Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/97a8c11b-b46a-367d-9012-07ffbfadfaae.roa
File:                     97a8c11b-b46a-367d-9012-07ffbfadfaae.roa (raw, json)
Hash identifier:          4ZVYewbzP+I6n1sZC9pRLxkeSssPQI6sX+W8cSyNTcw=
Subject key identifier:   41:69:B3:D8:A3:18:13:2B:06:8C:ED:47:22:2F:05:CA:71:62:5C:EF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A12011CEC8D93619F1C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/97a8c11b-b46a-367d-9012-07ffbfadfaae.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:12:01:1c:ec:8d:93:61:9f:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=8869feef-729a-4d16-8592-cbcf2b7bd6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:00:ad:02:23:15:fe:59:f0:31:09:cd:d6:
                    1e:59:53:1d:e0:fb:1f:a8:db:e0:9c:6a:9b:af:6d:
                    6f:f6:d2:c1:f4:05:dd:d0:66:aa:4e:32:d4:28:8c:
                    0b:33:86:47:e7:e3:c3:b0:75:5a:d0:c3:1f:46:6b:
                    0b:73:39:9c:0d:15:22:ac:43:69:0d:e1:9c:eb:68:
                    07:b7:21:c8:f3:47:b8:fc:1e:21:73:c3:0b:67:de:
                    3b:9c:e7:6c:b0:57:d1:e2:09:9e:6c:4e:69:0a:23:
                    2a:e5:08:d8:31:22:f3:52:4a:de:47:e8:9f:44:9a:
                    b0:6a:54:fa:bd:17:a5:5d:2c:32:fa:36:1d:35:d2:
                    45:19:77:4d:36:0a:ab:9b:c5:24:4b:01:28:c5:16:
                    ab:d4:69:8e:0f:71:95:d1:82:14:79:21:fe:67:02:
                    23:51:cb:ea:b0:9f:fe:6e:fb:13:67:d6:97:90:a0:
                    37:48:7e:ac:ad:80:bd:94:16:8d:91:b8:ed:81:e4:
                    c9:cd:4d:7e:f1:cf:09:e3:47:e0:c0:bc:1f:e6:1a:
                    ad:80:1a:1d:42:ff:85:13:39:71:f0:d6:c0:68:78:
                    95:8a:2b:b7:d9:f3:87:d8:b8:9c:a5:18:79:1b:ec:
                    22:66:4a:96:c7:16:0c:17:78:d3:9b:8a:fc:08:01:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:69:B3:D8:A3:18:13:2B:06:8C:ED:47:22:2F:05:CA:71:62:5C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/97a8c11b-b46a-367d-9012-07ffbfadfaae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:6e:c0:43:a1:da:12:d5:78:eb:2a:8f:1e:0e:3e:27:a9:
         b7:98:b9:d5:6b:d5:95:a5:78:0c:37:a2:ac:e4:35:80:95:eb:
         e7:9a:ee:72:6b:86:ea:09:09:f4:69:d1:4e:a1:f9:ae:e3:cf:
         c8:a8:57:ec:0e:74:73:f1:d6:94:cb:76:31:57:8a:17:4b:ce:
         cd:41:fe:7f:a8:c3:40:28:21:fd:e3:db:8e:af:ea:ae:37:79:
         58:2d:0e:e6:3c:9f:4e:5f:93:53:79:26:a3:b5:d7:ae:bf:f9:
         f8:f7:7b:8e:1d:b1:2e:d8:1b:88:77:c8:bc:b7:f8:76:bd:ee:
         5e:64:43:b3:ff:8d:26:37:be:05:9b:50:36:50:99:4a:18:75:
         3b:86:1d:47:df:a7:be:ba:4e:5e:90:f6:c7:4f:72:35:6e:82:
         fe:9d:b6:16:30:50:26:5a:c5:df:54:96:07:55:4f:7e:61:f8:
         94:87:b1:c0:9f:d8:9f:f8:0c:f5:6f:7a:32:59:e3:9f:4e:8c:
         39:9c:8c:b4:66:fa:e4:ee:6b:54:bc:99:4c:f9:33:2b:2f:0d:
         29:0f:11:73:0e:5b:57:77:7c:80:3d:c3:e4:bb:1d:cc:e9:3d:
         f2:70:e4:bb:14:e7:5b:f0:e1:bf:18:57:6e:2e:6c:71:f2:07:
         6a:10:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:46 2024 by rpki-client on console-ams.rpki-client.org