Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa
File:                     cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa (raw, json)
Hash identifier:          gkAHlU8fNo/9hUqgq/ZQ/wC0Mv2xMWlbLWk8a37pRXk=
Subject key identifier:   08:85:9D:B8:30:7E:91:0F:D4:40:4F:2A:41:DE:99:B5:99:34:90:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585DF09255E456A42ACFA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa
Signing time:             Thu 14 Mar 2024 21:53:39 +0000
ROA not before:           Thu 14 Mar 2024 21:53:39 +0000
ROA not after:            Wed 12 Jun 2024 21:53:39 +0000
asID:                     15169
IP address blocks:        104.134.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:df:09:25:5e:45:6a:42:ac:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:39 2024 GMT
            Not After : Jun 12 21:53:39 2024 GMT
        Subject: CN=2926c9be-e986-4cf0-a3a4-0d5a2002f6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:b6:03:ed:00:26:d0:6f:02:4b:ac:ea:e1:
                    f0:97:67:51:54:f4:e6:55:ba:95:64:a1:0f:56:25:
                    21:db:29:08:97:7f:07:58:f9:a7:37:5f:15:67:d6:
                    35:5e:85:f3:32:93:02:74:9c:b5:d0:79:fd:0f:e8:
                    e3:71:d0:8d:2f:96:74:22:45:f2:0c:be:f6:73:70:
                    bd:f5:c9:68:4c:6f:18:ec:af:bf:92:ba:ff:d7:27:
                    d4:c8:e9:b3:7e:44:ab:1a:eb:1a:5e:41:89:0e:08:
                    65:86:02:15:41:0d:6d:ff:f0:db:88:a6:30:fa:1d:
                    45:17:75:7e:dd:6f:42:cc:8f:36:0f:1c:37:93:73:
                    f1:ca:09:31:11:7b:9a:bb:75:21:3b:70:ab:35:42:
                    15:ae:66:85:c6:8a:e3:06:12:00:14:7d:b2:a5:ec:
                    e4:46:cc:89:ca:8a:b8:08:f8:4d:bb:ef:9b:8e:a5:
                    17:2f:b8:42:bc:de:2c:17:55:e6:3c:c8:65:22:4d:
                    eb:aa:51:c4:53:32:42:94:df:5d:7c:73:a2:e6:2c:
                    91:7c:3d:f0:b5:59:09:a2:47:21:ea:3b:99:be:59:
                    d8:b3:58:e6:67:94:d5:59:a6:de:0f:0b:5a:75:63:
                    6a:91:db:b8:4c:16:6f:2a:95:cf:d6:f5:62:85:ce:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:85:9D:B8:30:7E:91:0F:D4:40:4F:2A:41:DE:99:B5:99:34:90:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:64:c3:76:6d:d2:fa:04:02:6e:eb:c4:74:1b:73:89:a3:c2:
         14:b1:8e:e5:b1:c5:0d:bc:85:f5:f9:28:ed:42:ca:00:cc:da:
         6a:cd:fc:e3:e4:d2:93:fe:08:3d:07:a5:0f:05:ff:d7:bd:fd:
         c1:b3:b8:f5:3e:44:87:2b:f7:2d:c6:07:01:f0:6d:ba:4f:cd:
         62:62:ad:7d:38:10:7d:da:d6:a6:4c:68:0f:44:f4:79:55:ab:
         8d:8f:af:99:15:cc:45:82:54:84:f3:f1:25:77:44:67:dc:53:
         59:c8:52:c3:7c:68:a1:d9:7d:d5:99:da:7d:d2:49:ea:35:f4:
         19:93:b4:13:7d:ff:eb:2c:ca:b2:08:bc:df:ae:6d:1e:8c:07:
         b1:96:0e:03:4a:8e:1e:a0:a3:1a:76:1e:62:7a:43:84:f0:db:
         45:2d:7b:33:ee:de:7c:58:76:59:1f:4b:c6:d5:7c:60:47:21:
         3f:2f:95:94:ef:59:ea:a0:04:6a:79:bb:e6:8c:7e:c9:88:e0:
         40:99:9d:1e:9f:94:a7:96:3a:ce:5d:45:4b:a2:23:04:61:cc:
         74:7a:49:38:d1:29:f0:e1:6a:99:d3:f5:67:37:e2:ef:e0:66:
         47:7d:fb:cd:c8:ef:10:cf:dc:00:d0:1a:87:93:7a:84:51:5b:
         15:da:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:06 2024 by rpki-client on console-fra.rpki-client.org