa:e6:19:1f:f0:dd:d2:2c:f6:e0:7c:63:c9:2e:c7:
                    6b:f7:04:9b:45:69:ff:d2:05:3b:6e:da:4f:81:3c:
                    75:5e:e8:ef:25:8a:2a:91:30:40:95:43:a2:99:9a:
                    01:2e:d1:3a:9b:a0:55:fb:98:78:48:42:1f:39:74:
                    16:23:49:7a:d9:5c:5e:0e:4a:f3:5e:a3:5a:26:c2:
                    d4:0b:34:f7:e5:c5:36:7a:3f:14:6c:10:dd:a8:86:
                    9c:fd:52:cb:be:7c:33:55:5b:c3:da:46:8b:b4:48:
                    90:a2:e2:66:34:c1:2b:af:33:f0:72:ef:1c:70:dd:
                    cf:bd:e5:bd:dc:ca:1e:ab:22:c2:14:6f:67:39:6b:
                    0c:47:c0:3c:36:53:db:e7:78:34:e1:87:46:1e:ab:
                    e2:c4:49:66:fb:be:21:19:69:34:6f:6a:ac:54:2b:
                    2f:b2:43:a7:67:01:28:df:74:26:9b:0b:49:01:0d:
                    a3:2a:75:8e:25:7f:81:50:8f:e8:5b:6f:6b:b5:de:
                    03:a0:9d:12:cb:7b:b9:e2:a4:52:df:2e:eb:4e:06:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:9B:38:D9:C5:33:4A:C5:3B:10:83:BB:C7:93:A4:7C:86:D4:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:8b:24:c9:c7:20:70:58:fe:ae:84:bd:43:bf:30:ed:3f:
         e8:59:93:9a:99:21:a4:7d:66:54:81:00:9e:9e:ca:35:75:cf:
         18:48:ab:9c:ac:23:32:1e:a8:fe:12:77:d6:a4:3f:d1:1c:24:
         ad:93:c0:dd:b9:44:19:91:2a:c5:7f:ab:58:0c:c3:9f:2e:c9:
         6e:df:49:85:7d:d7:cc:f6:c6:3f:ea:ac:25:fd:00:42:84:5a:
         84:ed:48:30:f5:f5:8a:58:9c:7a:e8:d2:7f:28:ce:97:de:64:
         6c:59:5f:b0:75:e5:81:5f:34:19:cb:c1:27:1c:cc:5f:83:5f:
         4f:73:5c:3b:4f:6e:5c:e5:37:99:34:7e:35:af:1f:59:d3:f8:
         a4:91:f5:10:cf:9c:33:52:79:13:0e:56:df:b8:58:76:76:8c:
         9c:62:05:e0:23:34:2e:a0:a0:86:19:13:db:c7:bc:06:63:b8:
         7c:69:cd:fc:f1:c2:4d:b5:96:8e:fc:5e:d2:c0:4b:cc:05:5f:
         e3:91:99:d9:eb:09:cc:1f:8f:39:1c:85:2b:c4:9d:43:aa:35:
         69:3b:fd:2e:a3:f4:00:69:2b:58:39:c1:bc:b8:0a:e6:e0:3d:
         f9:c9:56:1f:3c:e4:d5:c6:b9:40:9d:77:6d:44:9a:a8:89:ce:
         c4:f6:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:02 2024 by rpki-client on console-fra.rpki-client.org