Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a4529884-3dd2-353f-af5f-6f09843cd757.roa
File:                     a4529884-3dd2-353f-af5f-6f09843cd757.roa (raw, json)
Hash identifier:          ci/+jWC0ghlnD6DR6kMaqAMx8AqwYARzNCv8Iiuj/DY=
Subject key identifier:   24:26:0B:BC:36:32:33:EB:07:97:72:F3:18:20:38:7C:08:5C:0D:E6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B7AE85207FFB07F856DC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a4529884-3dd2-353f-af5f-6f09843cd757.roa
Signing time:             Mon 18 Mar 2024 22:07:54 +0000
ROA not before:           Mon 18 Mar 2024 22:07:54 +0000
ROA not after:            Sun 16 Jun 2024 22:07:54 +0000
asID:                     41264
IP address blocks:        104.134.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:ae:85:20:7f:fb:07:f8:56:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:07:54 2024 GMT
            Not After : Jun 16 22:07:54 2024 GMT
        Subject: CN=b5415882-e5b1-4565-9080-73bea6307909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:bc:1c:e4:36:22:3d:2d:cb:ec:06:d5:08:
                    9a:a6:8f:22:a5:31:8e:2f:26:90:0d:e2:56:a6:79:
                    18:7d:8a:e9:79:61:26:0e:ad:c2:64:10:1e:9e:46:
                    bf:7f:d1:ac:9d:81:9d:32:12:59:89:05:e2:1e:d1:
                    9c:42:59:81:f4:23:dc:bc:57:90:34:1f:6b:48:c6:
                    73:8b:23:49:b7:91:53:21:32:99:33:13:8e:9f:b7:
                    9a:c0:67:a5:38:81:69:5b:c9:30:e6:f1:af:90:7f:
                    ef:7c:ae:e7:e7:89:b8:cb:b6:0a:10:b2:be:42:25:
                    d8:c2:2e:d6:66:5a:61:70:04:52:62:50:25:94:4b:
                    4f:96:df:6d:64:51:06:32:d8:87:50:8d:07:80:0c:
                    23:e0:f1:4f:fc:4a:69:f6:f8:27:38:82:6b:7a:4f:
                    68:8c:ba:27:4c:db:5c:17:b3:a0:7a:7a:f1:24:2f:
                    56:4d:d7:83:93:d9:21:ba:ae:c0:69:c3:06:b3:3a:
                    70:69:69:a9:1a:41:c6:51:a5:b6:2d:e0:45:f2:7c:
                    81:59:49:22:c2:1e:ee:9a:67:2c:b5:7c:34:e4:d5:
                    01:d6:7f:2b:f2:d1:01:74:a2:b6:8d:c4:03:3e:14:
                    bc:94:f6:f3:66:44:60:b9:a4:49:f7:55:78:0f:23:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:26:0B:BC:36:32:33:EB:07:97:72:F3:18:20:38:7C:08:5C:0D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a4529884-3dd2-353f-af5f-6f09843cd757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:00:64:7a:1e:02:39:d9:98:16:29:33:a6:a7:ae:f0:b7:
         ef:1b:e2:58:78:38:73:2e:f0:db:81:95:8b:c4:19:22:10:02:
         9b:36:f8:72:d1:54:bc:57:d5:78:5e:14:80:9c:b2:6b:f9:e1:
         de:cc:82:eb:1c:23:d5:9f:d3:e2:72:e6:1f:62:c7:22:36:9c:
         aa:e9:d8:2e:a3:c8:cc:a8:c8:6b:68:1a:e4:ef:41:46:30:57:
         5e:f3:5a:c9:1d:d2:89:cd:89:61:d1:82:0a:d2:2b:6e:d7:3f:
         9a:63:fe:ee:48:57:77:60:03:b8:e9:1e:cb:fe:77:16:47:77:
         35:61:cb:a5:e6:cf:a1:4b:0b:04:48:93:17:fd:51:6b:b6:a7:
         ae:a5:4c:23:3d:da:5f:0f:6d:b6:43:dc:de:cc:c8:b9:ff:ca:
         f6:8c:e6:76:a7:7e:23:3a:58:d0:47:b8:81:c0:1e:1b:bd:50:
         21:6e:66:d3:f8:8b:08:d8:d8:00:8e:05:08:cb:ae:c6:62:d3:
         aa:7f:c6:67:38:7f:11:c0:14:3a:3f:12:9d:33:0b:c6:06:6f:
         71:c5:c4:c1:7b:66:9b:bb:2a:1b:0b:b7:34:5e:2d:b3:df:6a:
         79:67:3a:28:f9:58:77:fa:26:18:13:6f:3a:2e:c9:5c:60:21:
         5e:43:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:39 2024 by rpki-client on console-ams.rpki-client.org