Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa
File:                     d57ca891-b161-3132-ab8b-ca273d80971e.roa (raw, json)
Hash identifier:          nnF8kASA2zkR/P71IopI9MH7DJDGhyYOCAS60nbR36w=
Subject key identifier:   2D:A6:D9:70:52:0A:9D:3C:FC:40:6E:50:D7:90:35:48:5D:2C:9D:88
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B81EAB557C5283BC749F40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa
Signing time:             Mon 18 Mar 2024 22:08:47 +0000
ROA not before:           Mon 18 Mar 2024 22:08:47 +0000
ROA not after:            Sun 16 Jun 2024 22:08:47 +0000
asID:                     395973
IP address blocks:        104.134.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:1e:ab:55:7c:52:83:bc:74:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:08:47 2024 GMT
            Not After : Jun 16 22:08:47 2024 GMT
        Subject: CN=2ff8b33a-340b-40a1-9c2c-19ea215cdda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:ff:91:2a:a0:e3:51:82:7b:f7:a5:d0:f7:
                    43:8a:f0:b4:01:f9:43:89:0e:c8:35:51:c7:ff:96:
                    c6:9d:1b:33:46:36:4d:bd:01:c3:92:09:2a:fd:63:
                    9a:2e:c3:8e:24:5d:10:17:59:93:f9:1c:87:50:0b:
                    69:37:e7:66:2d:d5:c2:41:9b:64:03:e8:94:a8:e5:
                    7f:da:a7:23:5b:07:47:07:c5:43:f8:9c:31:69:14:
                    c7:e0:dc:31:0f:d6:80:11:9e:f9:4a:fc:e4:a7:8a:
                    f1:f5:73:35:bc:f6:b8:5e:25:56:54:cc:d3:e1:24:
                    db:53:49:a6:55:7c:e8:4e:7f:83:bd:91:1a:e8:a4:
                    02:2f:76:6b:32:fd:57:04:7b:05:c8:bb:9e:be:2b:
                    05:9d:50:f4:88:9f:43:1a:3d:8a:2d:68:7f:f8:24:
                    f4:9e:72:d6:57:12:44:f0:2f:3d:a8:9f:85:7c:0c:
                    c8:ed:8d:d9:23:04:c5:c7:6c:18:41:68:2c:01:ef:
                    bd:02:ae:54:e5:20:f0:82:3b:46:6d:d3:48:da:fb:
                    6f:e7:c2:ed:47:72:34:99:f3:8e:3b:2e:9b:45:81:
                    29:ad:e5:81:65:46:42:06:4f:d6:1c:75:a8:58:dd:
                    5e:37:92:d8:16:6f:92:b3:1e:65:19:e0:1d:e2:05:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A6:D9:70:52:0A:9D:3C:FC:40:6E:50:D7:90:35:48:5D:2C:9D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:62:1e:82:1a:b7:76:7c:7a:25:08:a4:8b:5d:fe:50:a2:8f:
         ea:8b:1e:04:97:1d:60:5b:68:1d:76:25:e8:66:88:8a:ea:b9:
         f8:41:d3:42:95:89:3f:81:da:0e:9a:18:45:d3:da:d1:45:b3:
         52:cb:e1:c8:88:6c:9f:c0:f2:81:38:20:b4:28:d5:37:18:8c:
         71:f8:93:7a:70:31:93:59:62:30:fd:59:ad:6f:c4:56:08:98:
         bb:49:bd:45:44:1b:a3:79:fe:35:1d:08:0a:f5:5e:34:e0:4a:
         a8:f4:ea:c7:42:10:b6:8e:d6:99:55:e8:8f:fa:f4:ee:d7:ee:
         c3:3b:6a:73:cd:90:25:00:6a:6f:b6:06:e0:d8:48:cb:3c:2e:
         ed:6f:6e:f4:b7:15:0a:0f:09:68:28:cb:14:c9:69:a7:09:40:
         dd:06:39:27:84:15:42:de:f1:02:0d:c5:21:66:01:59:e1:60:
         44:60:fc:5c:70:a0:6a:83:8f:df:c7:5d:f5:77:e8:4e:77:d3:
         e3:1b:33:24:b8:b9:f5:08:96:4e:7c:f2:75:60:62:84:3f:fc:
         16:3b:92:5f:44:95:04:69:1b:16:f0:5a:2a:40:85:78:eb:11:
         26:4d:f3:dd:06:37:d2:f7:e1:25:7c:17:96:92:96:a7:15:50:
         c5:7c:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:28:29 2024 by rpki-client on console-fra.rpki-client.org