Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa
File:                     dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa (raw, json)
Hash identifier:          U0Q5tKMzJbqu8KFOLgusCtyCO6Ow87FBNhZ09LyeLTw=
Subject key identifier:   05:36:F4:6B:BF:4E:06:60:D0:2D:8F:6D:09:38:7E:C0:CC:B6:97:FB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847CFD4C049D0887146795D8200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     41264
IP address blocks:        104.132.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:c0:49:d0:88:71:46:79:5d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=8fab3bb8-e46c-447d-a7a1-27c19052b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:80:bc:83:de:e6:8a:b3:43:37:21:01:07:
                    8f:45:4c:f9:5b:ce:b7:29:53:1c:35:a1:87:b0:6c:
                    fe:a7:83:f2:00:9c:90:86:3c:be:be:48:5f:79:8e:
                    21:ec:f6:e2:12:8d:85:ba:4b:31:d9:3f:84:7f:5a:
                    9c:63:26:53:a4:4c:dd:a2:0c:96:ed:c3:0c:0d:a4:
                    f8:da:03:ad:41:1e:1f:e7:15:9b:57:6d:ad:91:1f:
                    0d:ea:76:9e:fb:48:02:72:85:c5:b9:63:5a:f2:5b:
                    bd:5c:14:1b:20:41:0c:9d:d4:f7:55:f3:be:eb:7f:
                    a4:13:7d:ef:21:a7:37:a6:08:8b:67:8e:d3:3c:87:
                    52:d3:d9:36:54:58:10:4b:59:b0:df:7b:94:33:6b:
                    1d:a3:cc:13:53:00:64:44:db:03:5b:36:9c:56:7a:
                    e9:4b:ee:ed:bc:cf:30:8c:1a:79:a9:70:e6:c1:30:
                    6b:a1:90:33:36:b2:ea:88:43:2f:a9:08:24:03:d8:
                    00:c9:37:25:bd:c8:17:ec:ba:5e:60:d3:02:d8:a3:
                    49:32:a7:ff:3b:2e:47:03:d1:dd:6d:3d:bb:a3:01:
                    33:9d:15:c3:b0:d0:45:84:9e:71:d5:a0:21:47:20:
                    79:27:91:29:9b:fe:52:55:48:3b:1a:fc:ae:de:b2:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:36:F4:6B:BF:4E:06:60:D0:2D:8F:6D:09:38:7E:C0:CC:B6:97:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:6f:4d:a5:17:d4:c6:0d:0e:54:90:a8:69:f8:b4:95:15:
         11:ec:4e:18:e2:e7:80:f0:9e:8e:bf:bc:b1:ba:c7:02:be:c6:
         07:e6:d5:cb:0b:38:05:01:e5:ec:75:10:61:ab:2e:ac:82:71:
         43:aa:d2:15:0e:21:09:66:06:01:dd:1f:25:6a:14:85:15:69:
         ad:43:14:32:08:2f:b5:d8:3a:57:fc:cc:7f:87:f0:ca:91:4f:
         d5:da:71:da:e7:68:a4:f7:f4:2d:8f:54:f9:ad:4b:75:0f:4d:
         56:95:ba:aa:b6:90:b1:de:60:f6:8f:3e:77:93:85:55:4a:af:
         53:7c:a1:b4:5a:b2:cf:29:92:21:0f:13:f6:65:2e:b9:ba:43:
         0b:c4:5f:ab:93:c2:f0:d1:1b:93:54:54:71:5f:19:99:0f:68:
         9e:a2:80:d8:13:c1:15:3e:bf:b6:38:32:6d:ed:93:da:b0:8a:
         4c:e6:65:c2:87:70:ba:8e:78:08:39:fa:1b:d8:21:df:c9:9c:
         0e:d6:23:a4:1e:57:0d:c5:50:96:ca:66:1a:9f:ae:c9:13:15:
         31:11:e9:21:9b:38:75:dd:ab:b7:60:49:35:72:ab:71:cd:d3:
         5e:44:ff:b4:b8:d7:1f:97:02:4e:ec:f6:1a:8a:75:30:36:10:
         76:c4:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:56 2024 by rpki-client on console-fra.rpki-client.org