Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b39492ba-52b0-3ba3-89ef-f8444499439a.roa
File:                     b39492ba-52b0-3ba3-89ef-f8444499439a.roa (raw, json)
Hash identifier:          T0foKIwPVCVp6BW68d8/OjoHE2DcjnceWmwcoGjq4nY=
Subject key identifier:   F5:34:89:EB:41:73:29:C4:7C:F0:97:F6:F4:71:45:30:29:41:F5:A1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585686225A7F2FB323B9200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b39492ba-52b0-3ba3-89ef-f8444499439a.roa
Signing time:             Thu 14 Mar 2024 21:52:43 +0000
ROA not before:           Thu 14 Mar 2024 21:52:43 +0000
ROA not after:            Wed 12 Jun 2024 21:52:43 +0000
asID:                     395973
IP address blocks:        104.134.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:68:62:25:a7:f2:fb:32:3b:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:43 2024 GMT
            Not After : Jun 12 21:52:43 2024 GMT
        Subject: CN=ac623dcc-38a5-4727-b718-844b42485226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:92:2f:b4:14:90:ec:23:29:99:58:d5:36:
                    54:98:39:9b:65:69:f6:b5:1f:89:3c:e9:31:ac:88:
                    a5:3d:27:97:6b:36:0a:90:5f:77:12:8f:d3:40:e1:
                    06:18:dc:41:e2:87:97:0b:74:4d:28:07:cb:6f:9b:
                    06:82:3d:b6:8b:06:e1:39:a7:06:8a:f1:77:20:31:
                    7f:86:fd:04:9f:6d:ab:36:53:ef:fd:60:3a:d9:5a:
                    9a:c1:e3:e9:62:9d:29:ce:6c:07:36:71:ed:3f:ff:
                    e2:ed:14:c3:7b:95:ff:41:51:91:b6:21:29:c6:06:
                    c2:f4:66:05:3c:b6:ac:b2:d4:60:db:9c:df:4a:9a:
                    f5:2e:1e:f2:3e:cd:c7:eb:1d:fd:22:a4:ba:1f:20:
                    6f:8e:e4:ef:17:f2:76:40:02:23:d6:0a:62:4c:68:
                    f8:04:a4:30:8c:b5:81:55:95:cf:9c:a4:98:93:ff:
                    a0:94:7f:38:7f:97:c2:37:9c:e8:df:8e:df:f6:eb:
                    e3:bb:0a:28:81:ce:e7:66:96:7f:a3:c9:58:ce:b8:
                    24:4b:04:a3:7f:56:c6:6b:6d:b7:96:6d:2f:cd:df:
                    ce:29:d4:35:94:eb:98:76:83:f2:6e:11:75:cc:e2:
                    44:7b:2b:d3:22:30:f6:69:71:9c:41:2a:59:fc:e2:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:89:EB:41:73:29:C4:7C:F0:97:F6:F4:71:45:30:29:41:F5:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b39492ba-52b0-3ba3-89ef-f8444499439a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:01:de:ab:2b:79:2f:0c:fb:a5:29:f4:a9:ea:1e:5d:56:
         0b:cc:d7:8c:2c:2c:94:75:a8:08:e9:1a:cf:b0:a7:95:4c:6c:
         bc:64:18:b7:41:58:80:ce:e5:0c:24:bc:76:2b:1f:23:fb:da:
         62:40:d4:07:67:39:08:e6:4b:d9:52:45:50:85:f2:0b:ad:09:
         fa:79:6b:4a:61:40:40:aa:c1:c0:ab:98:df:7e:90:14:a0:43:
         14:75:be:a4:0c:51:be:95:26:95:30:6f:bb:2e:41:cb:25:53:
         9b:56:0c:b5:18:a2:87:d2:6d:1c:17:57:4c:89:03:68:7c:e5:
         16:d2:91:f9:9b:ae:af:b2:8c:49:21:3c:23:b1:ae:0c:d8:8e:
         02:da:e3:73:e4:3f:23:84:cb:ba:e9:8a:0d:19:92:74:ef:9b:
         b9:bf:9f:c6:6b:94:b6:25:b9:f2:71:c3:95:16:16:66:ad:d4:
         f2:f1:68:eb:dd:80:38:86:60:16:3d:ca:67:51:38:92:df:cf:
         23:22:ba:4f:ac:6b:34:4f:83:1d:3e:f5:7f:69:33:0d:38:6d:
         84:26:e9:e9:72:20:2a:c4:79:27:3b:13:70:cd:ac:cd:44:a8:
         e7:18:73:08:e7:dc:aa:fc:e6:51:db:59:d5:6a:71:4a:99:5e:
         86:12:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:09:50 2024 by rpki-client on console-ams.rpki-client.org