Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa
File:                     e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa (raw, json)
Hash identifier:          /GFVUyG3kShjOE0IsxZgN/1JZ1zNjWU2BGo+v90Gzso=
Subject key identifier:   D1:6D:D8:7F:9A:E5:A0:3B:3C:C7:27:1D:0E:64:A9:55:9D:9D:CB:0F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A15A4700F8BABBED2E1F8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     15169
IP address blocks:        104.134.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:15:a4:70:0f:8b:ab:be:d2:e1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=c75573cf-1ea0-41c3-aa6c-0eba79e74903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:fc:17:16:bc:02:14:c1:47:a2:d6:8a:a7:
                    b9:37:bb:00:f1:d9:2a:f1:62:59:47:e2:a4:39:4e:
                    b8:1e:41:a4:96:cf:86:be:58:3b:61:13:f5:f7:d4:
                    5d:b1:63:11:b5:f5:6a:17:b1:64:a4:13:6c:19:e7:
                    5b:08:e9:5d:aa:09:03:14:48:55:d3:cf:8a:b6:b0:
                    75:4b:4b:77:3c:15:86:59:27:a2:cb:b2:8f:cc:c9:
                    7b:b9:51:aa:cb:bf:34:57:e8:60:33:a2:64:9f:60:
                    c6:27:39:f2:b3:fa:7d:7b:1c:3b:6e:43:b3:90:1e:
                    fb:79:2f:ca:ca:66:27:cb:8e:ad:4c:fe:f7:24:7d:
                    73:7d:3c:a5:bb:79:e5:e0:e2:d2:fe:9d:77:74:31:
                    ef:63:e7:39:3f:f2:6f:d9:d8:e3:7a:8f:bb:76:bf:
                    94:67:6f:74:d9:64:0e:70:33:a3:35:ac:fe:07:91:
                    96:33:15:8f:e1:c8:57:77:2f:8d:08:d1:9a:e7:83:
                    87:c8:74:ba:55:ce:4e:c3:56:99:cd:cf:08:b3:48:
                    be:50:cd:7f:61:fc:79:7b:af:18:c9:91:f6:08:6d:
                    f0:05:f4:db:28:bb:fd:62:e7:95:db:bf:3e:22:cd:
                    88:09:ac:5f:7f:ad:8a:c6:52:b7:70:45:4d:b8:50:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:D8:7F:9A:E5:A0:3B:3C:C7:27:1D:0E:64:A9:55:9D:9D:CB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:e6:36:98:85:d8:13:77:81:1b:95:93:24:d5:c3:d5:f9:
         15:1b:e9:74:92:0c:c9:6f:1a:a1:66:34:8d:23:dc:14:1b:f3:
         9c:83:42:27:1e:5c:ac:f8:35:a2:af:3d:aa:8d:16:34:be:f1:
         d3:39:73:74:92:4d:95:23:6c:7f:94:5e:61:12:76:d4:01:ad:
         f4:24:2a:df:4d:42:26:3b:63:88:1e:77:22:89:d9:af:39:f5:
         84:70:32:06:20:b1:ee:6a:d5:c1:e2:40:1c:76:fe:b3:c7:3d:
         1b:1c:0c:f8:a3:da:c1:1a:cb:c9:fb:e5:91:f7:b6:5d:d5:23:
         8e:e5:fd:c8:1e:72:32:e4:85:b0:48:dc:36:4d:2e:30:cb:a8:
         08:1f:f6:93:8e:71:d6:b8:39:1a:41:a3:fd:b7:56:a9:9d:bf:
         d3:f3:cf:68:53:6d:45:d0:5f:fc:9d:4b:4e:b9:0b:9a:6c:5f:
         63:b5:0a:ac:a1:78:ba:91:25:47:a9:52:61:20:4b:60:4b:1d:
         32:99:81:75:d5:ef:0a:d0:bd:26:3d:16:e0:21:5b:db:58:3b:
         73:34:93:88:cf:9b:50:5c:41:90:40:ee:4d:0c:eb:c3:4c:65:
         09:a1:ac:fe:76:f5:ce:e8:94:ae:53:ef:66:f4:25:6a:4e:61:
         c0:f5:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:50 2024 by rpki-client on console-ams.rpki-client.org