Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
File:                     e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa (raw, json)
Hash identifier:          Lx1RSuW68W501ACRq4XXMrEzwzSPA0RVx3EU8KTQS4c=
Subject key identifier:   06:21:C2:E0:A2:D6:3D:92:28:60:C1:06:69:CA:BE:83:67:2D:E6:FF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A05ABF40AE1FA741BD800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     395973
IP address blocks:        104.134.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:05:ab:f4:0a:e1:fa:74:1b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=73d3d0ea-d987-4e08-b0af-e19e21dfc9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:d4:17:a7:cc:71:5f:31:4a:3e:43:07:44:
                    e3:ef:ae:51:8d:75:e9:1a:b8:89:2f:c6:57:4b:1c:
                    e6:a1:43:21:61:2d:99:6e:53:13:3a:7f:79:fb:51:
                    26:7c:6d:59:ef:3f:c5:46:ba:a6:1b:3a:28:4a:13:
                    75:3e:5b:29:b4:59:ef:2b:51:97:4a:d1:4a:a6:b1:
                    62:4b:02:51:bb:35:ec:50:5e:27:f9:c5:a5:aa:8e:
                    59:4b:4e:77:c0:17:48:d0:22:b2:84:79:90:55:f0:
                    fb:e4:ea:34:a8:38:0d:a4:16:ae:4f:40:31:2d:dc:
                    0d:fb:fa:5e:73:85:63:b2:d5:20:ea:eb:fe:6c:c3:
                    fc:f8:0a:de:8c:68:b2:b4:d0:c4:c6:f2:5a:2f:5e:
                    56:39:7a:a4:48:49:3d:c9:a3:a8:ed:49:9b:78:5e:
                    2f:16:d4:15:fa:9c:11:bb:5c:d5:f6:32:28:8f:9b:
                    13:66:7f:5c:bd:a1:4e:18:99:18:d0:ec:6a:e1:df:
                    77:79:95:c7:65:1b:85:3c:75:e1:55:2d:c9:a0:14:
                    67:15:dc:02:35:1d:f7:84:2f:2c:65:92:b8:b0:1e:
                    68:7d:bc:29:5e:88:6e:5e:79:94:e0:d8:6c:6d:0c:
                    66:a4:51:51:a1:c1:34:63:e6:1f:97:a2:21:61:9a:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:C2:E0:A2:D6:3D:92:28:60:C1:06:69:CA:BE:83:67:2D:E6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:7b:f7:6d:53:5a:c1:dc:df:01:50:9b:d7:09:05:f0:04:
         dd:b8:c6:b3:c3:12:d0:c8:4d:fc:6b:9b:8e:67:17:a1:ab:8c:
         81:55:d0:46:f9:8d:17:4f:bf:40:80:18:12:83:8f:9e:bd:37:
         8e:24:33:f7:1e:93:8e:b3:b3:b7:97:29:a5:ab:ca:c5:fc:0f:
         3a:4f:48:de:91:70:bf:b8:6c:54:ae:1b:57:d0:81:ca:25:67:
         bc:d0:f6:8b:51:40:2e:52:d2:cc:0e:39:99:a7:5d:1e:19:bf:
         f3:90:28:f4:5d:db:32:cf:cc:8c:0d:ea:06:69:dd:01:4b:06:
         2b:92:9b:f5:92:81:bf:8b:40:f2:7f:2a:10:c7:31:63:b7:a3:
         e3:b4:61:cd:3d:52:58:b2:98:88:1a:4f:7a:14:e8:35:6b:05:
         62:ab:03:97:33:87:b4:70:b2:f3:61:af:47:ba:61:0e:b3:f5:
         75:e3:82:ab:cd:5b:c5:f7:da:f5:3f:e0:82:e1:8a:32:1c:d0:
         e6:81:0f:a4:06:69:11:8f:80:0b:68:78:0c:53:46:5b:dc:0c:
         9f:0d:3a:7c:aa:b9:c4:d7:f8:d2:30:ba:65:d0:f4:75:93:70:
         d0:09:13:22:41:49:bf:8b:7b:69:80:33:40:f2:3d:42:e6:f3:
         57:9c:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:57 2024 by rpki-client on console-fra.rpki-client.org