Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
File:                     b1e59867-4b4b-3695-8339-a58015ae1912.roa (raw, json)
Hash identifier:          OLHm7sLk4tvsdlTWp55Br8w+lBVCrx7BMbKgwlDXdXI=
Subject key identifier:   D9:D5:AD:76:88:EA:3C:02:00:32:63:6E:44:64:75:D3:C7:AC:82:B2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847CFD4BE0168849B46E6E12980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     41264
IP address blocks:        104.132.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:be:01:68:84:9b:46:e6:e1:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=9b7d79f8-50bf-4aae-801b-264b3ca7112e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:91:54:9e:0c:09:97:cd:64:6a:00:4f:2a:
                    13:2f:7c:a3:0a:c5:55:95:94:a2:1e:15:13:a4:bd:
                    30:1c:42:73:c4:23:2a:0d:ef:62:de:36:f9:e7:a3:
                    17:21:44:fd:24:21:c0:86:5b:6d:9e:a6:60:f9:31:
                    28:2a:1a:26:bf:13:ac:da:37:fc:36:c5:73:61:d9:
                    57:95:b5:f2:34:e0:3b:e9:04:7a:12:a7:b2:49:cf:
                    ba:5d:39:c2:e6:5e:61:0e:d2:8b:bd:bb:48:33:25:
                    70:1e:3b:cd:8f:3f:71:90:1e:33:44:8c:b6:9e:eb:
                    e0:cb:54:f8:2d:b6:28:26:bb:22:8c:46:51:4f:73:
                    eb:87:25:34:ac:a8:e1:c9:0b:2e:3a:99:0c:7a:de:
                    a8:b0:68:73:71:67:e0:34:0f:cb:a2:14:1d:fd:78:
                    53:4c:31:c9:a9:b0:a6:05:4f:c1:52:73:bf:fb:df:
                    17:a7:de:86:04:74:d8:da:dc:58:34:8a:a5:5e:1a:
                    51:34:0c:95:eb:08:0e:29:fe:0e:9c:34:f2:7e:ab:
                    bc:09:a9:36:85:dc:7f:59:bc:88:21:47:c6:a2:c1:
                    2d:34:80:de:9a:e9:70:f3:b2:7a:e6:f8:a7:61:e2:
                    e3:04:55:cf:4e:52:7e:f9:22:c5:f7:79:e0:1d:35:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D5:AD:76:88:EA:3C:02:00:32:63:6E:44:64:75:D3:C7:AC:82:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:50:a7:24:88:77:e9:4a:c7:ee:31:06:d5:cf:45:6a:e2:d6:
         f2:2a:d1:d9:b7:70:01:fc:f5:07:b9:18:5b:9d:bc:7a:05:0f:
         97:c0:77:35:bf:88:25:24:36:78:ee:50:c7:85:b2:36:86:7c:
         e2:d4:46:3d:32:a8:10:6f:cf:04:a4:9d:66:c8:7b:d3:c1:49:
         16:cc:3e:c2:d6:51:29:c0:db:16:40:aa:65:c3:ac:f8:b0:32:
         9d:36:b2:40:87:c8:e9:c5:63:73:66:c2:fa:99:e5:a9:cf:fc:
         c5:89:ae:b0:c0:08:17:9b:63:08:d7:c2:f4:56:50:89:d2:26:
         38:16:13:e5:1d:02:51:88:81:f6:ce:fa:84:58:08:fa:7a:ed:
         a0:e6:0e:53:23:c2:9f:95:b4:0f:cf:a5:f2:d8:53:22:75:f2:
         7f:cb:17:3d:66:16:22:2f:64:38:58:21:99:89:e9:7b:09:70:
         46:7f:6d:1c:77:dc:62:21:71:9b:bd:57:44:cb:bd:cc:ae:65:
         3e:e8:d5:0b:4a:48:ab:2a:f4:6b:8d:80:64:47:bc:70:bc:8d:
         06:d1:d4:64:9b:66:dc:dd:d9:a9:1a:e6:63:f2:7c:5e:b7:6f:
         8d:d1:99:e2:13:60:d8:fe:85:30:9a:50:72:70:02:5b:5b:19:
         ea:3f:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:54 2024 by rpki-client on console-fra.rpki-client.org