Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa
File:                     0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa (raw, json)
Hash identifier:          8wqT90UYd+IYJaq3ylPiI2NZ15NBhFMxp3V6i4W92DA=
Subject key identifier:   E3:2C:0D:10:F5:65:5E:1A:14:D1:36:96:A5:C7:DC:E4:49:36:1F:D5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1B93FE6D6E7287386980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:1b:93:fe:6d:6e:72:87:38:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=11f5580d-54c0-44d5-b881-cd5c55798c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:f1:c2:8d:98:36:f7:8c:fa:18:a4:1a:cd:
                    59:ae:de:ae:23:0c:7d:7b:b0:ed:29:47:30:e2:14:
                    1d:9d:2c:fa:66:15:40:cf:5e:77:e2:28:c2:2e:ee:
                    96:ee:eb:b4:7c:06:f4:6c:42:7d:20:24:25:96:9b:
                    eb:0d:d1:5a:d5:bc:6d:59:81:41:c9:8d:3a:cb:d1:
                    68:07:14:bb:bc:b1:6e:f9:b2:4c:4a:95:9d:99:d0:
                    55:d9:22:93:22:e1:85:29:e4:cf:d8:e4:51:53:8d:
                    58:bd:2a:e9:16:a6:69:a0:2a:f0:f3:7d:a2:a3:5e:
                    98:95:9e:7b:1d:55:53:58:5c:81:84:00:5d:43:f0:
                    ca:a7:bc:90:a7:d5:98:b0:91:8f:2b:10:6e:c0:fb:
                    38:47:10:77:a8:f5:b0:d8:b0:64:6b:8f:3f:15:f1:
                    ef:10:c9:e7:9e:24:40:ea:6f:8e:fa:99:41:b9:82:
                    1f:be:61:14:b0:79:ea:53:e5:f1:be:0c:27:c9:52:
                    6d:2e:33:a4:1f:39:5b:7d:1b:31:56:b9:73:8c:61:
                    f0:8f:b3:84:c4:5f:66:54:5d:0c:e1:41:00:8a:56:
                    1b:31:32:63:3b:eb:1d:0f:98:6a:04:16:d7:32:87:
                    47:f4:d1:60:06:6e:dc:32:71:f6:fc:f2:44:08:fc:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:0D:10:F5:65:5E:1A:14:D1:36:96:A5:C7:DC:E4:49:36:1F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:3b:7b:b5:35:3c:02:e2:71:7a:ae:66:7f:68:2f:aa:30:
         e5:97:61:95:3d:19:5e:36:56:5b:9c:8c:b7:b4:1d:35:2b:db:
         1c:78:f5:3c:e6:a8:18:7c:57:d0:13:01:f0:7d:8a:19:6e:b8:
         66:be:b6:33:37:4a:8c:3c:67:15:3f:21:0a:8e:e5:e8:90:40:
         d1:40:f0:fe:55:b3:53:db:23:b7:39:b5:a6:29:84:e9:ef:9f:
         84:e1:eb:bf:0a:89:bd:1f:44:54:56:d5:2e:71:7d:11:6a:0d:
         e7:7c:a8:8e:a6:e8:21:fa:1b:e2:06:37:81:86:ad:8c:1f:91:
         ed:55:34:a0:cf:0d:58:aa:0d:0e:e4:3d:9e:62:0e:53:79:1c:
         ac:05:7e:da:da:f0:c4:eb:95:b4:61:01:d6:3f:9c:ca:03:7a:
         28:3c:03:f7:0a:08:45:5a:99:1f:91:7c:2c:6a:c9:b1:aa:4d:
         52:8b:95:78:ae:3b:5a:fd:c3:64:28:5f:e1:f9:a9:6d:77:31:
         05:a5:8d:7d:10:ae:4d:23:ff:07:12:fd:15:8a:53:9d:47:aa:
         79:b6:78:63:15:05:d3:01:a2:d5:2a:6e:aa:35:13:4d:de:88:
         5e:05:94:e2:0b:86:31:5c:4f:08:6b:d1:67:37:e4:70:1b:3a:
         54:72:a5:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVahuT/m1ucoc4aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
MTFmNTU4MGQtNTRjMC00NGQ1LWI4ODEtY2Q1YzU1Nzk4YzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfLxwo2YNveM+hikGs1Zrt6uIwx9e7DtKUcw
4hQdnSz6ZhVAz1534ijCLu6W7uu0fAb0bEJ9ICQllpvrDdFa1bxtWYFByY06y9Fo
BxS7vLFu+bJMSpWdmdBV2SKTIuGFKeTP2ORRU41YvSrpFqZpoCrw832io16YlZ57
HVVTWFyBhABdQ/DKp7yQp9WYsJGPKxBuwPs4RxB3qPWw2LBka48/FfHvEMnnniRA
6m+O+plBuYIfvmEUsHnqU+XxvgwnyVJtLjOkHzlbfRsxVrlzjGHwj7OExF9mVF0M
4UEAilYbMTJjO+sdD5hqBBbXModH9NFgBm7cMnH2/PJECPzZ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMsDRD1ZV4aFNE2lqXH3ORJNh/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGI3YmNlM2QtODIyMC0z
ZTZiLWJkYTQtMzRiYmU5ZjBiMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4aO3u1NTwC4nF6rmZ/aC+qMOWXYZU9GV42VlucjLe0HTUr2xx49Tzm
qBh8V9ATAfB9ihluuGa+tjM3Sow8ZxU/IQqO5eiQQNFA8P5Vs1PbI7c5taYphOnv
n4Th678Kib0fRFRW1S5xfRFqDed8qI6m6CH6G+IGN4GGrYwfke1VNKDPDViqDQ7k
PZ5iDlN5HKwFftra8MTrlbRhAdY/nMoDeig8A/cKCEVamR+RfCxqybGqTVKLlXiu
O1r9w2QoX+H5qW13MQWljX0Qrk0j/wcS/RWKU51Hqnm2eGMVBdMBotUqbqo1E03e
iF4FlOILhjFcTwhr0Wc35HAbOlRypd8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:46 2024 by rpki-client on console-fra.rpki-client.org