Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950eea58-31d5-340b-b0fb-6744a1c62290.roa
File:                     950eea58-31d5-340b-b0fb-6744a1c62290.roa (raw, json)
Hash identifier:          ZVxVNmMXVM44bVcHGDgKeb87Dkrfqxn/PRxi+XBQXjk=
Subject key identifier:   E0:C6:16:9F:66:B1:4F:1F:4F:BC:97:FA:D5:70:F6:D2:4B:8E:8D:0A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A10D1936C83B489E95400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950eea58-31d5-340b-b0fb-6744a1c62290.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:10:d1:93:6c:83:b4:89:e9:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=6783e2fd-f656-4e75-889a-8d7e1dc09cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:2a:10:f2:43:83:a2:d5:9b:60:65:c8:8d:
                    7d:01:e6:49:09:7d:d1:40:16:2e:30:11:8b:89:15:
                    06:20:a0:92:4e:99:43:97:ad:ee:ae:1c:4c:d3:5d:
                    8d:65:c1:67:db:b7:eb:9b:e3:16:5a:54:81:3d:ac:
                    fe:8e:e6:e3:9f:a5:2f:28:a6:5c:f7:b6:ff:de:a1:
                    3f:67:0e:23:00:1d:45:07:e2:41:3a:7d:44:ed:84:
                    cd:44:22:68:a8:83:e4:e9:96:90:e2:36:4d:4a:b7:
                    7f:45:6f:6e:1c:80:86:eb:53:4a:63:9a:ca:2a:6f:
                    a2:0d:16:90:ab:f6:ce:d7:21:89:7f:0a:83:ae:e8:
                    94:5d:18:e9:03:86:94:56:57:e0:24:2f:8b:02:d2:
                    47:bf:67:cd:d8:7e:c9:59:0f:ab:c9:20:7d:85:6c:
                    6e:20:5e:ba:58:c8:d0:36:d8:0a:97:6b:e5:ca:f8:
                    ee:f2:f9:78:2a:fc:2d:bd:13:3b:a8:db:1e:f3:6d:
                    72:ca:e3:e3:90:98:0b:43:6e:ef:1a:30:9a:61:36:
                    a8:38:30:09:74:7b:a1:68:49:cb:ba:47:2c:4a:22:
                    6b:a3:3c:75:e8:e1:9b:3f:4e:47:e5:3d:d1:2c:c7:
                    60:3f:ab:76:29:5e:3e:9f:de:fc:fd:a7:7e:5a:91:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:16:9F:66:B1:4F:1F:4F:BC:97:FA:D5:70:F6:D2:4B:8E:8D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950eea58-31d5-340b-b0fb-6744a1c62290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:be:91:e7:cd:18:03:d1:e3:30:f9:5a:87:8c:f4:75:f0:a5:
         aa:0e:56:45:31:8c:4b:30:ee:0b:fd:cd:1e:9c:0f:ef:a4:3d:
         bc:c0:eb:33:1b:1e:af:6c:46:e1:82:eb:82:da:a6:8f:51:00:
         7d:d3:5e:5e:79:60:3b:51:80:03:de:d9:fe:e1:0b:40:73:19:
         97:c8:b0:0e:14:e5:02:5a:9a:3c:d0:11:b2:26:71:9d:65:d4:
         4a:7f:ba:59:72:2b:38:a3:ce:3a:2f:2a:9e:34:a7:e0:21:9e:
         c6:e5:37:9b:24:6a:45:2f:58:ac:df:d1:66:b8:dc:d6:0e:50:
         03:cc:3c:57:0a:7c:14:a0:cb:f1:2e:14:ab:ef:6e:01:c7:29:
         65:87:23:57:5f:80:4f:20:87:bf:41:26:97:30:64:69:76:8a:
         3a:a3:ca:bf:15:67:7f:0b:03:bc:83:b5:7e:d3:fe:4c:f0:3d:
         a5:6e:a7:37:87:45:c9:4e:85:f6:56:65:8a:e4:4a:27:ea:75:
         5a:49:06:53:95:f4:d5:84:38:48:fc:59:dc:d9:71:a4:43:74:
         04:61:19:68:fb:98:0a:81:67:35:0d:e6:9c:0a:4f:85:61:d4:
         6f:3c:a1:dd:5a:6c:44:cc:51:ad:cb:a9:ec:a8:f8:29:4a:95:
         6e:c5:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:53 2024 by rpki-client on console-fra.rpki-client.org