Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
File:                     a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa (raw, json)
Hash identifier:          h8K7PYasjIcSaxm061aAFWJPw/2CF5nQKXlyfN3MLFk=
Subject key identifier:   AA:81:EA:60:35:A9:BB:73:AB:A6:A5:8E:86:B9:78:CF:A4:4F:F3:5E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0D5E7C1B85A1AB987E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:0d:5e:7c:1b:85:a1:ab:98:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=635dd497-b2b5-467a-976d-b37ab7bd3ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:04:4a:ed:17:65:5a:fb:96:48:dd:4c:25:51:
                    da:70:dc:19:26:3b:57:cb:34:2e:56:0f:23:14:14:
                    61:e9:9c:cc:26:a4:85:1c:89:19:b7:a7:e2:d8:1f:
                    0a:a0:58:dc:84:49:d3:d6:9d:e4:14:ba:5c:20:bb:
                    71:ad:aa:ea:ab:52:81:f5:04:a6:0d:ed:a9:5d:d4:
                    14:54:e4:af:54:d3:c5:80:b3:dc:2b:79:8e:c3:2d:
                    24:64:5f:b4:2f:8c:6f:aa:f1:12:03:4c:71:b3:1a:
                    9d:fc:d0:b3:42:21:b2:63:dc:d5:ff:f8:a6:75:3c:
                    95:22:b6:d9:db:5b:3d:5c:97:92:f3:2c:09:39:03:
                    24:96:90:0d:f0:7f:ed:70:01:e9:1f:57:d8:05:b9:
                    6d:ae:33:1b:bb:59:19:b2:16:2d:4d:79:ed:91:2c:
                    43:90:0d:79:69:d0:f1:ca:9a:73:fd:07:90:e7:2b:
                    9e:a3:e6:dc:1e:fc:13:01:0b:b3:b9:ea:b5:05:1d:
                    7e:c5:1d:f7:8f:ed:58:a3:b5:41:bc:be:d8:e4:34:
                    40:bd:41:26:6f:2e:fa:53:c9:58:f9:71:f5:58:e3:
                    17:dc:cf:d9:2e:1f:d0:33:3f:56:4b:0c:35:57:2b:
                    36:e7:a3:44:8b:50:2a:47:cf:d4:d7:fb:8e:3f:da:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:81:EA:60:35:A9:BB:73:AB:A6:A5:8E:86:B9:78:CF:A4:4F:F3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:f9:02:73:c4:5d:95:10:58:e5:02:85:09:41:af:bd:f1:
         4c:02:66:96:ce:ec:ad:d5:13:b4:5b:4d:eb:b9:26:55:c8:8b:
         80:84:91:30:f8:1c:18:4e:13:12:f4:04:f8:df:6c:f6:92:de:
         34:1d:1a:6f:bf:18:a1:10:3b:55:68:b7:51:46:46:4d:fb:4b:
         51:ae:d8:4b:a9:b5:e1:42:92:b5:36:ba:e9:1d:90:fd:a6:24:
         79:0f:bb:db:f0:b7:5d:73:52:5a:ac:c9:76:d8:23:96:c2:17:
         95:48:9b:04:9d:db:21:ee:0d:a3:d5:4e:37:26:26:96:b2:b0:
         ca:71:a1:55:20:32:cc:28:89:65:19:98:56:1c:5f:db:06:47:
         c8:ab:54:7b:50:d2:c1:86:61:e5:64:a0:d6:9c:8d:66:2f:b9:
         93:5b:01:ad:81:b1:97:f1:08:f5:f2:6d:63:ad:76:cc:35:65:
         89:24:4a:91:e0:3f:de:ec:ec:bb:a4:c9:1c:64:b9:5e:a3:64:
         c7:a8:f4:61:01:53:7b:7f:96:37:57:33:54:a5:72:0d:39:bf:
         83:5f:59:ad:ce:d9:4e:55:e5:2d:62:58:1b:5b:54:4a:cb:a1:
         74:07:a7:b8:7f:1a:07:26:37:7d:19:1b:53:35:a6:31:cf:3b:
         b4:7f:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:11:33 2024 by rpki-client on console-ams.rpki-client.org