Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa
File:                     c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa (raw, json)
Hash identifier:          gNIf2NTkyb8GCZNfHzCEY46jNw3RNP0ckPKz0f8t/hE=
Subject key identifier:   43:F2:18:85:23:99:DE:30:E7:70:72:BA:C9:92:C3:2C:39:92:66:7B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453586405629F269C38A5EB680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa
Signing time:             Thu 14 Mar 2024 21:54:25 +0000
ROA not before:           Thu 14 Mar 2024 21:54:25 +0000
ROA not after:            Wed 12 Jun 2024 21:54:25 +0000
asID:                     41264
IP address blocks:        104.133.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:40:56:29:f2:69:c3:8a:5e:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:25 2024 GMT
            Not After : Jun 12 21:54:25 2024 GMT
        Subject: CN=c835dc84-3bc4-48d1-ba62-bc3f8d341a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:71:38:bb:fc:d7:e2:07:8c:f6:34:6e:d8:
                    97:18:a0:c7:46:33:9c:10:a4:fb:3f:3e:d1:b4:9c:
                    21:17:cd:5c:3c:e6:f5:a4:36:65:ac:3a:7f:e8:88:
                    1f:9d:92:17:27:40:b3:b8:00:e5:17:3e:94:7f:b0:
                    99:d3:60:f2:c8:5b:4a:79:20:27:87:45:81:e9:bc:
                    e8:d6:a8:2f:9b:48:c2:2f:f7:7b:8c:52:11:06:5f:
                    ec:83:5f:71:ad:e7:53:22:5c:68:f0:3b:12:d4:ad:
                    6b:fd:b7:a4:37:8c:30:5f:9b:00:b7:5d:16:ac:47:
                    9f:f2:d4:55:a0:3b:fd:3c:01:b1:85:3f:f0:10:bf:
                    e5:fa:ba:34:61:2c:c4:c2:85:14:6d:7c:cb:9f:18:
                    de:6d:48:6e:6c:ea:9d:88:77:70:8c:89:12:9f:f5:
                    35:b2:70:61:67:60:81:cd:6f:7a:ff:29:93:57:d8:
                    8f:e5:e5:df:c7:83:54:3c:e0:e2:2d:39:31:bb:09:
                    1a:eb:4e:2d:1d:23:47:5a:6a:30:d3:ed:8e:2a:b9:
                    5c:e7:70:5f:a4:40:2e:b3:60:2b:d3:48:a5:01:02:
                    a4:2c:02:bd:fc:7b:27:31:0e:07:6e:ae:af:89:52:
                    32:c7:96:13:e7:29:31:be:7c:2a:14:58:a6:fd:20:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F2:18:85:23:99:DE:30:E7:70:72:BA:C9:92:C3:2C:39:92:66:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:c4:b2:4f:31:65:08:58:e8:0b:10:2b:ea:2b:1c:f4:40:
         6d:93:f9:cc:10:68:bb:5d:ad:ce:e3:17:6b:9c:1c:e9:a8:d2:
         be:be:b1:e4:f0:2e:aa:64:00:ef:81:97:2b:06:47:8d:5b:ce:
         f3:7e:97:5c:db:c1:2c:fb:f4:cd:fa:07:46:61:70:f0:fd:80:
         db:44:4d:2c:56:d6:f6:f3:31:ac:81:87:1b:b3:0c:9a:f7:11:
         8d:ab:87:90:c5:7b:2c:8e:c1:fc:a3:bd:63:21:50:65:0a:11:
         55:cc:05:2f:5f:3d:f5:69:19:3d:c5:ec:91:e2:31:cf:ae:47:
         6c:3d:ac:e8:10:4a:93:17:aa:f0:4f:76:52:53:60:5c:5a:aa:
         a0:e2:1d:fa:36:e1:d8:fb:f4:38:66:cb:04:16:66:9f:94:92:
         31:45:f1:00:a0:81:15:f8:ce:3d:a8:76:6d:7a:ec:c4:82:2f:
         8b:ac:b2:c6:6b:39:02:47:e2:1d:f6:a4:4b:bd:96:01:f8:5c:
         80:92:31:cf:d0:32:37:86:f5:a9:a2:e7:7c:d0:db:bf:7c:de:
         82:43:51:bf:72:b5:b8:ee:88:bd:80:d0:5f:75:d8:40:e7:08:
         11:6f:a4:53:de:cc:d6:04:03:2f:f2:95:82:5b:f5:75:77:04:
         22:74:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:41 2024 by rpki-client on console-ams.rpki-client.org