Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf60eb5b-e987-38bd-982f-f8db4f80691b.roa
File:                     bf60eb5b-e987-38bd-982f-f8db4f80691b.roa (raw, json)
Hash identifier:          aRh0a6P0Bwy1Gdp41ck8DPrubhnG21uW6fdVFhfFCRg=
Subject key identifier:   CB:02:27:8A:8C:26:23:96:EC:FF:52:EE:47:4E:90:0B:1D:58:21:2A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858452FF9585C40D04CA57A5FD680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf60eb5b-e987-38bd-982f-f8db4f80691b.roa
Signing time:             Tue 12 Mar 2024 22:11:28 +0000
ROA not before:           Tue 12 Mar 2024 22:11:28 +0000
ROA not after:            Mon 10 Jun 2024 22:11:28 +0000
asID:                     41264
IP address blocks:        104.132.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:f9:58:5c:40:d0:4c:a5:7a:5f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 12 22:11:28 2024 GMT
            Not After : Jun 10 22:11:28 2024 GMT
        Subject: CN=5462cdbb-459e-4377-b254-9d5e98ac67eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:23:60:c4:bb:9d:c0:ef:29:94:ce:08:5b:
                    52:9c:04:a9:9c:fc:d4:f5:ad:1b:a3:ce:9d:f8:0a:
                    2c:c3:06:0b:db:b2:ae:e8:3a:26:c8:1f:2f:e4:e0:
                    10:d3:57:9e:a5:3f:86:81:ff:16:a6:2c:4d:46:1c:
                    8c:64:f5:cf:46:c8:07:62:c0:f3:6f:7a:13:be:60:
                    23:67:1d:16:30:15:32:a9:07:e7:01:8c:e4:01:9d:
                    06:3d:b2:7b:cb:cd:0a:62:90:30:71:5e:c1:a4:40:
                    5e:94:eb:1e:f1:a8:30:8c:ea:0a:3e:eb:cf:c3:d0:
                    74:50:b1:fa:ed:26:74:9d:1f:76:e2:50:7c:b2:4a:
                    b3:be:be:b2:c3:bd:cb:40:7b:27:f3:a6:05:81:f7:
                    9c:5a:d8:2d:08:fe:e8:73:0b:e4:5c:ba:a2:b3:dc:
                    9d:36:b0:2a:b9:8e:c8:09:14:46:76:5e:f0:17:b7:
                    ee:69:66:f0:b1:40:33:bb:76:f3:f7:95:cd:0a:4f:
                    06:c6:a7:90:0a:5f:c6:e9:94:4c:ce:46:bb:d4:03:
                    5b:58:69:04:36:eb:28:f4:d9:59:09:c1:6c:e2:ac:
                    e4:90:14:b6:d9:30:c3:c3:de:46:46:15:45:c1:ef:
                    6a:b5:79:07:e0:34:e5:42:3b:07:2c:76:d8:d6:74:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:02:27:8A:8C:26:23:96:EC:FF:52:EE:47:4E:90:0B:1D:58:21:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf60eb5b-e987-38bd-982f-f8db4f80691b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:14:01:bf:e2:e0:45:56:d2:17:c9:a4:51:21:96:2d:9c:cb:
         b2:9c:b8:62:15:98:0e:81:31:0f:d0:bd:e9:c3:45:f0:09:c4:
         87:98:6f:be:6f:a3:7e:56:02:cf:be:25:76:52:dd:fd:04:9e:
         67:ff:2d:db:cf:96:36:5c:b2:e6:57:3d:b0:c2:ac:d9:09:55:
         9f:94:80:93:6f:61:0a:0e:c6:5b:6f:74:c8:90:a2:88:d7:2b:
         04:19:58:bb:fb:cb:a7:4b:1c:4d:3f:2f:2e:1c:d0:9a:29:b8:
         c5:b9:d0:59:26:45:a1:48:9f:47:ef:d5:cf:29:9b:df:65:3f:
         a2:c2:61:93:b1:8e:60:7d:e6:ee:ca:7e:f5:8c:2d:b6:3b:e2:
         c2:28:6b:e5:8a:9c:ed:2c:03:e9:02:b7:a3:8b:2b:7b:e5:a2:
         88:fa:53:25:fe:3f:f7:68:e3:d7:8c:a3:8c:26:4a:07:56:d5:
         6a:5c:18:fc:89:f7:28:38:77:38:3c:3f:6e:e5:59:52:ba:fd:
         98:f5:38:a8:6d:3d:c9:0d:ad:79:a1:d0:99:37:66:c5:27:90:
         88:66:04:3c:92:07:e9:ab:77:c7:78:48:0b:84:24:b7:c4:b7:
         25:36:26:5e:cf:ae:65:5b:10:b1:58:f7:1b:de:af:b4:4c:4a:
         37:8e:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:45 2024 by rpki-client on console-ams.rpki-client.org