Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c50555fc-71d1-3810-8b29-cd11d4ee6651.roa
File:                     c50555fc-71d1-3810-8b29-cd11d4ee6651.roa (raw, json)
Hash identifier:          IPZSGwmTNBRzFm9LdhgU4c+v22MMsT2i/oVWApZ0Fno=
Subject key identifier:   12:FF:E2:BC:ED:21:97:5D:10:F1:07:91:37:6E:1C:6D:44:6D:EE:DF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B8402E0FFAED0CA5EEE760
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c50555fc-71d1-3810-8b29-cd11d4ee6651.roa
Signing time:             Mon 18 Mar 2024 22:09:03 +0000
ROA not before:           Mon 18 Mar 2024 22:09:03 +0000
ROA not after:            Sun 16 Jun 2024 22:09:03 +0000
asID:                     15169
IP address blocks:        104.134.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:40:2e:0f:fa:ed:0c:a5:ee:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:09:03 2024 GMT
            Not After : Jun 16 22:09:03 2024 GMT
        Subject: CN=6c6f0a8a-76bb-42c0-9820-35b9a431ec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:89:c5:57:54:56:95:43:35:34:11:63:fe:
                    f0:9d:2f:75:68:f8:1c:a9:5c:be:e5:38:f9:53:37:
                    ad:f9:b6:65:cd:97:79:93:f0:85:65:91:64:71:ea:
                    b8:25:fd:fe:f3:e5:38:fe:5c:0c:59:bb:bc:31:10:
                    94:1c:c2:0a:ec:65:71:f1:e7:a6:48:e3:94:86:63:
                    0f:2a:93:ef:05:2c:92:af:34:af:2c:85:8e:41:5b:
                    fd:7e:9e:75:30:c3:ed:e3:64:26:71:b4:24:4f:f1:
                    05:70:88:93:33:97:71:cc:d3:89:2d:b7:a5:a7:a8:
                    19:94:14:3a:42:21:de:56:9e:18:1c:b1:6e:8d:2a:
                    2c:09:95:79:91:e4:76:d5:06:5a:77:5d:bc:df:d5:
                    2d:88:06:c1:25:0a:97:39:36:a5:ce:bd:54:e1:8b:
                    29:57:99:50:c7:49:73:1e:16:b2:9f:32:99:fd:89:
                    e7:55:eb:55:6c:5c:95:fc:f4:c1:bd:c4:d9:a1:50:
                    6b:d2:d9:11:dd:3b:f3:e4:31:d5:48:5a:74:05:6e:
                    d5:b9:9d:39:16:b6:f9:04:12:81:f3:38:8d:df:f4:
                    1c:b5:bc:12:83:5d:e0:f8:72:6c:5a:12:05:4a:cf:
                    eb:d1:a7:8c:aa:89:7c:f4:97:d8:d6:01:f4:7a:8d:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:E2:BC:ED:21:97:5D:10:F1:07:91:37:6E:1C:6D:44:6D:EE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c50555fc-71d1-3810-8b29-cd11d4ee6651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:d8:7b:cd:44:69:cd:25:84:9a:c4:62:90:bd:ba:65:1d:
         9b:8a:9a:02:23:46:83:76:62:83:13:47:1b:ed:91:d1:e3:23:
         c1:bb:b5:ed:1f:ce:7f:21:fe:6c:b8:3a:49:67:e4:81:6c:e9:
         cf:df:59:67:1e:30:3b:2f:4a:31:bc:c0:24:65:6f:a8:af:c0:
         3d:7a:d1:12:12:8d:44:72:26:84:a1:42:1f:ae:6f:c8:3d:40:
         15:c5:e0:5b:23:c3:a8:ca:1b:2c:bd:ef:3c:08:c0:c5:41:2f:
         c9:f5:d2:47:e7:42:fb:34:68:c5:05:27:0f:4e:ad:00:ee:3c:
         c9:42:87:21:7b:6a:3f:b2:30:79:06:66:10:6a:80:66:fe:73:
         f1:17:54:df:1e:8a:90:24:ce:cd:c8:fb:81:22:30:9a:9f:c3:
         89:ce:13:d4:a8:95:d5:41:de:17:e5:95:de:b4:c1:b9:45:be:
         55:1d:b9:4b:b6:e8:ab:06:d4:14:a8:3a:58:c1:5b:5f:9a:6c:
         f1:3d:3b:5b:82:56:e0:5f:ec:78:9e:30:72:6c:5a:d0:44:4e:
         ca:79:59:e1:09:57:59:65:44:19:8f:8d:3c:da:dd:9e:45:f3:
         d4:82:96:c6:b8:a8:a6:b9:2e:6c:5b:7b:62:ea:c3:e5:7f:fc:
         dc:41:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:40 2024 by rpki-client on console-ams.rpki-client.org