Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa
File:                     999a42e4-ba2d-3d5a-93e9-51dad185705a.roa (raw, json)
Hash identifier:          VcNHRwNLocC28re3HVz1M2HRF78VPyy1hAgTS61e9Xg=
Subject key identifier:   6B:76:70:45:B4:26:4D:AE:C3:9B:41:EF:39:0B:C5:76:65:2D:8E:F1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7D6BDCBFF5A1E49E99900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa
Signing time:             Mon 18 Mar 2024 22:08:13 +0000
ROA not before:           Mon 18 Mar 2024 22:08:13 +0000
ROA not after:            Sun 16 Jun 2024 22:08:13 +0000
asID:                     15169
IP address blocks:        104.134.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:d6:bd:cb:ff:5a:1e:49:e9:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:08:13 2024 GMT
            Not After : Jun 16 22:08:13 2024 GMT
        Subject: CN=6c8cf4f9-5012-45fe-8180-f9b404e907ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:cf:a4:c5:71:20:7b:4e:80:11:e4:68:ec:
                    a0:3e:f9:9f:8e:f2:1d:83:bd:c7:a0:de:5f:4f:a3:
                    f3:c0:eb:8c:a8:4f:92:b3:95:da:cb:4c:d5:a5:da:
                    29:d0:8d:56:b0:46:d7:10:6e:c9:84:a1:fc:0a:c0:
                    f6:e5:c6:8f:eb:95:d3:21:a0:0d:bb:55:f6:ce:ac:
                    bb:ec:5d:c0:ec:9d:5b:a0:29:00:b0:c5:13:28:b2:
                    50:d3:b8:6f:94:72:8e:f0:d1:0e:d8:98:b9:fc:9b:
                    41:5d:ba:38:19:9c:90:eb:b8:7b:64:c6:70:64:a7:
                    75:4d:1a:8a:01:a4:78:03:a4:93:84:0f:bc:1f:02:
                    7f:b3:4d:5a:87:34:d4:a2:40:96:78:c7:be:84:1d:
                    7a:2a:ed:8d:26:eb:98:f0:c9:e9:ba:a4:16:a6:e4:
                    ae:20:d9:aa:13:69:27:f9:df:71:68:32:10:06:cf:
                    c3:f0:76:09:f1:cc:42:52:4d:db:33:7a:ba:19:81:
                    b3:c1:4c:1b:d6:0c:17:09:5b:ca:97:83:bb:96:fb:
                    67:ee:17:4f:59:4b:21:24:b9:c4:ca:8f:f0:73:21:
                    b8:d4:67:f7:64:6f:43:7a:48:74:03:2b:8d:f0:f0:
                    95:9a:3b:b0:c6:03:b9:25:8a:07:dd:7b:e1:5f:3c:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:70:45:B4:26:4D:AE:C3:9B:41:EF:39:0B:C5:76:65:2D:8E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:0d:e2:64:5e:01:70:f7:55:21:2f:46:f5:fa:7b:7d:35:
         78:9a:46:17:4a:b2:aa:4d:89:5d:99:3f:3e:87:a8:43:c9:cd:
         ff:6f:c3:fa:0c:24:64:9e:48:05:f3:a9:a7:13:da:0b:73:7e:
         a8:70:95:89:8f:5d:6f:4b:c8:8e:18:26:de:88:f1:98:d2:40:
         27:f0:68:a6:9e:33:5d:dc:ee:e1:24:6f:a5:99:d1:be:3c:43:
         79:17:79:17:92:59:bd:37:76:94:49:f5:f0:5c:56:54:71:e6:
         c8:0d:6c:1c:f8:c7:44:3c:68:7f:fe:8c:80:04:9b:e6:20:28:
         f5:e4:95:7e:da:79:24:41:6a:fb:d7:36:17:e3:86:a9:b7:c6:
         0a:28:23:76:31:7b:03:7e:c5:b7:df:65:ba:ef:30:75:95:b1:
         fa:91:aa:e0:c6:01:48:b1:d3:2f:f6:8b:08:33:c7:79:b9:a3:
         0f:7e:6a:24:1d:fb:22:fb:fd:f2:c6:b6:76:13:5a:e1:62:b2:
         07:c8:6d:1f:9c:8d:2f:31:b2:b1:6a:54:03:72:fe:8e:5c:91:
         ae:47:be:c5:3b:42:79:ad:9c:86:af:7e:02:44:73:80:b8:b4:
         ab:c9:68:db:3e:cd:72:0a:60:5f:b8:0c:59:12:59:07:d8:e2:
         09:a3:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:02 2024 by rpki-client on console-fra.rpki-client.org