Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa
File:                     da9f656f-967e-33d1-a127-ac025a8b8520.roa (raw, json)
Hash identifier:          Cwz3ucgGh15IwicnOY87xZo4pqpslDl/uMKERd7E8zM=
Subject key identifier:   24:09:80:94:EE:17:51:06:DD:5C:A4:16:02:52:89:BB:9E:F4:6F:7A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1AFFF932D6ED963304C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:1a:ff:f9:32:d6:ed:96:33:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=5c56090c-da30-4d48-9cce-85a3623140c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8e:ff:7b:d9:93:a8:82:5b:aa:ee:ad:f5:51:
                    a2:dd:ec:1d:12:cb:c4:d8:00:8b:e6:54:9b:80:75:
                    3d:4a:a6:25:34:05:2b:89:7d:be:eb:fc:4b:a7:11:
                    8f:ee:a7:fc:b9:13:7a:54:2d:fe:3a:d2:26:a4:55:
                    e3:67:44:7b:ee:d3:50:cd:18:30:61:97:4e:f5:e1:
                    40:e5:d1:be:d0:35:8a:26:a4:70:73:f4:99:b2:e8:
                    7a:6e:77:af:86:f0:6d:f7:98:9c:00:ca:20:2d:ad:
                    64:db:5a:4e:1b:58:05:ea:92:98:6b:49:ef:63:cb:
                    b4:b3:8b:e6:67:5d:7f:ca:3e:ea:c7:f5:c8:8e:c0:
                    a9:52:d5:0c:b1:eb:49:f0:4c:3f:fd:56:b3:24:10:
                    7f:2f:b2:6b:95:97:b1:54:28:1e:85:0d:82:92:6a:
                    a3:eb:09:4d:43:5a:1b:aa:e5:4d:db:f4:03:68:42:
                    1e:59:3e:e5:4d:cd:c4:f5:89:86:f6:bf:5b:14:ca:
                    d3:46:8e:4e:2d:98:c7:ee:96:c2:8d:b3:c3:6e:4b:
                    65:0c:c9:d9:a8:40:e6:85:99:0c:33:53:d7:5b:36:
                    93:be:47:fa:01:7b:86:f0:7f:4b:c8:94:b7:eb:1d:
                    53:4e:a4:7f:12:13:74:74:b7:3d:40:be:38:86:ba:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:80:94:EE:17:51:06:DD:5C:A4:16:02:52:89:BB:9E:F4:6F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5f:fd:cc:6b:83:2d:02:ac:8e:80:66:de:2a:d6:46:a2:f2:
         df:80:ab:de:b9:a3:19:63:37:c8:2f:ce:fd:3f:a9:6a:9a:ec:
         37:4b:19:84:81:5d:ff:62:34:df:0e:0a:cc:87:7a:e5:97:12:
         f5:37:d8:83:4f:45:06:96:e0:e7:a3:bc:1c:58:bc:fe:d3:08:
         35:37:06:ba:9d:6c:d4:f7:a3:e6:d0:27:c4:18:80:b9:6e:4e:
         6a:99:65:09:f9:c2:d3:9b:76:12:d9:84:df:26:d2:de:92:48:
         02:8d:2b:0d:14:11:38:40:a3:eb:03:57:20:fc:02:b4:b5:2c:
         56:89:bc:42:21:84:d1:70:9c:e9:9b:05:db:75:b3:52:38:92:
         1f:8e:af:5f:03:0c:20:ce:dc:67:f7:cb:5f:d3:4f:ef:98:f3:
         f8:de:af:58:49:02:e3:a1:82:06:6d:06:d4:bb:68:f4:2a:c9:
         c5:f0:c2:67:9b:03:33:e5:81:7f:6f:c6:0d:b6:7c:11:3e:79:
         13:c1:43:8e:11:86:05:40:44:e1:04:8b:ab:3d:d5:06:bd:55:
         2a:53:c6:0c:a0:25:4c:2a:fe:f4:cb:74:ce:51:d2:93:59:52:
         3f:39:36:87:f5:39:00:d0:f7:98:03:70:25:2d:eb:7f:8d:97:
         e6:1b:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:13 2024 by rpki-client on console-fra.rpki-client.org