Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b327f7af-7f55-34fd-a593-db805d4b22ff.roa
File:                     b327f7af-7f55-34fd-a593-db805d4b22ff.roa (raw, json)
Hash identifier:          KTpTwr44btQBkTA1e3/LbtfTGfsS9cZ2SXeSttSTFRg=
Subject key identifier:   16:3F:EC:CA:B0:5B:01:73:49:5F:C8:5A:7D:6F:F9:8F:51:43:57:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1115521ED5709383A280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b327f7af-7f55-34fd-a593-db805d4b22ff.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:11:15:52:1e:d5:70:93:83:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=1f8ce162-8103-4dea-9585-f34a1bd093ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:9a:ed:82:2b:a4:1e:db:34:92:a9:0c:25:
                    b7:33:ad:b4:05:ae:12:a6:d9:c8:c8:c7:dd:04:36:
                    7d:b9:ec:b8:da:a0:13:99:c4:52:a6:90:7b:87:25:
                    10:9e:5d:92:1f:05:07:bc:01:43:d8:8a:d0:d1:43:
                    03:01:5e:c8:9b:a9:38:17:9e:7a:d3:34:ac:44:7d:
                    08:d2:1e:7d:02:f0:8f:a0:c0:5f:c4:3a:b2:3c:d3:
                    5a:c6:85:74:21:8f:cb:86:93:a5:e8:fa:b3:6c:a4:
                    b2:3e:e7:ee:e2:f8:47:30:45:8c:4a:28:42:a8:01:
                    87:7d:36:03:a7:6c:27:04:ba:bb:d0:7a:49:ee:ba:
                    0a:2e:8e:51:2d:d8:e9:ac:13:aa:45:a7:b4:04:c2:
                    f1:6d:76:0a:2a:1a:ad:62:ce:c5:d1:be:6d:d6:ea:
                    a2:3e:6b:e9:d2:04:1b:d3:c8:ae:0c:7a:46:de:bb:
                    2f:1c:9d:7c:1e:5d:f7:6e:21:4a:74:db:35:d4:82:
                    29:1b:ba:ec:43:bb:ce:53:9b:8a:01:04:67:ec:04:
                    ea:54:b7:67:ab:f4:6d:a6:e1:ec:45:b7:09:a7:86:
                    92:94:2b:d0:b5:20:a9:63:50:4e:f7:b5:ac:e0:b7:
                    60:a3:33:38:be:5c:fb:83:cc:8e:47:b7:b9:f6:10:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3F:EC:CA:B0:5B:01:73:49:5F:C8:5A:7D:6F:F9:8F:51:43:57:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b327f7af-7f55-34fd-a593-db805d4b22ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:97:99:82:37:66:94:1c:ad:0c:cd:86:2f:a8:b4:65:1d:
         61:b4:a9:89:83:ef:4c:29:a3:e2:9d:8a:f9:21:ef:65:11:ff:
         03:b5:5d:fa:73:ac:93:c3:b3:13:aa:8c:14:2b:72:96:4a:d2:
         fa:c3:f7:91:a2:d2:a5:ed:31:e9:86:78:6b:68:13:2e:79:db:
         c3:24:75:e1:56:ed:67:87:9d:1b:1b:55:43:9c:32:19:5a:cf:
         df:fb:c1:5f:fe:8b:b0:8d:d1:19:4e:3c:b2:ef:3e:42:31:50:
         56:91:40:cb:0a:4c:49:d8:cc:31:5a:2d:12:fd:e5:a8:5b:fb:
         30:96:53:60:28:71:12:8e:82:df:0f:5e:99:c4:cd:28:bb:08:
         23:9f:c7:04:06:29:b0:a3:3c:2c:c8:ba:e2:9a:de:b4:7e:c7:
         2d:bb:1e:03:a7:cf:22:e7:5a:1d:55:04:05:02:9c:db:c9:06:
         90:a5:96:67:96:d4:f9:0d:ea:40:9d:61:a0:fc:8f:df:85:58:
         30:f2:6d:67:dc:08:18:f0:14:14:73:82:aa:19:4f:25:8d:1c:
         ea:51:dd:82:f0:6c:17:55:34:c5:52:24:6b:1b:79:64:5e:4e:
         f3:02:6a:8b:83:16:68:02:e6:41:bf:d5:7e:28:de:2b:0e:98:
         26:20:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:57 2024 by rpki-client on console-ams.rpki-client.org