Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab000362-7bac-365b-8283-3f4f5c952b94.roa
File:                     ab000362-7bac-365b-8283-3f4f5c952b94.roa (raw, json)
Hash identifier:          BRXP79q22V4pjQyFG44qZNrTRnntZKqLXXl9NVz3qWg=
Subject key identifier:   A4:C9:9B:23:05:E8:8C:24:33:F7:B1:C4:6B:F1:06:CC:80:BD:7E:0E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585C9DD31AC9B0CC81303A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab000362-7bac-365b-8283-3f4f5c952b94.roa
Signing time:             Thu 14 Mar 2024 21:53:29 +0000
ROA not before:           Thu 14 Mar 2024 21:53:29 +0000
ROA not after:            Wed 12 Jun 2024 21:53:29 +0000
asID:                     41264
IP address blocks:        104.133.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:c9:dd:31:ac:9b:0c:c8:13:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:29 2024 GMT
            Not After : Jun 12 21:53:29 2024 GMT
        Subject: CN=9ffa65eb-8f4f-455c-8ca2-3636af6653ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:07:c5:a9:1f:a4:18:d4:44:e4:c8:08:aa:
                    ce:60:a4:68:b4:2e:ab:fd:da:a4:1a:23:5b:30:4a:
                    61:59:c0:34:f8:5f:12:a6:0d:32:f3:33:40:2d:62:
                    e1:61:08:a7:79:8f:34:68:e7:bd:a1:b3:2d:64:54:
                    a2:24:f5:b8:b4:43:7d:8c:96:08:f7:65:86:33:2c:
                    65:1d:ef:79:8c:ac:73:a6:49:23:51:5e:89:4c:98:
                    e6:6b:29:47:9e:e8:7c:1b:14:6a:f4:03:c0:64:a7:
                    e7:1c:ba:94:23:50:41:08:55:55:ca:73:f0:33:f6:
                    62:a8:96:64:f0:d1:64:9c:60:ec:05:d6:23:cd:8e:
                    e5:69:51:d2:7f:aa:b5:96:10:36:2c:61:fa:f5:d4:
                    6a:3a:b6:ee:a2:5c:22:48:3d:4e:9f:70:73:79:71:
                    d6:88:dd:34:dd:6e:87:a8:13:fe:a1:7a:d7:bb:15:
                    00:c4:16:4b:da:28:10:40:20:b3:d3:b6:39:ab:b0:
                    05:f0:0d:1e:70:13:c7:da:b2:c5:4f:1d:0e:f2:a1:
                    bc:d2:ad:ef:fe:42:bf:ea:0b:a3:8d:ea:ad:5d:18:
                    27:42:9c:46:7d:e7:d3:51:cb:31:90:7f:11:5b:ad:
                    cd:4e:45:f7:36:79:72:cb:9c:39:13:1d:36:8d:76:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:9B:23:05:E8:8C:24:33:F7:B1:C4:6B:F1:06:CC:80:BD:7E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab000362-7bac-365b-8283-3f4f5c952b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:f3:a2:9b:15:c8:65:56:24:58:63:d0:63:9f:08:af:b6:
         0a:b3:48:26:a3:9f:6d:5e:1f:29:b6:e6:b0:82:55:5e:3f:d5:
         5f:c5:d8:a8:f1:6c:3b:43:ea:c4:e6:fd:6c:06:5d:78:44:b1:
         fe:76:22:64:cc:02:5b:18:0b:81:3b:99:04:9e:20:8f:c3:e6:
         a9:85:b5:7f:cd:74:54:5c:bd:81:6f:cb:7a:f3:e9:ff:47:59:
         47:7c:f6:26:49:42:7e:98:2b:43:e3:16:a1:88:88:c5:a1:be:
         7b:e9:b4:af:f9:ed:c0:d5:0f:9b:96:41:bd:c7:a0:e0:ee:3c:
         61:d9:b1:94:0b:07:ce:d8:9f:28:db:cb:c1:34:78:a4:8d:0f:
         42:6a:e7:cc:6f:08:e5:83:f6:28:29:38:16:65:dc:d5:92:66:
         00:e3:df:9e:3c:6a:ff:f5:ab:e9:18:86:ef:54:91:58:e2:74:
         10:4e:91:13:f2:61:cd:45:b8:02:a5:34:03:2e:9e:ba:1c:f6:
         eb:0e:bd:02:fc:74:22:f9:18:c3:7e:40:da:29:fb:8e:8b:36:
         61:a2:43:9f:61:bf:38:63:b7:e2:09:c8:7b:14:8f:48:cc:b4:
         85:57:5e:93:60:8f:3b:82:56:c0:4c:ba:cd:60:88:57:d0:45:
         66:7f:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:33 2024 by rpki-client on console-fra.rpki-client.org