Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa
File:                     b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa (raw, json)
Hash identifier:          FHKA3VPGvgOtmq3SjQr4HDj0YqpfFxoIv9Xc4GZxGg0=
Subject key identifier:   B9:15:20:D9:9B:65:DD:37:48:34:81:02:C2:65:9C:33:08:0F:9A:1A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585FEC02F207BFD032501C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa
Signing time:             Thu 14 Mar 2024 21:53:54 +0000
ROA not before:           Thu 14 Mar 2024 21:53:54 +0000
ROA not after:            Wed 12 Jun 2024 21:53:54 +0000
asID:                     41264
IP address blocks:        104.133.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:fe:c0:2f:20:7b:fd:03:25:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:54 2024 GMT
            Not After : Jun 12 21:53:54 2024 GMT
        Subject: CN=4a157865-0a98-406a-a8b9-e057c0ebe2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:92:df:e3:00:70:71:d1:0e:9d:5c:a8:00:
                    d9:9a:47:e4:55:4f:eb:f2:07:ba:7e:fa:7b:f5:16:
                    2a:3d:12:47:09:03:59:23:35:c9:cd:48:bf:8e:ea:
                    7b:3d:a3:80:0b:a7:9a:f5:57:5d:12:c1:0b:36:60:
                    f5:50:a1:2f:e2:28:1a:5f:bd:4a:5a:10:42:4a:c8:
                    69:28:db:ce:d4:b6:6d:1e:ce:7c:74:3b:6b:3c:5d:
                    16:1a:7b:b9:7a:75:95:68:65:59:91:42:9e:c6:42:
                    23:de:e8:85:0e:3b:73:be:ef:41:61:dd:91:2c:b3:
                    c8:d4:f5:e7:b8:be:b2:79:28:a0:eb:10:42:b1:84:
                    d8:e0:56:b3:8b:f2:50:90:fb:7e:e8:4d:54:d7:40:
                    5f:a5:ff:1d:31:c3:99:23:a3:a9:26:1e:38:c4:0d:
                    7d:9e:a6:b8:86:e2:e6:8e:25:94:24:92:78:2a:d2:
                    76:0c:dd:a2:f1:16:e9:f5:f8:d9:bb:ae:d4:29:b2:
                    6f:1b:da:02:23:d5:20:ea:fd:ef:8b:81:b9:4f:23:
                    9f:11:cc:40:59:15:29:ed:83:20:73:ab:b2:1f:13:
                    94:6a:69:0a:f0:4a:95:aa:37:10:ec:30:96:f7:3f:
                    f3:64:58:46:6a:8b:4a:91:6e:bf:08:a2:1e:a3:84:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:20:D9:9B:65:DD:37:48:34:81:02:C2:65:9C:33:08:0F:9A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:be:5b:4e:30:0c:89:e3:54:7b:ff:6a:0f:2c:ea:6e:3e:52:
         af:d2:f3:19:4e:84:1f:04:df:3b:11:45:1e:03:2d:76:52:7b:
         5b:de:49:64:bb:1f:04:64:e8:08:b8:8f:ae:bc:00:74:d6:31:
         ad:30:ca:b9:25:5f:70:cb:e0:63:4e:2d:66:db:b1:5a:fb:c4:
         f7:7e:d8:7e:90:79:ec:89:ce:a4:d6:65:27:b6:6c:cc:4a:f3:
         87:cf:ec:e5:c1:9b:2d:46:92:b2:3d:5b:bb:50:67:62:d6:19:
         0b:ea:17:75:ef:01:92:f7:06:ad:ae:84:06:3e:b1:4e:a2:fb:
         e0:05:01:25:06:c8:2e:e6:5b:7b:be:ff:82:d6:7b:23:fa:92:
         59:55:06:6f:91:1d:7d:7b:c2:98:08:2d:4f:07:76:19:e0:80:
         70:95:85:47:fa:32:f1:68:83:ca:15:39:c8:f5:12:57:0f:1d:
         a7:1f:4c:02:3b:66:32:ab:92:1f:bc:a2:29:fc:8b:47:d7:9f:
         c4:79:d8:7a:46:d9:39:49:99:d6:6d:ed:2c:28:e3:8a:aa:4a:
         52:c5:39:35:ae:4b:de:a5:41:38:8e:93:71:a2:73:4c:a6:f1:
         d8:e4:d2:3d:15:e9:5a:a0:69:df:6c:3f:83:41:c6:aa:8d:c0:
         2c:38:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:05 2024 by rpki-client on console-fra.rpki-client.org