Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3ea4276-81f0-3187-9654-94d510fbeddb.roa
File:                     c3ea4276-81f0-3187-9654-94d510fbeddb.roa (raw, json)
Hash identifier:          +r+fqf3+PnY2Vw47xXj4fDifCSA45U7J2b8joPM7iQY=
Subject key identifier:   57:6D:16:16:4E:94:54:0F:03:44:49:C3:B1:DE:40:F6:D9:3B:6A:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535848A0C40CA5638DA02D780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3ea4276-81f0-3187-9654-94d510fbeddb.roa
Signing time:             Thu 14 Mar 2024 21:50:58 +0000
ROA not before:           Thu 14 Mar 2024 21:50:58 +0000
ROA not after:            Wed 12 Jun 2024 21:50:58 +0000
asID:                     41264
IP address blocks:        104.133.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:8a:0c:40:ca:56:38:da:02:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:50:58 2024 GMT
            Not After : Jun 12 21:50:58 2024 GMT
        Subject: CN=8f041a46-80f9-47e9-ba41-4cf69d1c9f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:6c:ab:e6:ce:fd:9b:9f:e0:25:3c:85:00:
                    4e:8f:38:25:46:3b:7f:35:d4:cd:d6:56:fb:bc:bd:
                    bb:83:2d:6d:45:4b:b5:fb:e8:5e:d0:fc:06:3b:f6:
                    c9:ff:29:67:76:55:1b:c7:9a:5e:bf:83:f4:0e:aa:
                    42:de:b6:d0:ed:41:e0:f1:5f:42:20:b0:f0:fa:b0:
                    1a:56:70:69:87:73:01:85:86:56:de:e5:59:1b:4c:
                    78:b5:15:9c:11:14:8c:b2:a0:39:d4:36:1b:ff:71:
                    3a:41:c5:b0:35:ec:98:2e:46:6f:c4:48:f8:87:68:
                    40:19:10:62:5b:ad:3f:c6:70:83:bc:43:5f:1b:b4:
                    37:76:d9:42:80:27:b3:3b:71:06:3d:ed:c0:e7:5b:
                    47:74:da:98:72:67:44:da:df:5a:eb:0c:f7:43:80:
                    60:04:16:d9:43:ce:83:ae:9d:43:8c:11:4c:0a:34:
                    dd:40:0e:a6:97:0d:d1:56:af:22:e3:ed:ff:4c:cc:
                    2d:75:7f:42:b4:4f:a4:bb:46:01:6c:d7:ec:de:ef:
                    06:fa:b9:e1:2b:27:9b:1c:26:d3:63:a2:69:b0:52:
                    b7:2c:5d:ed:e6:30:23:d7:69:de:5f:66:13:5c:9e:
                    be:c3:51:c1:94:cc:73:8d:25:f5:28:f4:aa:6c:ed:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:16:16:4E:94:54:0F:03:44:49:C3:B1:DE:40:F6:D9:3B:6A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3ea4276-81f0-3187-9654-94d510fbeddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b5:53:38:3d:cf:c9:e4:d3:68:38:a9:12:60:e5:00:ee:b7:
         61:7e:86:da:87:65:c4:1e:16:8d:70:ff:dc:42:98:22:c3:99:
         4f:d1:d2:0c:16:df:e4:fb:e9:00:61:14:d0:60:a8:e6:7e:6c:
         97:e0:9f:9f:4a:4a:2a:d8:32:ae:32:bc:72:ff:22:c0:c6:35:
         d6:37:5b:b7:4d:0b:2e:fb:13:33:d4:1f:73:c7:67:c5:21:c3:
         0d:ee:ec:5b:75:8d:e0:d4:65:d1:26:0e:6d:9b:55:0c:2c:52:
         c4:79:da:ee:59:f1:10:0c:c7:98:a6:ff:3d:3e:3d:42:7f:11:
         b8:13:dd:98:f9:4e:1a:2e:70:ed:6d:ff:17:5d:8e:4d:e4:93:
         64:81:7a:98:bb:78:2c:ef:e6:5c:ab:e3:5b:7e:11:3e:46:29:
         8d:68:16:87:e2:88:b8:57:73:4b:06:65:39:28:8f:a6:50:f3:
         2b:07:e8:9b:33:f6:ce:0a:41:d6:db:b2:04:d7:e1:e1:43:b2:
         85:84:c3:bb:e1:49:96:31:97:a9:0b:24:86:a5:ad:e8:b2:aa:
         7d:8e:2f:2b:cc:53:04:ed:19:88:5d:7c:8e:73:02:9c:84:06:
         68:99:3f:d2:62:72:40:81:33:b8:8b:58:61:26:13:8a:1d:47:
         68:44:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:10:29 2024 by rpki-client on console-ams.rpki-client.org