Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa
File:                     f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa (raw, json)
Hash identifier:          15tmW2XRVuV57XLtbpv4LjUz94h9lxvt7fay329kDTY=
Subject key identifier:   56:FB:3E:96:E5:E2:02:24:B5:8C:58:82:B1:00:28:CA:0A:3E:A7:D5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D29F741BABDB84D3E12AE600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.132.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:74:1b:ab:db:84:d3:e1:2a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=578576a6-8307-4be6-9e97-498072a409e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:6d:8a:1d:a9:ea:a3:18:27:cb:a2:94:cc:
                    77:ff:9e:db:13:fb:49:4e:c6:e6:7e:51:95:f0:f7:
                    42:6f:62:9b:e6:e6:f4:5e:d8:75:14:19:8c:89:8d:
                    0a:90:0d:5f:ee:b6:25:eb:fc:f9:f2:d5:7c:1c:ff:
                    7f:d0:44:1c:93:6c:06:22:b3:db:33:11:15:fb:c0:
                    bc:0b:9a:84:37:b6:10:d0:43:ee:25:4b:7e:4f:40:
                    95:bc:bd:95:46:0b:3a:d1:64:b6:c9:e5:13:c5:31:
                    e7:dc:06:e1:ea:05:e1:57:c1:7a:ec:1d:ba:f4:db:
                    84:db:1c:c3:5f:10:af:18:e7:6d:4c:fe:29:c2:9c:
                    a2:45:c6:b9:b6:1a:e1:e3:b4:9c:2b:e0:03:1a:69:
                    1a:7b:0c:dd:82:25:7d:20:b0:f1:b9:20:b1:63:12:
                    23:ce:b9:55:ec:44:b2:74:60:ff:99:de:c8:ab:11:
                    4e:3c:cd:6d:f4:e7:f1:91:bf:35:40:75:30:ac:53:
                    53:26:8f:32:c9:6f:3f:aa:4a:ba:1d:ba:69:bc:17:
                    33:4d:28:a0:30:2b:ca:49:7a:dd:b1:26:8b:87:da:
                    39:11:57:24:64:2c:f4:b8:f1:f8:45:88:b5:c5:93:
                    28:ad:84:70:5a:f8:6c:07:61:84:80:ee:67:48:a5:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FB:3E:96:E5:E2:02:24:B5:8C:58:82:B1:00:28:CA:0A:3E:A7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:7c:1f:2f:6e:c0:3a:17:55:e0:da:b4:be:f1:2d:61:40:
         d6:b3:a9:c2:3f:f5:ab:a8:6c:46:04:ec:5f:0d:6a:c2:51:75:
         90:eb:cd:9e:49:c4:70:19:f2:fa:42:87:84:77:34:20:40:c3:
         de:f4:8c:61:59:e7:90:89:e5:75:5e:95:19:d3:89:67:ac:b7:
         7d:57:57:35:7c:a4:11:d1:d2:24:53:13:c2:49:65:ed:d7:75:
         16:60:b2:a4:ab:bb:4a:ba:51:1d:cc:a2:9e:16:98:2f:89:1c:
         79:1d:cb:06:13:0d:63:31:21:5b:d1:bf:20:0c:2e:1b:08:d7:
         78:36:62:44:49:b4:89:64:4c:e9:11:20:5d:87:1b:ca:52:f4:
         30:34:d3:a6:8a:d8:9f:06:3c:76:48:2f:c8:a5:b5:73:29:ba:
         67:95:2a:fc:da:c7:53:51:bd:18:b8:86:e0:f7:bc:e1:01:dd:
         b3:81:d1:2c:c6:04:22:43:e8:26:ee:bb:a8:be:1a:95:bc:39:
         f4:d2:d3:b0:67:b3:f9:db:47:8e:e2:04:09:e6:02:d1:7b:04:
         0e:df:88:65:19:cf:fa:38:0e:be:e6:f5:b9:2b:17:45:4f:91:
         68:f8:7d:3d:6a:50:2c:e0:8f:3c:55:7b:31:b5:b0:ca:c5:84:
         0e:35:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:51 2024 by rpki-client on console-ams.rpki-client.org