Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa
File:                     ca8061fc-b111-30d3-af87-544970b8a9eb.roa (raw, json)
Hash identifier:          fuXcjygncBp6vVTI3p4PVaLyceNznVGzeFSuJYj6axw=
Subject key identifier:   BD:AF:DD:2B:DA:F0:DC:D2:7D:0E:1A:91:26:FD:A9:27:A2:F6:DD:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094F0C014D6DDCBE1626F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     395973
IP address blocks:        104.134.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f0:c0:14:d6:dd:cb:e1:62:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=4101c18d-eb84-428d-8ca8-c997ccbfd010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:e6:75:94:a9:4a:4f:10:e0:06:de:02:d4:
                    70:27:30:fc:e2:27:2e:7f:0a:52:5b:11:da:a3:b9:
                    d4:1b:62:c3:86:34:1e:d2:af:8b:66:80:df:a7:cc:
                    0d:46:f0:b2:38:5c:ae:c3:9f:ac:5e:57:4a:49:5c:
                    ce:20:79:d4:46:58:d2:24:ff:24:09:7e:87:33:0d:
                    f0:d1:9b:dc:4b:33:15:17:58:2b:c0:ca:62:e8:89:
                    4a:5b:da:df:39:a9:dd:4a:1a:0a:0a:f6:73:7c:19:
                    d2:02:95:51:19:be:85:c0:a4:72:1f:df:a2:cb:73:
                    e1:50:a7:46:33:51:ba:2d:8f:7e:88:3e:61:2a:45:
                    64:0d:af:af:74:43:03:bb:98:33:73:c7:f1:05:c9:
                    a2:21:4a:28:68:93:dc:8d:ce:b7:58:72:2f:8f:50:
                    81:6a:e5:61:e6:12:36:5e:b1:1b:b6:c6:fe:6d:5a:
                    50:1c:c2:05:d2:01:d9:ac:51:dc:e7:92:41:28:09:
                    e5:4c:d4:bc:03:00:33:ae:15:2e:03:72:c9:e9:3a:
                    58:20:d9:d4:f8:83:55:3e:bb:1f:83:ca:c3:c0:2a:
                    0c:ea:c8:2c:22:13:0e:93:10:90:c1:3b:77:d7:e1:
                    99:59:67:0c:b9:48:6d:5b:a0:38:9c:89:17:d9:ee:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AF:DD:2B:DA:F0:DC:D2:7D:0E:1A:91:26:FD:A9:27:A2:F6:DD:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:7c:2e:a0:55:9b:40:07:c1:8c:b9:18:df:e7:37:ab:ba:
         fa:88:73:66:f2:da:71:9a:1c:40:a7:1b:7f:79:0f:85:8f:ac:
         48:aa:fe:ff:4e:82:af:92:78:e0:7c:f6:cf:b0:73:90:26:ca:
         e6:48:c3:b9:66:30:84:37:00:12:81:7a:8b:5e:a6:30:65:5d:
         b3:88:17:ca:df:f4:75:f2:f3:94:b0:c4:ef:1c:c8:0f:9a:a6:
         0c:1a:b7:c0:6b:2d:2f:3b:80:45:ed:49:b9:c5:52:a9:54:cd:
         28:bf:fc:d2:2d:0c:ca:54:d8:98:f9:6b:d0:8b:c5:f1:60:8f:
         0c:d9:4c:db:71:b7:7a:ac:17:8e:f0:4a:a9:d1:04:d8:69:00:
         46:5a:3c:a0:86:14:6f:e3:47:98:49:a4:5a:f9:6a:cb:b3:19:
         7d:80:e3:8d:6f:3e:23:4f:b4:50:16:bf:e2:94:85:41:df:85:
         4c:26:b3:87:0b:36:d0:f0:45:d8:47:93:6b:d5:50:56:9c:40:
         c8:31:6c:87:38:51:1a:a0:39:33:bd:a6:6d:71:b1:ef:69:a3:
         40:ae:75:ad:c8:52:e7:8f:36:75:64:1f:3f:96:29:41:45:a3:
         f4:d5:f2:c6:f3:60:05:5e:e8:e1:e6:4a:4e:a1:c5:ef:97:d1:
         fc:1e:b4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:55 2024 by rpki-client on console-fra.rpki-client.org