Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa
File:                     96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa (raw, json)
Hash identifier:          CRsybQkm8p6rUNWOkUsxO2pByYBhBKVdbnNxmQBQdNU=
Subject key identifier:   B0:1D:FC:48:99:EF:89:A6:40:69:66:8E:12:22:C2:D8:06:74:E4:4C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858452FF982C4F26B762CA3E46000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa
Signing time:             Tue 12 Mar 2024 22:11:48 +0000
ROA not before:           Tue 12 Mar 2024 22:11:48 +0000
ROA not after:            Mon 10 Jun 2024 22:11:48 +0000
asID:                     41264
IP address blocks:        104.132.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:f9:82:c4:f2:6b:76:2c:a3:e4:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 12 22:11:48 2024 GMT
            Not After : Jun 10 22:11:48 2024 GMT
        Subject: CN=3307f8b8-b864-4a51-9b66-ca27399d05ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:56:13:dc:1d:f4:fd:a7:9d:35:9e:05:cd:
                    fc:27:13:b9:ee:1c:31:f4:ea:21:a6:89:d8:91:85:
                    a5:7c:89:e1:6a:11:b5:21:2c:e7:1f:db:5f:89:c8:
                    5d:0d:d7:e3:86:0f:4f:fe:9f:b5:1f:4d:b2:0f:b4:
                    7c:69:68:82:57:07:7e:2c:0e:1f:db:8e:34:b3:48:
                    09:4f:5e:14:70:00:9b:75:99:da:96:16:b6:1f:01:
                    32:2c:5e:c1:16:06:55:af:82:8c:ca:cf:28:cd:e9:
                    7f:90:5b:38:cc:14:48:79:3f:74:e2:8e:a1:b4:fd:
                    7e:68:49:d8:bf:2f:20:d2:cd:62:15:f3:0b:8a:60:
                    5f:7b:82:ce:a6:f6:ef:4f:6d:7e:b1:fd:1f:e3:fb:
                    31:b4:aa:5a:ec:59:49:0d:49:a7:57:d6:fd:c1:98:
                    0b:fb:0d:99:77:8b:99:d2:d8:48:57:e2:d9:81:f6:
                    bf:bd:3a:ec:d5:9a:f3:3c:e6:e4:55:ea:31:d5:16:
                    35:76:a9:da:a0:65:74:e5:34:e5:14:88:32:9c:0e:
                    75:2f:09:d4:cd:69:95:b7:bb:47:b0:86:18:30:43:
                    fc:a0:1f:50:36:b6:fb:1b:b4:5f:19:f5:2c:e5:cc:
                    22:c6:ef:da:12:b6:96:c7:69:e2:4b:9e:07:7b:8a:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1D:FC:48:99:EF:89:A6:40:69:66:8E:12:22:C2:D8:06:74:E4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b7:7f:a8:e6:c7:da:7d:bd:87:fd:23:98:e1:e3:16:2e:bb:
         c4:33:52:94:37:63:bc:e0:d4:57:c4:1a:1e:78:94:ba:94:ee:
         34:00:03:ce:c3:4c:84:6d:b7:50:c4:ca:df:df:55:86:38:c5:
         e8:47:b1:ed:de:77:84:12:1e:ff:6a:42:8c:ea:b7:72:c9:49:
         46:03:af:2e:3d:9e:b3:b1:84:7b:30:61:33:f0:c0:7d:21:aa:
         94:0b:a2:80:4d:bb:68:a8:34:77:f0:2f:4d:02:5a:7d:56:6b:
         5f:af:58:be:31:ef:66:7e:34:35:73:db:aa:71:c0:da:dd:cc:
         6c:68:2c:ab:71:9c:b5:93:af:a4:f3:68:f1:7c:37:eb:f2:df:
         00:94:5d:4d:2f:b8:32:ac:63:17:b7:0d:64:10:f9:9d:ef:52:
         f3:6a:de:8d:a9:34:bc:b8:35:fd:84:0a:05:d1:96:df:0a:c4:
         c8:f0:0a:05:0b:ab:ec:13:1a:60:0e:a0:c8:58:60:8e:e6:44:
         01:45:26:5a:90:c4:c8:64:ab:99:b7:94:20:e3:c0:5a:7e:3a:
         2c:92:a8:dc:93:e2:06:82:fb:6a:71:7b:3f:91:8f:9f:63:45:
         c3:9f:c3:79:0a:22:76:fc:8f:bf:d4:26:55:d6:dc:2b:ea:77:
         e8:aa:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:37 2024 by rpki-client on console-ams.rpki-client.org