Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/980a0588-3a79-3415-8602-b89cee2b7dab.roa
File:                     980a0588-3a79-3415-8602-b89cee2b7dab.roa (raw, json)
Hash identifier:          mcfP7dVv6pjSBoLXfHywrtQvBRXEZZlKuIYyaJbj2qY=
Subject key identifier:   AA:3B:F9:CA:14:89:B7:7A:40:48:24:95:C2:74:09:6D:5D:F2:D8:E9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7CC2A86380BBF2A904280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/980a0588-3a79-3415-8602-b89cee2b7dab.roa
Signing time:             Mon 18 Mar 2024 22:08:08 +0000
ROA not before:           Mon 18 Mar 2024 22:08:08 +0000
ROA not after:            Sun 16 Jun 2024 22:08:08 +0000
asID:                     36411
IP address blocks:        104.135.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:cc:2a:86:38:0b:bf:2a:90:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:08:08 2024 GMT
            Not After : Jun 16 22:08:08 2024 GMT
        Subject: CN=03d35cd4-e65c-4e8d-97a6-ad18e75dbf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:70:4a:de:ed:f2:66:37:ab:57:db:76:28:
                    7a:3c:0a:15:d0:31:14:2f:b1:41:76:5d:dd:15:78:
                    91:da:24:b6:05:22:c5:c7:4b:25:99:10:7a:97:67:
                    ae:92:81:40:9f:38:ed:8f:65:f0:fb:dd:e3:89:c6:
                    8b:9a:8e:8b:07:af:9c:12:4d:98:f8:63:28:06:c5:
                    b3:10:80:db:98:8d:45:1c:67:96:50:23:a2:f8:62:
                    c5:4b:8e:6c:94:e5:f7:95:a5:8a:d6:8e:df:c4:a1:
                    83:75:0f:5c:3e:a7:27:06:fd:a3:96:b7:6c:3a:e2:
                    29:97:2f:22:d8:c1:d8:e5:cf:5d:da:11:19:ad:d9:
                    ce:43:ce:01:b6:3d:03:62:06:99:55:36:89:d3:30:
                    5b:03:0d:2e:56:30:fa:cd:2c:b9:ad:dc:6e:ce:8f:
                    10:2d:b0:fd:ec:61:62:74:0d:cd:67:e1:96:47:c9:
                    05:ea:a2:cb:d1:77:18:b3:12:f8:9f:06:f3:72:bb:
                    ab:13:90:28:f6:06:70:ba:c8:d4:35:0a:f9:3f:d7:
                    93:85:3b:dd:4f:50:4b:82:15:31:61:2a:2d:0f:ff:
                    70:f6:46:d8:bb:f8:00:2a:a5:0a:ce:f0:07:0e:a3:
                    e8:30:e5:65:48:4e:b9:9e:4f:50:d5:60:59:35:1f:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:F9:CA:14:89:B7:7A:40:48:24:95:C2:74:09:6D:5D:F2:D8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/980a0588-3a79-3415-8602-b89cee2b7dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:bd:16:41:cb:40:22:a2:fe:f9:f7:80:d0:dd:0f:f9:3d:
         a2:1f:40:c4:d4:df:3d:32:ee:a2:14:c9:ba:88:38:fe:40:89:
         4e:e5:73:68:b2:78:b3:0c:cc:06:c7:ee:c7:94:a5:90:eb:c9:
         33:fe:86:a7:c3:8f:bc:91:74:5d:de:1f:59:91:92:23:82:c3:
         af:c6:81:47:06:23:f8:59:20:6c:50:fa:a2:4d:e9:34:32:22:
         fe:fb:37:64:4f:24:86:ce:be:b2:f1:90:39:55:62:8b:fe:87:
         c6:54:86:74:0c:82:4c:a5:01:2f:7f:8c:51:06:31:8d:41:42:
         8b:6d:2d:9e:de:43:52:27:53:0d:39:2f:c2:7e:cb:ea:32:d8:
         23:be:ea:0e:8e:38:6f:36:ac:93:35:f5:67:04:a0:a3:d6:05:
         7d:fe:bd:92:cb:ef:5d:b2:3d:56:0b:c4:69:ec:9c:45:ba:c7:
         0d:ce:85:21:76:52:fe:32:1b:10:b3:69:9e:a7:60:2c:11:b1:
         12:d9:4b:34:70:b2:0f:77:44:bb:08:61:2e:43:32:cd:d8:da:
         b4:78:1f:7e:6b:26:7b:cc:ab:b3:43:e5:32:55:9f:8f:7e:a7:
         f3:b2:b9:cc:56:29:17:86:ab:a5:90:50:c3:24:28:80:a3:f0:
         51:0f:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:42:56 2024 by rpki-client on console-fra.rpki-client.org