Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad05f04a-f61b-3d95-8461-cce72db8edf5.roa
File:                     ad05f04a-f61b-3d95-8461-cce72db8edf5.roa (raw, json)
Hash identifier:          d3EkdzjoxSGwEbA3QOWjehVIUeW+WrEIde9SGtKAC1w=
Subject key identifier:   63:B5:C9:7F:79:48:96:AF:96:3A:14:B0:83:53:EE:3F:CB:78:2C:F0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847CFD4BD0F9ABCBA4A51F377A8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad05f04a-f61b-3d95-8461-cce72db8edf5.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     41264
IP address blocks:        104.132.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:bd:0f:9a:bc:ba:4a:51:f3:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=6a379888-3018-4f64-93a0-802c9d222805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:38:8d:71:7c:70:33:ef:cb:03:ec:8f:30:
                    be:ac:5a:77:e5:2a:35:24:2d:a9:cc:52:1f:94:1c:
                    37:ff:69:28:da:b1:77:32:e0:a1:1a:df:d0:aa:1b:
                    44:8c:15:7a:b6:fa:d4:9e:17:3d:4e:c0:52:8c:a8:
                    db:2c:52:7e:11:93:6a:34:1a:36:ad:08:b8:a0:18:
                    b1:e8:3c:14:d8:a4:12:e2:ca:81:ac:4a:8d:50:24:
                    1d:a7:fb:37:86:e0:fb:0e:d6:2c:4f:d2:c8:6c:76:
                    40:77:6b:e8:c4:a9:77:ef:e3:d4:1c:22:0e:55:63:
                    80:8c:cc:75:ed:31:af:73:d4:80:bb:81:66:9b:0b:
                    77:b7:c1:33:92:dd:79:e3:07:3e:b2:47:d0:c7:6b:
                    25:86:8d:45:e1:43:28:e5:0c:6f:b3:d4:0d:9b:44:
                    b9:89:a8:8a:01:ac:4d:5c:d0:59:d1:e7:92:06:9c:
                    2c:21:22:1d:3b:3d:95:af:7d:ab:b1:9a:32:b7:83:
                    b5:b4:93:00:86:fc:ce:8a:1e:45:cd:d5:fe:39:0d:
                    78:8a:23:73:7c:0d:bf:c8:56:cb:d6:03:02:35:ef:
                    d1:23:f8:33:70:48:de:50:61:04:78:33:29:47:aa:
                    bf:2e:5d:11:a3:a7:02:b8:f7:2a:34:90:76:f1:97:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:C9:7F:79:48:96:AF:96:3A:14:B0:83:53:EE:3F:CB:78:2C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad05f04a-f61b-3d95-8461-cce72db8edf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:00:57:8e:90:b3:6e:ee:51:ad:22:f5:0a:fd:f2:7f:64:d9:
         65:70:62:7c:92:d0:8f:3d:fa:79:46:a4:a6:8a:6e:18:d1:2b:
         ff:f6:80:7c:f8:a3:09:52:f1:fe:17:d5:56:26:f3:52:2a:cc:
         42:4f:29:f7:ac:df:fc:e2:6d:40:8c:c9:7b:68:e3:d6:73:39:
         d9:5a:0d:7f:fd:64:49:ac:9b:63:f5:db:9b:08:88:fb:05:3e:
         11:cb:8d:39:99:bc:e2:58:4d:bd:13:32:8b:0b:20:c9:cd:3d:
         d3:e7:8e:cc:e7:03:0d:91:34:f3:6f:69:8a:e2:95:fb:0b:4c:
         47:61:b9:ce:1c:90:e0:10:9b:54:d8:e8:6a:52:44:6d:36:89:
         dc:ee:60:be:b7:37:eb:4e:08:80:29:b6:4e:e9:99:fe:9d:18:
         87:fa:f2:07:be:27:6e:66:15:09:49:ad:81:c9:dc:f1:8d:7e:
         63:28:22:46:1c:5f:67:4d:a5:f2:f0:3f:4b:62:78:bb:79:cb:
         0b:d3:60:65:2d:69:fa:dc:cc:ad:c0:9f:66:58:ba:9c:38:09:
         c1:33:5b:78:ac:84:35:48:2f:1d:9a:28:40:09:fb:f0:fb:82:
         f4:22:a6:50:09:23:f6:a2:6a:5d:e7:96:3c:d1:9b:24:3f:d1:
         f1:e9:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:17 2024 by rpki-client on console-fra.rpki-client.org