Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa
File:                     d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa (raw, json)
Hash identifier:          5eVgNupBuhXjYS5FJSdlHEn6y7XGgSXiRTopzzfje7s=
Subject key identifier:   A2:38:97:61:BB:13:A1:85:BA:F9:B8:DA:92:09:E0:14:A2:35:AA:32
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584532840AFC8068752C82229B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa
Signing time:             Wed 13 Mar 2024 20:02:33 +0000
ROA not before:           Wed 13 Mar 2024 20:02:33 +0000
ROA not after:            Tue 11 Jun 2024 20:02:33 +0000
asID:                     41264
IP address blocks:        104.132.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:0a:fc:80:68:75:2c:82:22:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:02:33 2024 GMT
            Not After : Jun 11 20:02:33 2024 GMT
        Subject: CN=a469d0b5-d33d-4657-8174-72437fcd4283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:98:33:35:e3:77:b2:d7:6a:fa:7b:b7:65:
                    dc:93:d8:24:57:f8:e2:21:51:e7:c2:d1:21:5b:fc:
                    5d:ff:6f:5d:e7:e0:50:d2:bd:b2:f2:71:f2:3d:6c:
                    fd:61:ed:b0:76:7d:dd:ae:40:a4:53:a6:c3:e8:ab:
                    b0:b1:45:77:f7:7d:79:88:69:08:4b:84:0c:d6:20:
                    60:5f:e8:6a:2c:35:bf:bf:fd:09:c6:21:23:b0:6c:
                    fb:12:e8:1b:68:c9:53:b7:43:14:4b:66:79:ee:9a:
                    67:59:dd:8b:2e:fc:dc:d1:70:83:b7:7c:07:11:56:
                    02:94:6c:e8:73:0e:e3:ec:eb:45:51:fa:ef:40:17:
                    16:34:02:62:1a:23:01:78:6a:a7:0a:65:fc:69:46:
                    72:2d:a3:f2:5a:5a:7b:cb:54:57:d7:e9:2b:65:f9:
                    58:e9:60:32:c2:00:8d:2e:75:06:79:93:17:51:0f:
                    cf:67:8a:52:05:81:0e:6b:a5:b3:6b:90:84:5c:e4:
                    b1:f3:f5:ee:fb:84:7c:c6:b0:e9:ce:59:12:ac:1e:
                    70:60:d3:46:7f:9b:d5:c6:93:1b:ca:35:68:b5:91:
                    94:28:e6:f2:10:13:eb:5f:f1:78:e4:d2:e6:7a:e7:
                    2d:c0:1a:ea:3e:bb:b1:da:0b:9b:d8:1d:2c:77:1e:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:97:61:BB:13:A1:85:BA:F9:B8:DA:92:09:E0:14:A2:35:AA:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:36:06:fd:91:5e:99:fb:7c:96:aa:5e:65:49:a9:c0:18:
         0a:ad:91:2f:ec:0a:f9:b1:85:fe:68:9d:1f:6a:fa:2e:b1:34:
         ee:48:9c:74:eb:10:cd:54:b5:94:a7:c6:63:c6:14:8a:3d:ef:
         c9:1b:f2:ce:79:68:48:82:21:dc:a0:e3:92:42:ff:d8:04:8b:
         b5:a4:50:9e:e0:24:bf:80:83:9d:63:4e:70:e8:00:58:e5:27:
         9c:f2:17:74:d3:08:53:c2:cc:32:c8:c2:18:6c:8b:8a:02:1b:
         ba:56:91:7d:3e:7e:b8:a9:46:a3:e1:49:f3:ab:d7:7f:d9:42:
         29:ca:29:90:10:3d:45:16:b4:45:31:97:56:05:32:68:1f:e2:
         5e:42:59:92:fd:bd:64:0b:64:ef:2a:3f:65:c5:39:d8:7a:a3:
         0a:b1:d7:ed:6f:e9:60:b5:0a:5a:30:48:d1:d5:e1:f0:19:35:
         99:6c:7d:73:09:3b:84:3b:ad:e7:fb:2a:c1:15:0c:9f:dd:ea:
         18:57:5d:a5:b8:ac:e7:e5:8d:1a:53:11:43:da:93:42:a8:02:
         2a:a4:39:e0:0d:f9:6e:f8:60:5a:7f:7d:10:d7:32:4d:f8:f0:
         73:55:53:86:bb:5b:47:7f:c6:a5:7b:db:48:57:4f:9d:71:66:
         1d:44:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:39:59 2024 by rpki-client on console-ams.rpki-client.org