Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4afadb3-fb7a-3bb9-a31f-736f5b977eff.roa
File:                     f4afadb3-fb7a-3bb9-a31f-736f5b977eff.roa (raw, json)
Hash identifier:          9n7pY4oPwJCFanku3nptBuJtJ/c46S8Nc69CR7+wlq0=
Subject key identifier:   B3:03:81:A3:B5:9C:F2:83:0E:A8:23:6E:82:2B:8B:11:E7:8F:51:80
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A081ACABB6A0DB4BDDE50
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4afadb3-fb7a-3bb9-a31f-736f5b977eff.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:08:1a:ca:bb:6a:0d:b4:bd:de:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=cc251ed7-ce46-49d2-bda3-90106cbc6e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:f0:15:4b:1e:22:ef:9e:55:82:0f:fc:27:
                    73:bf:29:05:e8:48:8a:bb:e3:90:f4:21:45:3e:53:
                    d0:53:65:53:c2:d0:46:3f:dd:35:2e:33:ae:87:51:
                    52:fc:2b:2d:1a:a6:1e:80:e1:ee:75:9b:6b:6b:4d:
                    4e:84:4b:2b:ba:56:3f:0e:88:0f:d0:a0:00:39:3c:
                    72:b2:78:e4:ad:bd:d3:ba:78:40:aa:0b:74:8b:f1:
                    cd:f7:2a:ef:16:0e:41:34:8a:66:10:42:17:30:f5:
                    ad:3f:1f:80:67:d9:8a:40:79:f2:61:b7:87:d9:de:
                    a5:9c:0d:49:13:d9:e5:bb:91:8e:82:83:62:89:d1:
                    51:e5:4a:9f:61:a5:70:e4:4b:ef:d4:6c:a0:16:41:
                    9a:7a:1d:c2:1e:39:72:9f:8c:14:f1:ed:13:14:63:
                    31:a2:e7:75:6d:88:ab:09:31:b7:1e:b1:eb:97:dd:
                    3e:f3:ca:59:52:e2:00:53:2f:71:dd:a8:ac:ea:ff:
                    f7:ad:da:14:2f:ce:ab:b0:85:32:73:9c:65:0a:06:
                    73:b4:26:c5:53:27:25:be:8d:43:1e:00:e8:8d:43:
                    ae:86:15:9b:23:f6:ea:8f:27:30:13:f8:8b:d8:ef:
                    b9:3a:3f:95:1c:6c:a2:d4:3a:cf:fc:49:d3:fb:e4:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:81:A3:B5:9C:F2:83:0E:A8:23:6E:82:2B:8B:11:E7:8F:51:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4afadb3-fb7a-3bb9-a31f-736f5b977eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fa:e7:57:91:9c:63:33:da:17:6f:1d:0b:ec:8b:cc:50:d7:
         30:6f:d6:60:c2:62:99:30:f2:db:02:c9:9f:07:c1:d1:0b:27:
         40:61:9c:f0:35:8a:70:c4:17:b0:f7:d5:39:a2:fb:35:5c:13:
         c1:d3:68:b6:b5:02:11:a3:89:18:48:71:85:f6:11:ee:79:81:
         85:62:7d:05:2c:ea:9c:d2:9f:9e:7e:69:d9:11:e6:c3:87:0c:
         13:72:43:5a:85:3b:e0:93:15:a6:a2:38:3d:41:3d:da:34:49:
         e7:4e:55:88:da:21:10:23:77:7f:f3:a6:0f:3f:1d:40:fb:2a:
         2d:d7:40:ec:0c:2e:be:8f:a1:15:ce:34:ef:87:83:28:5c:af:
         51:3d:cb:f7:88:9b:ec:17:68:f1:22:29:28:b2:9f:e6:3e:a3:
         f9:48:23:74:65:d3:af:b4:a4:89:1d:be:9e:c9:1e:57:1f:95:
         0e:5f:45:75:07:73:a1:59:c9:de:28:1e:35:8e:87:73:09:7a:
         3f:38:71:86:f7:e7:ae:6f:b7:36:92:cc:5d:51:2d:c7:c7:61:
         fd:3b:af:bc:88:c7:dd:46:5f:a7:fb:e7:ce:81:87:8e:45:a7:
         08:6e:90:72:4c:35:f3:07:f1:17:31:28:45:ed:68:76:67:27:
         e4:6e:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:58 2024 by rpki-client on console-fra.rpki-client.org