Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4858ae4-1026-3c66-9a83-6012bc39fc44.roa
File:                     d4858ae4-1026-3c66-9a83-6012bc39fc44.roa (raw, json)
Hash identifier:          bQtqee/TJ6sLDfYZhoUCRX+oSGPXLh/toW9bwEcyHRg=
Subject key identifier:   C1:81:5D:BB:D2:B6:F7:C0:CB:F6:98:EA:22:15:69:85:8D:C6:3D:BD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358544649973AC30AF4E8880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4858ae4-1026-3c66-9a83-6012bc39fc44.roa
Signing time:             Thu 14 Mar 2024 21:52:26 +0000
ROA not before:           Thu 14 Mar 2024 21:52:26 +0000
ROA not after:            Wed 12 Jun 2024 21:52:26 +0000
asID:                     41264
IP address blocks:        104.133.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:44:64:99:73:ac:30:af:4e:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:26 2024 GMT
            Not After : Jun 12 21:52:26 2024 GMT
        Subject: CN=06202a2c-579d-4c66-b167-9665ecd749f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:7c:f5:cd:db:4b:a6:b3:33:1e:f4:7e:a4:
                    35:ca:68:6d:d5:32:93:dd:f0:22:bc:6c:4e:53:db:
                    66:05:13:11:d7:49:06:50:e7:36:19:62:b0:ee:1e:
                    96:fb:7d:e6:57:80:27:37:61:45:ce:03:b3:6d:e8:
                    54:38:6c:a2:ff:06:40:85:8a:06:69:72:4a:1c:c0:
                    a8:e3:41:c3:64:e6:64:2b:b5:ad:ee:3a:63:16:1a:
                    a5:a7:24:13:f9:23:30:bb:63:91:89:a6:f0:36:be:
                    43:1f:1f:b2:e5:d3:7e:9a:06:4a:b2:3e:03:fb:f8:
                    cd:ac:72:b2:21:2a:ae:a1:d5:cb:3e:40:78:ff:b4:
                    32:64:bb:91:44:45:8e:5a:05:12:4e:30:14:a9:2c:
                    b6:f3:63:c9:5d:2e:b8:35:45:5e:c7:a1:d2:45:43:
                    88:05:36:f8:b3:75:b8:e6:76:f2:27:87:d0:b4:bd:
                    b7:53:d0:90:29:93:d7:25:e6:46:db:96:0a:c1:4b:
                    54:e0:a4:ef:c5:9a:05:a8:37:f7:5a:68:3a:a4:6c:
                    91:c5:fb:91:ea:e8:64:a0:a1:65:c0:3a:11:1f:d8:
                    6b:28:61:1b:08:44:22:e5:3f:87:39:c4:3d:a7:b0:
                    ee:d3:b7:73:ba:56:b8:d8:7f:ac:94:8f:25:eb:c0:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:5D:BB:D2:B6:F7:C0:CB:F6:98:EA:22:15:69:85:8D:C6:3D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4858ae4-1026-3c66-9a83-6012bc39fc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:e0:7b:c3:8c:e1:89:d9:cc:24:7b:ba:fc:65:47:89:f1:
         ce:85:cf:76:27:99:05:c0:91:08:52:88:55:9c:f0:5e:3a:5e:
         09:de:8c:ae:1f:96:71:51:f0:63:66:bd:15:3f:73:2a:0e:4b:
         58:83:31:55:a0:c8:af:47:c3:3b:93:1e:e2:a1:d6:da:21:a5:
         6b:f8:01:1f:40:d7:68:cd:f2:92:cb:92:e6:6c:ca:a0:55:77:
         f5:25:89:1b:8e:0b:9b:07:ac:8f:41:a7:93:30:42:82:e6:68:
         ad:d8:1e:50:b1:a6:ed:83:eb:ee:8c:ef:c9:2e:1e:cb:ee:cb:
         4c:44:5e:6f:53:11:89:56:43:6e:a6:a8:57:dc:18:60:09:bd:
         0a:05:1d:9e:c6:d3:c8:02:e8:e8:a4:07:90:45:32:9a:d4:ff:
         1c:5d:5f:5c:2f:ad:25:16:c9:48:f6:81:ed:3c:d6:da:e8:b2:
         52:02:72:76:6b:34:e4:0d:3a:11:e2:8f:c6:45:83:4d:c3:57:
         68:00:db:fa:23:77:5b:3c:b8:9a:73:cb:2b:d8:c6:59:bd:fd:
         c3:63:36:45:6f:e2:27:cc:52:ed:a5:67:f6:20:ab:af:f2:44:
         90:01:6b:45:2a:b5:cd:5a:06:78:e1:aa:fc:82:5c:78:a6:23:
         78:1a:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:31:07 2024 by rpki-client on console-fra.rpki-client.org