Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
File:                     e0cdd86f-bef6-3429-846c-e793c0db3717.roa (raw, json)
Hash identifier:          GEliojtnqP5avCUasUiKym2vog2ZJUV/pyTbLx2SNgI=
Subject key identifier:   A4:74:15:35:A4:3F:B7:2E:E5:67:2A:A8:20:F3:1E:B1:C7:29:F6:76
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0D7D63BB4EFA6819AC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:0d:7d:63:bb:4e:fa:68:19:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=d7f080ff-29fa-4f00-8e32-92660912a024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f7:7f:d5:39:a7:70:2f:5c:1a:92:a4:ee:13:
                    c9:53:d1:2a:39:4f:bc:ce:9f:bc:3c:00:7d:6b:57:
                    b5:a5:a9:04:ce:b1:76:32:b0:93:47:79:1f:00:48:
                    f5:3d:39:a4:ae:32:ca:62:27:6a:56:e8:a6:01:0e:
                    89:ef:b5:49:e0:b9:73:41:09:ef:da:76:08:7c:35:
                    8a:c7:04:46:8c:92:d6:5f:e8:17:03:e1:33:6a:77:
                    8d:12:51:59:09:09:ad:ed:b2:5b:47:38:29:9d:47:
                    a8:1f:7b:89:a0:7f:56:bd:a9:53:47:19:a3:8c:7f:
                    ff:05:1c:18:36:83:c6:af:a4:f7:de:9e:52:58:02:
                    ad:a6:6c:98:bb:cc:46:ca:60:8c:dc:9f:6a:ed:8e:
                    ea:30:f1:3b:06:80:11:a9:a0:3f:56:74:bd:a4:f7:
                    ec:ab:0a:a8:10:7a:40:79:db:96:f0:07:0f:f3:0c:
                    9c:c5:14:85:ef:ac:66:d5:74:de:d2:ce:78:17:e7:
                    bc:de:13:7a:0b:7a:11:fa:5d:9b:53:fb:32:03:2d:
                    00:52:3f:ae:13:8e:3a:4a:3d:cc:84:14:c4:d2:2c:
                    9a:5a:c9:37:ab:04:37:f1:46:a6:ce:0b:d6:bf:7d:
                    6c:a0:78:5b:cf:47:b9:4f:08:bd:77:35:08:43:a5:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:15:35:A4:3F:B7:2E:E5:67:2A:A8:20:F3:1E:B1:C7:29:F6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:04:02:27:73:7e:55:d2:bf:0a:bc:56:c8:f7:93:a5:59:
         3e:05:bf:7c:f2:33:dd:eb:37:2b:25:60:ed:78:f2:cf:57:0e:
         37:a1:72:fa:df:88:c1:08:a9:aa:11:98:22:67:05:b2:c7:f2:
         4b:c7:30:57:34:6e:b4:64:69:8e:b4:26:5e:e4:81:52:16:2f:
         b9:f9:43:4f:b8:2e:70:ad:52:da:66:b2:2b:0b:ec:25:74:61:
         a6:9c:f2:ab:73:35:21:c8:2f:86:75:46:5a:73:f1:48:ee:37:
         14:4e:3f:be:2b:f3:b7:84:f9:9d:26:a3:9a:87:f9:54:3b:d7:
         19:e0:18:e2:74:be:eb:32:64:62:58:e9:8d:b3:4f:6a:c0:91:
         95:ee:a8:5a:83:ff:b7:83:10:91:cc:aa:61:67:83:a2:6a:57:
         13:b6:f6:d5:ee:7a:5f:4b:46:52:cf:4c:90:ed:0d:26:5d:b3:
         c5:e6:7c:ad:16:58:eb:c0:3a:cf:da:73:91:1b:4e:e2:34:35:
         b2:27:76:24:0a:49:99:df:30:08:83:09:77:df:c2:02:43:83:
         b3:0d:e5:75:8f:df:25:56:1c:3b:46:61:81:d1:8f:ad:2a:0e:
         56:88:60:ec:ff:ba:5c:c1:b9:41:ee:fc:99:14:11:9d:95:cd:
         e3:72:86:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:59 2024 by rpki-client on console-ams.rpki-client.org