Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cbc3022d-dd87-37c5-960a-853ffcac8339.roa
File:                     cbc3022d-dd87-37c5-960a-853ffcac8339.roa (raw, json)
Hash identifier:          cF02NEsehNna1y1uM52d9995kCVGuN0BALUwkizOXPA=
Subject key identifier:   3E:97:05:70:E0:DA:E7:BF:7B:9C:50:EB:6D:A7:3D:13:02:2A:AB:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BCB935265CAC4F9CAB7C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cbc3022d-dd87-37c5-960a-853ffcac8339.roa
Signing time:             Mon 18 Mar 2024 22:18:04 +0000
ROA not before:           Mon 18 Mar 2024 22:18:04 +0000
ROA not after:            Sun 16 Jun 2024 22:18:04 +0000
asID:                     15169
IP address blocks:        104.134.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:b9:35:26:5c:ac:4f:9c:ab:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:18:04 2024 GMT
            Not After : Jun 16 22:18:04 2024 GMT
        Subject: CN=223c5c41-0b34-4385-b68f-9740a8be87bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:d0:27:94:1b:c6:ab:0f:93:d1:98:fc:57:
                    d4:d9:41:9f:3f:54:9d:2f:9b:92:61:ab:f9:53:ba:
                    7d:6f:04:1b:ea:c3:8a:92:b8:df:75:a2:5e:0a:0a:
                    14:9e:9a:ec:34:0e:29:c1:3c:75:cc:c2:10:92:42:
                    c6:cf:55:02:65:42:75:96:41:7c:8c:88:81:7c:f9:
                    53:f4:5a:e9:92:3c:da:ee:11:ba:b8:9d:7f:1a:fb:
                    4a:d9:d9:b6:33:48:94:62:73:61:c3:2d:e7:60:6d:
                    6c:3e:ef:ee:ae:6e:26:e4:55:80:23:40:00:fc:aa:
                    bc:62:56:62:0c:27:7b:35:a6:5e:3f:6f:c3:ad:73:
                    f7:c3:84:4f:7e:aa:2d:f6:78:14:e5:24:2c:ed:cf:
                    df:7a:78:91:c7:05:14:93:d3:6d:ba:94:7c:de:3d:
                    a1:22:71:46:06:af:9e:51:bc:ad:7f:1a:71:c1:06:
                    c4:45:9c:6d:40:54:a2:9f:66:b9:f4:e4:e9:af:34:
                    7e:0b:67:e9:3d:7f:23:89:44:37:42:14:44:17:d0:
                    01:5b:23:1f:77:51:fc:a8:73:0a:98:fa:00:65:ec:
                    76:51:33:f1:ef:29:8e:02:ce:1b:77:ef:19:aa:ad:
                    73:f5:29:10:65:09:5d:ed:5c:3c:a9:02:d1:cd:f5:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:05:70:E0:DA:E7:BF:7B:9C:50:EB:6D:A7:3D:13:02:2A:AB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cbc3022d-dd87-37c5-960a-853ffcac8339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:b7:0c:05:e5:9e:25:99:2f:92:b2:2e:fb:a5:b1:fb:66:
         d3:e4:ca:0d:a9:a5:87:bb:ac:40:f3:71:61:7a:6c:65:f9:32:
         49:ae:38:66:cc:d2:ac:43:45:6f:57:e1:db:9d:e2:41:2d:b1:
         f7:fa:48:4b:8c:c9:e7:4a:5a:0b:6f:9e:37:5c:fb:88:94:83:
         2a:eb:da:fd:70:f2:a9:66:40:31:1a:5f:61:0e:fe:8e:19:80:
         f4:71:e1:c6:60:62:64:e4:d9:9c:58:da:a6:8c:b7:4b:2c:43:
         fd:7f:46:0c:8b:47:5a:8b:4c:89:1a:3a:65:df:e1:aa:98:78:
         41:c6:25:ef:39:09:6a:98:99:06:82:04:3a:77:db:43:75:b5:
         03:4b:60:83:aa:c6:ab:8a:fa:75:45:69:27:3a:25:78:bb:ed:
         ad:ee:63:f5:9f:ca:d9:4b:cf:7f:64:85:14:bb:c2:52:e3:3c:
         0e:ca:bd:1a:81:79:78:3e:35:50:56:28:c7:c4:17:a2:1e:e3:
         65:ff:c8:49:5a:11:ae:ec:2d:b6:a4:b3:b0:a9:02:6c:9e:59:
         fd:71:88:29:59:78:ea:9a:ea:40:14:b1:df:85:f6:06:7f:21:
         1c:cd:8c:99:cf:8f:4e:77:4a:11:24:ea:dd:9b:c0:73:75:cc:
         8b:6c:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:46 2024 by rpki-client on console-ams.rpki-client.org