Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a43bf929-724e-354a-aed3-444e8996bead.roa
File:                     a43bf929-724e-354a-aed3-444e8996bead.roa (raw, json)
Hash identifier:          g3GcGYhL06hLYsw57E83d/EZGSSyW4t+FmLlmz0mQTA=
Subject key identifier:   A7:E3:0F:00:8D:79:69:96:73:DA:D0:85:DB:84:17:9C:CB:40:90:04
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845328467F9461CCF239FAA6C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a43bf929-724e-354a-aed3-444e8996bead.roa
Signing time:             Wed 13 Mar 2024 20:03:16 +0000
ROA not before:           Wed 13 Mar 2024 20:03:16 +0000
ROA not after:            Tue 11 Jun 2024 20:03:16 +0000
asID:                     41264
IP address blocks:        104.132.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:67:f9:46:1c:cf:23:9f:aa:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:03:16 2024 GMT
            Not After : Jun 11 20:03:16 2024 GMT
        Subject: CN=063b2e2b-2886-4b8c-8659-e4f90f4fcc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:2f:47:42:cd:ee:9a:27:16:e0:9c:ae:0d:
                    af:fc:c5:47:c7:1e:a4:70:a9:4c:60:a9:98:cf:99:
                    b6:cc:93:15:59:4e:98:d5:27:40:db:ea:50:23:a0:
                    00:c1:29:7c:f9:be:07:1d:d7:2f:9d:18:f9:59:1d:
                    97:e8:71:1d:23:26:5e:75:80:63:1d:48:13:84:46:
                    b5:c0:87:0f:52:15:f2:f7:7b:5c:2c:9d:74:89:80:
                    69:36:35:7f:60:36:1d:ba:95:b3:6c:81:05:a9:cc:
                    4e:7b:16:64:75:3b:9b:84:7c:c8:07:d7:2c:1e:30:
                    99:7b:74:f5:66:50:c0:19:21:44:b2:4f:44:4a:d6:
                    52:ec:0a:e1:7d:7a:cb:54:de:a7:b1:11:1c:18:10:
                    d1:72:38:a4:b8:27:1a:de:f2:5d:5e:66:eb:45:61:
                    d4:e6:1a:c6:9f:94:4c:63:80:36:58:47:34:a1:e8:
                    89:0d:60:bb:e8:8d:54:ed:ba:66:3f:d4:16:bd:6a:
                    79:8e:ba:c6:13:7c:58:d1:4c:73:7f:14:99:a0:1c:
                    cc:dd:32:e9:b3:ed:68:ef:6e:76:76:83:66:79:34:
                    48:12:4e:39:26:54:c7:8d:05:00:a6:f9:7f:22:1f:
                    fc:92:ec:bc:88:c8:44:15:35:7c:93:1e:a4:2e:ce:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:0F:00:8D:79:69:96:73:DA:D0:85:DB:84:17:9C:CB:40:90:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a43bf929-724e-354a-aed3-444e8996bead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4f:21:70:88:fc:1f:ae:97:26:f2:6f:dc:dc:23:4f:de:39:
         80:19:2d:11:19:a3:14:ca:57:ed:7f:78:88:ed:45:85:2a:31:
         5a:bc:26:f8:dc:cf:7e:f0:14:a2:ae:8a:0d:fe:e5:e8:42:52:
         70:a5:a4:e3:a5:e2:2b:15:18:38:9c:57:ee:73:74:52:3a:98:
         1e:c5:59:4f:1f:92:ef:e1:6d:ce:fa:4e:78:fd:86:0e:5c:ab:
         47:e9:40:7c:30:f2:27:f9:9b:46:32:a4:4e:a5:a8:9c:9a:54:
         80:67:e5:b7:99:99:50:49:d0:3b:a2:f0:62:ac:17:85:a4:8d:
         46:ca:87:c5:e7:1e:a4:24:2c:e4:f5:55:1a:f7:01:39:93:b3:
         9b:4e:a6:3c:30:e3:5e:9c:27:e7:ff:6b:a9:12:c6:ee:fc:41:
         09:79:8c:1a:24:1f:16:7e:80:ce:79:20:fd:3b:9e:44:f6:e4:
         30:55:53:e8:5e:ba:96:d0:a5:c5:89:f2:c8:aa:15:93:d7:01:
         93:b5:8d:c3:e9:db:0b:48:97:0a:8a:82:26:2f:a1:3a:6a:65:
         48:60:b0:45:bf:56:0d:b0:8b:e5:f9:3e:37:7c:97:22:5b:95:
         be:3e:aa:ff:fc:2d:e7:2a:9e:b7:1d:8e:95:42:19:5b:83:cc:
         99:26:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:03 2024 by rpki-client on console-fra.rpki-client.org