Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa
File:                     04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json)
Hash identifier:          IhZEBEZQSt9QAYAG3jHTjAGiuMvZM0qAnpMXD6NpNkk=
Subject key identifier:   5C:7C:23:82:E0:F6:86:77:6C:4A:1A:5F:68:39:C2:35:F5:76:3E:E6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1BC7767C2C45241EFEC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:1b:c7:76:7c:2c:45:24:1e:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=e98be986-ed33-47e1-9b91-8571d6e0ebe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:6c:e3:0b:65:a2:56:02:fd:43:6f:3f:85:
                    53:7d:eb:1a:5d:4b:a8:98:19:48:91:5d:08:36:98:
                    9e:ec:a5:fa:b2:92:2c:11:2f:82:a9:ff:18:58:6b:
                    86:06:44:e2:28:93:00:16:ec:61:1b:d7:bb:dc:fb:
                    ab:23:e8:a8:a8:76:a6:2f:d6:b0:f5:d8:e1:5a:d8:
                    18:92:96:61:94:6d:14:aa:38:25:54:7a:41:22:dd:
                    82:7c:91:8f:02:60:20:52:fe:3e:ad:6b:c4:37:98:
                    f2:e7:d4:39:b3:ef:a2:3d:58:66:0c:fe:99:22:d6:
                    78:47:a1:40:64:a1:02:39:22:bb:1b:93:27:63:1b:
                    1d:82:62:b0:06:db:6b:ed:d0:e7:cb:57:13:45:65:
                    37:26:74:fc:2b:27:c4:59:e8:c1:25:96:dd:e1:2a:
                    a8:89:26:2c:15:81:ee:10:d5:95:58:d1:c5:5a:1a:
                    7b:c5:90:82:10:4d:15:81:dc:b9:74:d3:f7:29:19:
                    11:41:0e:6f:24:0d:4e:70:6f:6e:96:36:bd:1b:cf:
                    13:41:50:f0:ed:bb:17:8f:53:15:ed:bb:97:50:fb:
                    25:bf:20:fb:52:d1:c6:46:e4:16:78:5b:dc:f2:84:
                    aa:0a:99:18:18:bd:14:90:9f:c0:d0:89:8f:fe:5b:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7C:23:82:E0:F6:86:77:6C:4A:1A:5F:68:39:C2:35:F5:76:3E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:68:2b:a7:75:35:60:7d:65:60:cb:9c:16:b1:3b:4c:f6:
         17:ae:d3:2e:dd:a8:8a:69:42:cb:5b:9c:20:7d:4a:b0:6c:44:
         40:1f:62:7e:d1:97:9d:36:40:b5:38:49:83:48:d5:6f:b5:58:
         a0:de:81:54:7c:d9:a4:32:de:a2:86:18:96:7c:f3:ec:47:a0:
         d1:3b:01:76:f9:9b:a5:a9:eb:ba:a7:dc:d2:cc:17:d8:d6:9e:
         93:42:40:2e:b9:83:ed:8c:ed:60:c9:5e:e5:e4:d0:99:2a:9b:
         9b:cd:aa:40:f4:28:72:b7:4f:fe:5a:18:03:63:26:f8:92:5e:
         79:0e:a0:81:37:d6:45:0b:df:d1:34:5d:72:8f:af:09:c9:6a:
         6d:00:97:8a:06:ae:19:e7:85:70:1a:a5:e8:3b:df:18:78:9b:
         24:8b:7d:0f:c2:59:90:cc:5c:fe:e3:63:fd:4e:73:22:22:ca:
         56:33:cc:df:ef:26:6f:f2:f1:7b:75:8b:d5:12:6b:b7:a4:03:
         cf:1b:09:52:bd:eb:47:54:bc:cc:56:6c:7a:c5:6c:5d:dd:fb:
         c3:27:01:3f:02:d9:c6:ac:49:cf:78:94:67:aa:5d:cd:54:45:
         4e:6e:19:39:81:5c:6f:76:94:b0:73:7a:e4:32:8b:08:e4:d7:
         e4:2f:5c:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVahvHdnwsRSQe/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
ZTk4YmU5ODYtZWQzMy00N2UxLTliOTEtODU3MWQ2ZTBlYmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX9s4wtlolYC/UNvP4VTfesaXUuomBlIkV0I
Npie7KX6spIsES+Cqf8YWGuGBkTiKJMAFuxhG9e73PurI+ioqHamL9aw9djhWtgY
kpZhlG0UqjglVHpBIt2CfJGPAmAgUv4+rWvEN5jy59Q5s++iPVhmDP6ZItZ4R6FA
ZKECOSK7G5MnYxsdgmKwBttr7dDny1cTRWU3JnT8KyfEWejBJZbd4SqoiSYsFYHu
ENWVWNHFWhp7xZCCEE0Vgdy5dNP3KRkRQQ5vJA1OcG9ulja9G88TQVDw7bsXj1MV
7buXUPslvyD7UtHGRuQWeFvc8oSqCpkYGL0UkJ/A0ImP/ls99wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFx8I4Lg9oZ3bEoaX2g5wjX1dj7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRlNWE1ZGItM2ExOS0z
MTYxLWIxODctN2FkNGNkODA4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNaaCundTVgfWVgy5wWsTtM9heu0y7dqIppQstbnCB9SrBsREAfYn7R
l502QLU4SYNI1W+1WKDegVR82aQy3qKGGJZ88+xHoNE7AXb5m6Wp67qn3NLMF9jW
npNCQC65g+2M7WDJXuXk0Jkqm5vNqkD0KHK3T/5aGANjJviSXnkOoIE31kUL39E0
XXKPrwnJam0Al4oGrhnnhXAapeg73xh4mySLfQ/CWZDMXP7jY/1OcyIiylYzzN/v
Jm/y8Xt1i9USa7ekA88bCVK960dUvMxWbHrFbF3d+8MnAT8C2casSc94lGeqXc1U
RU5uGTmBXG92lLBzeuQyiwjk1+QvXLo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:45 2024 by rpki-client on console-fra.rpki-client.org