Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5ee8072-17e7-3d01-b6bb-380929517427.roa
File:                     b5ee8072-17e7-3d01-b6bb-380929517427.roa (raw, json)
Hash identifier:          DfKrLxXSf3/qZOIoxwHPqbfid6TusGHU0eOl6O3Y4e0=
Subject key identifier:   9E:C6:4B:01:23:CD:26:65:2E:B8:A1:0D:C0:88:CA:91:AC:B3:93:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D29F7D2897A05BE9927A2900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5ee8072-17e7-3d01-b6bb-380929517427.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.132.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:7d:28:97:a0:5b:e9:92:7a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=414483f5-c968-46e7-8838-8f3bb02f2718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:05:f4:e1:6f:68:60:84:74:d8:85:9b:05:
                    eb:e4:5d:c2:c6:6e:30:65:2c:f8:e2:48:98:9b:be:
                    91:8a:75:5e:c3:e2:06:51:a8:3b:02:ac:42:52:a5:
                    d9:08:15:d0:c4:c7:aa:33:d7:c6:0e:a0:c1:09:1d:
                    03:c5:ed:23:46:19:c5:b5:23:11:b9:26:e1:e4:7d:
                    88:e8:e6:a9:b2:ac:07:68:8f:e3:0c:75:a2:19:2a:
                    8d:1d:8b:87:f3:70:45:01:0a:f3:e7:f0:df:cf:69:
                    ec:7d:7e:7a:e6:ac:94:d7:43:9b:e9:6e:7f:0f:f1:
                    b5:73:20:68:57:b8:1d:27:e9:90:1f:b2:79:36:87:
                    c5:d5:11:60:8c:b2:98:59:33:ae:a0:3f:97:e3:79:
                    8a:a8:1b:31:50:f2:b1:ed:59:f8:2e:59:3e:16:06:
                    74:cb:9d:3c:a2:dc:ee:9a:c9:17:8d:8a:22:8b:46:
                    d0:1d:2c:e9:67:a3:60:6e:e3:76:4d:3f:46:6f:31:
                    0c:a5:c9:f8:40:48:eb:4f:e8:fc:47:c0:62:b3:d9:
                    2c:31:72:5c:06:0e:28:de:33:5b:fa:54:c7:a6:72:
                    73:c2:39:08:1e:c4:7b:8c:6b:9b:89:31:f7:f5:ed:
                    61:6b:17:1a:39:82:2e:a7:69:e2:49:b9:ea:57:e9:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C6:4B:01:23:CD:26:65:2E:B8:A1:0D:C0:88:CA:91:AC:B3:93:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5ee8072-17e7-3d01-b6bb-380929517427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:87:a5:cf:31:5f:bb:43:22:38:fe:b4:9f:f0:cd:8e:53:30:
         62:a4:a6:f1:b3:6d:1c:5b:84:75:89:59:28:7e:3a:88:d6:e3:
         87:94:5f:dd:22:27:dc:39:9a:ef:6f:c8:13:30:81:c2:93:d2:
         6d:b3:ea:8d:8c:9b:be:3c:05:d0:e8:47:74:1a:3a:0f:df:e5:
         f4:b5:43:43:f1:88:29:4a:3e:a3:bc:b3:62:01:0a:74:99:4b:
         f2:17:2a:b8:2f:ce:18:75:b0:08:0e:a1:9e:d5:36:1a:d1:cd:
         c9:53:45:e8:d7:06:cd:d9:a9:fa:4f:33:7c:e2:40:8a:a3:50:
         16:24:b4:c6:81:74:e8:40:53:be:60:76:3c:9d:25:19:75:c4:
         3c:fe:61:5d:a7:27:64:03:c2:3c:ad:51:e1:3d:de:36:5a:67:
         14:ea:ec:0a:c5:b1:98:7f:ef:d5:37:fe:b6:b8:20:0b:c9:04:
         62:7f:47:a4:5c:96:db:34:fd:0d:8f:e4:80:a9:cc:af:b5:29:
         de:29:9c:bc:4e:b9:36:9f:b5:b5:d3:90:08:18:0d:55:04:a7:
         c4:32:62:01:24:60:5f:15:88:4a:9f:95:45:c0:a2:5d:33:e6:
         6f:4c:c2:a7:77:73:d6:a3:ef:a6:f5:e8:93:9b:33:bf:9a:80:
         ab:b6:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:54 2024 by rpki-client on console-fra.rpki-client.org