Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc632c55-ac53-390e-af0c-fd37cbdaac1f.roa
File:                     bc632c55-ac53-390e-af0c-fd37cbdaac1f.roa (raw, json)
Hash identifier:          o2TfE/O/APykLfsAysJG88jhbdhkOLkd1Lc0XzbpADA=
Subject key identifier:   9F:D8:2C:A3:3E:11:60:B5:1F:5E:B5:42:20:AC:AB:14:8F:19:1F:71
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847CFD4BE9792E7A472A8653900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc632c55-ac53-390e-af0c-fd37cbdaac1f.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     41264
IP address blocks:        104.132.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:be:97:92:e7:a4:72:a8:65:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=5085f747-bafb-4d5e-9168-4fb8240c6c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:74:b8:92:42:08:22:f3:60:e9:0b:c9:a4:
                    fa:1a:44:3d:a2:0d:22:c9:fa:54:b9:2b:dd:f0:7d:
                    89:c3:96:62:14:4f:1b:ef:bf:f9:fe:0f:c5:4f:04:
                    d3:f6:4b:70:f3:86:2d:76:09:c1:1d:0e:11:b6:f5:
                    7e:76:26:a8:3f:b4:cc:0d:7f:4b:23:36:c1:01:1f:
                    bd:2a:2d:69:55:79:3a:c7:e2:0c:78:4a:44:95:5d:
                    6a:84:a8:7a:b4:1e:75:a5:97:4c:29:b6:79:b0:af:
                    5e:df:ad:b4:68:be:95:17:b9:5a:07:f2:49:75:e7:
                    3c:09:58:6d:93:c7:68:28:00:c9:dc:62:d1:1d:76:
                    61:71:4a:a4:65:fc:af:da:cb:bb:5c:67:24:c9:c8:
                    3e:03:9c:e0:0b:af:9c:76:1f:6e:7b:9b:b3:ca:10:
                    d5:a2:83:37:5d:9d:6c:4a:da:bf:a5:2e:c2:c3:48:
                    fc:80:2a:94:ec:93:1b:92:93:9b:ce:db:41:3d:a2:
                    7e:88:ff:58:5f:85:a8:d9:be:69:47:51:21:c6:e0:
                    38:be:65:ac:8c:f0:4c:7f:c3:73:b7:1b:a3:d7:c6:
                    05:55:9b:0a:65:95:80:8f:da:29:83:99:aa:3b:cf:
                    f3:12:05:b9:4b:c9:3f:15:ed:98:2d:2f:c4:11:33:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D8:2C:A3:3E:11:60:B5:1F:5E:B5:42:20:AC:AB:14:8F:19:1F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc632c55-ac53-390e-af0c-fd37cbdaac1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:13:67:48:78:06:9d:b5:ab:91:19:00:c8:e5:b2:aa:32:fd:
         9a:66:d0:5a:13:40:65:59:9c:6a:e0:bb:aa:13:d6:b1:6d:3c:
         be:9e:39:2d:4e:f4:94:6f:c0:e5:c5:46:e3:4f:54:f7:cb:5c:
         dc:45:fb:9d:91:b0:b1:2d:8c:d0:20:03:63:6d:26:4f:48:67:
         11:74:8a:c4:65:c2:74:e3:74:86:61:27:d1:fd:3a:f3:1d:69:
         fa:b7:4d:7e:24:5b:2e:db:27:12:57:9b:d4:c2:97:70:b7:ec:
         47:73:2f:48:52:73:b6:88:6c:9a:14:bb:5b:e3:1d:fa:5e:32:
         87:82:45:e8:b0:7e:49:62:f5:da:05:a1:d0:9a:9b:75:6f:aa:
         3d:d6:56:cb:15:f2:89:f5:bf:99:28:8d:9a:70:36:09:55:6d:
         d1:ff:6f:c4:d3:0f:5a:5a:88:60:96:63:d7:19:3a:67:2d:28:
         6c:4a:8b:c2:8f:ff:41:58:5c:ba:63:91:1a:10:28:f1:e6:75:
         73:38:1f:6c:6c:1a:8a:2a:32:19:5d:d4:b1:af:56:32:bf:21:
         72:26:2a:bb:36:9d:3e:eb:a6:b3:e3:48:fc:e6:c9:21:50:56:
         94:64:a1:8d:eb:d8:94:ec:07:20:69:f0:d1:52:0e:6c:a2:80:
         30:a6:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:57 2024 by rpki-client on console-ams.rpki-client.org