Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
File:                     bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa (raw, json)
Hash identifier:          6+aNXRS925y93XTBgB9gDZakYEisMmGXXutJbP90AM4=
Subject key identifier:   92:99:1F:CF:CD:2B:6C:00:D3:3B:39:F8:5D:6E:FF:2C:DC:03:36:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535833DB6DB7D98BF782EBD54
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
Signing time:             Thu 14 Mar 2024 21:48:21 +0000
ROA not before:           Thu 14 Mar 2024 21:48:21 +0000
ROA not after:            Wed 12 Jun 2024 21:48:21 +0000
asID:                     41264
IP address blocks:        104.133.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:3d:b6:db:7d:98:bf:78:2e:bd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:48:21 2024 GMT
            Not After : Jun 12 21:48:21 2024 GMT
        Subject: CN=442cbfa5-f029-4f6c-a822-19e4c291daca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:0f:cb:72:6f:36:36:23:05:13:c5:83:52:
                    cd:99:5f:4c:75:7c:7d:d9:ba:57:6c:eb:a3:02:da:
                    18:0f:ba:75:21:6d:40:17:77:31:30:fe:b6:19:df:
                    b6:d3:22:a1:15:c8:00:87:9b:46:83:18:3e:ea:6a:
                    28:e9:df:43:6f:58:42:6c:82:04:ae:4f:15:d7:e1:
                    87:6b:3e:fd:c8:db:82:2e:67:c9:95:16:cd:16:b0:
                    66:7f:47:67:45:62:76:95:35:38:e3:5a:6d:5f:89:
                    fe:9a:4b:33:f0:82:c3:5f:87:a0:d8:55:20:37:b1:
                    c8:0e:aa:e5:82:f3:bc:09:0e:c1:43:58:f8:33:7f:
                    2c:11:f2:8d:24:f2:eb:6d:33:ee:9c:38:d3:19:0a:
                    0a:a4:8d:35:14:d2:47:b1:7a:6d:ee:d4:d5:ce:35:
                    2a:7b:4e:04:24:b3:c3:e1:c6:5d:e8:d8:46:2a:f2:
                    77:8b:d7:38:48:ad:ac:ae:08:c1:45:7d:64:8a:df:
                    a5:e7:c6:13:1a:eb:de:9a:fb:ef:04:79:dc:3c:70:
                    13:f4:3b:4a:7e:cf:22:6b:bc:47:a8:40:d2:79:39:
                    ee:ce:1a:33:be:cc:ef:fd:c4:57:ad:8a:59:d4:52:
                    ba:cc:c3:b6:34:39:4b:55:0d:22:5b:99:25:eb:8a:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:1F:CF:CD:2B:6C:00:D3:3B:39:F8:5D:6E:FF:2C:DC:03:36:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:3c:af:7d:de:a5:06:99:a2:af:e3:92:8d:2e:53:29:cd:
         bc:fb:f5:23:f4:30:74:e6:8a:3e:2a:1f:c7:0d:f5:b1:f8:cc:
         74:8b:6d:5f:62:43:77:d1:8b:41:e7:1d:f0:05:57:15:88:03:
         38:4d:3d:67:e4:6a:49:c9:0c:3d:bf:24:7e:7a:5f:02:e8:50:
         50:0c:4e:4d:19:7a:ea:07:5d:0f:3c:ab:39:6c:d0:97:41:d1:
         26:80:7f:be:a6:4d:9c:29:d0:54:55:c3:b2:e2:28:dc:d6:da:
         d0:1e:b6:57:b8:f7:d2:55:e4:51:bf:d1:43:de:b3:e6:b4:6e:
         de:5c:e0:a0:6d:64:79:97:da:80:68:e2:b5:b7:f2:49:3c:a1:
         63:78:d2:44:b5:13:12:ca:5b:cf:21:b3:d6:a3:84:b3:b7:6c:
         43:0a:f5:ae:99:05:12:35:4d:82:f7:d1:91:c3:c1:14:5b:6f:
         3d:e6:81:e0:75:1b:0a:e4:29:ae:56:e4:fb:44:84:18:c6:b3:
         24:3d:7c:db:08:3d:7d:59:f3:12:f5:e6:e3:d4:42:28:2e:4a:
         bc:af:93:cf:3a:e0:25:59:a3:12:ac:f9:4e:38:42:48:12:4e:
         4f:fe:02:74:08:00:b5:18:b4:8e:06:ca:b4:b2:03:0c:bd:35:
         6a:d9:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:05 2024 by rpki-client on console-fra.rpki-client.org