Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa
File:                     b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa (raw, json)
Hash identifier:          IAuPS8cP0zjD5Bi8X1XVWKIJNSbo6gu3mqqPb6NClRQ=
Subject key identifier:   D3:FD:E3:66:90:AD:F0:32:42:32:EC:72:DE:BA:51:DA:F3:F7:34:62
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A08D3AF8BAE9F7FF83380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:08:d3:af:8b:ae:9f:7f:f8:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=c91ee9b5-1210-4fb2-b568-ba59c6e70604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:fb:9c:52:94:28:fa:ed:27:ae:77:ec:2f:
                    7a:b3:ed:21:90:d2:df:d8:ae:5e:9a:14:40:9c:a2:
                    83:3d:9e:79:0b:b0:36:02:9a:98:71:d7:7f:71:5c:
                    81:03:37:db:ca:32:04:2d:a2:12:0d:ff:0f:f2:0f:
                    66:88:08:0b:a4:a6:39:a2:b6:39:aa:39:a5:43:4c:
                    17:02:66:0e:85:e4:6a:c8:df:27:ec:cb:a1:65:ba:
                    34:c5:30:09:0c:7b:34:99:7b:58:fa:75:71:21:f0:
                    91:b4:41:40:00:b8:7a:63:e8:fc:c5:db:65:67:df:
                    06:f8:b4:bf:ab:99:7a:a4:8e:6d:83:fb:b6:00:40:
                    53:df:9f:36:3e:8d:2b:bf:e2:3c:d1:fb:e4:a2:52:
                    f4:d4:cb:1f:fb:5a:0c:66:37:37:83:76:7f:0a:c6:
                    5f:98:9d:35:b8:25:30:e9:db:29:1e:74:a5:ba:f9:
                    8e:d1:3a:c0:27:86:b4:a2:b7:41:be:a0:e9:20:b8:
                    98:08:fb:90:2d:e8:1b:e8:16:19:09:26:d3:41:38:
                    63:84:14:74:de:95:3c:51:4c:b5:e8:2a:28:95:e1:
                    8f:3f:08:3f:ea:b6:39:46:91:0b:d2:13:da:cb:90:
                    53:ba:9d:b0:c1:f3:f1:9b:fe:f6:cb:e8:d8:b5:d3:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:E3:66:90:AD:F0:32:42:32:EC:72:DE:BA:51:DA:F3:F7:34:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:ab:d5:eb:bc:61:d1:b8:70:59:01:53:3f:1b:73:12:ae:
         46:b2:7f:2e:7d:bd:91:81:b2:7d:3a:de:aa:11:0d:94:22:22:
         d5:45:41:49:d1:6d:79:d3:82:d2:61:ed:7e:42:59:67:6d:75:
         89:14:2f:cc:73:d1:a8:8a:af:88:b4:3c:64:01:29:45:c2:62:
         c8:fb:65:ea:d9:7f:21:f9:fd:f5:05:a3:66:5d:f3:20:d3:67:
         92:cb:7a:16:bd:cd:a7:75:2e:26:90:23:e5:27:25:3c:e8:a6:
         77:aa:b5:1b:98:43:b8:15:4a:9d:5a:9a:99:19:c2:43:6a:f1:
         bd:e9:b5:fb:d9:ed:82:5e:54:a4:cd:ab:ac:2c:95:d5:00:f2:
         62:8a:31:ea:5b:14:b8:ff:f0:4f:a6:69:70:33:b9:7f:bc:38:
         84:75:9b:86:c3:30:35:f0:f1:e6:c5:72:e6:a8:dd:7c:29:21:
         16:1e:65:85:e9:4a:71:0d:d2:9f:da:ae:81:83:11:48:b4:80:
         6c:35:23:b5:d6:f8:d5:06:dc:a2:91:13:7e:9a:f5:2a:0a:95:
         df:d3:9a:29:c8:b6:1f:5b:f0:54:6b:e4:48:c6:0b:43:15:09:
         5e:82:d0:93:af:b4:ac:85:c6:ba:0f:57:a0:35:a5:6d:07:f8:
         03:29:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:17 2024 by rpki-client on console-fra.rpki-client.org