Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa
File:                     16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa (raw, json)
Hash identifier:          XKcrF5KSKUC4qdRO30hJio+Kc4oU0aOMXbh4Br296E8=
Subject key identifier:   80:7F:17:E9:52:A6:03:18:83:6E:0E:C7:BD:AE:CA:56:A7:96:70:22
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453583AFEE35EC0BFEE2379080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa
Signing time:             Thu 14 Mar 2024 21:49:15 +0000
ROA not before:           Thu 14 Mar 2024 21:49:15 +0000
ROA not after:            Wed 12 Jun 2024 21:49:15 +0000
asID:                     41264
IP address blocks:        104.133.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:83:af:ee:35:ec:0b:fe:e2:37:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:49:15 2024 GMT
            Not After : Jun 12 21:49:15 2024 GMT
        Subject: CN=583ae9d6-8a37-45fc-95ee-eaa004697247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:63:53:e0:9d:8b:3b:8d:1f:78:02:7a:5b:
                    0c:4e:4d:c0:7c:56:03:7e:17:07:f3:3b:f5:e8:bb:
                    a4:67:ad:b4:83:9f:39:90:cf:fa:68:77:3a:c8:76:
                    e3:9b:14:59:6e:85:47:81:15:9c:ac:62:35:9a:57:
                    96:d2:a0:c0:16:00:a8:0f:2a:b6:8e:90:f0:97:8b:
                    0b:f3:3e:8f:15:a7:d5:e2:fc:62:d2:0f:ed:75:fc:
                    10:79:a6:3b:19:b8:17:f0:94:45:0a:f2:c7:40:e5:
                    70:bf:e7:4e:6a:c1:f8:7c:46:b3:94:36:8c:96:19:
                    7d:b7:68:7d:e3:a8:b7:74:a4:f7:02:64:13:10:e4:
                    62:86:06:89:b2:e6:c1:6c:4d:bb:7c:cf:f2:dc:e0:
                    78:8f:57:61:15:32:b1:32:98:d1:fc:9e:8c:fe:f5:
                    b4:71:39:9a:0e:1c:d1:33:c4:75:65:fd:c0:ce:b1:
                    8e:43:8a:d6:d3:e9:33:27:b3:6a:33:ab:75:a9:a6:
                    16:b0:76:bf:31:20:3f:e3:11:0a:1c:62:6b:d1:95:
                    e7:7d:9f:c7:aa:19:f8:98:9f:05:24:c3:ee:8a:8b:
                    5f:29:31:9c:7c:52:93:66:cf:ce:a4:76:5b:40:3f:
                    6a:3e:fd:f9:87:15:44:08:31:31:2a:ae:c9:78:5a:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7F:17:E9:52:A6:03:18:83:6E:0E:C7:BD:AE:CA:56:A7:96:70:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:48:0e:bb:26:e5:13:91:1a:6f:c2:46:05:79:0e:94:60:
         25:4c:d1:11:d5:c1:c5:56:2b:60:4e:8c:4f:40:6d:dd:dc:55:
         7e:a5:04:f4:61:31:85:d5:94:2e:5a:64:f0:40:27:89:fb:e1:
         bb:78:b2:90:89:ca:fb:0a:4b:d8:7c:9d:30:82:bf:65:61:10:
         07:2c:89:64:02:2b:32:b0:2c:4a:bf:87:bf:67:80:ed:24:93:
         8a:74:ee:08:25:27:36:93:52:f8:75:27:3a:9c:1f:3b:73:19:
         27:ac:a7:84:52:48:b5:63:d4:fe:80:b9:76:26:ea:57:19:de:
         11:69:a2:91:13:c4:b7:80:10:8f:05:d8:70:6a:38:97:f3:f2:
         ed:12:a5:da:c5:22:c3:0c:f5:d8:90:ee:d8:36:d7:60:50:d9:
         8c:50:69:a0:9a:69:e9:8c:07:1f:5a:c8:45:b0:56:82:b3:fd:
         3a:f8:b8:ca:23:ae:f2:d7:6b:cc:93:b5:af:3b:bd:c7:20:49:
         c9:f0:0a:85:84:7f:7d:80:31:83:04:eb:ae:7e:4a:45:a3:9d:
         36:47:06:9b:d7:a5:9e:95:a0:26:87:c9:25:ed:4c:94:d0:88:
         3b:d1:28:f7:c0:b7:4c:64:3a:9c:1c:c9:5d:23:7d:ca:58:3b:
         06:ff:b1:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1g6/uNewL/uI3kIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNDkxNVoXDTI0MDYxMjIxNDkxNVowLzEtMCsGA1UEAxMk
NTgzYWU5ZDYtOGEzNy00NWZjLTk1ZWUtZWFhMDA0Njk3MjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhJjU+CdizuNH3gCelsMTk3AfFYDfhcH8zv1
6LukZ620g585kM/6aHc6yHbjmxRZboVHgRWcrGI1mleW0qDAFgCoDyq2jpDwl4sL
8z6PFafV4vxi0g/tdfwQeaY7GbgX8JRFCvLHQOVwv+dOasH4fEazlDaMlhl9t2h9
46i3dKT3AmQTEORihgaJsubBbE27fM/y3OB4j1dhFTKxMpjR/J6M/vW0cTmaDhzR
M8R1Zf3AzrGOQ4rW0+kzJ7NqM6t1qaYWsHa/MSA/4xEKHGJr0ZXnfZ/Hqhn4mJ8F
JMPuiotfKTGcfFKTZs/OpHZbQD9qPv35hxVECDExKq7JeFq2RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIB/F+lSpgMYg24Ox72uylanlnAiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTZjZTgyZDQtYjY4Zi0z
YmEzLTlmYTUtNGVmODAyN2FjODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACizSA67JuUTkRpvwkYFeQ6UYCVM0RHVwcVWK2BOjE9Abd3cVX6lBPRh
MYXVlC5aZPBAJ4n74bt4spCJyvsKS9h8nTCCv2VhEAcsiWQCKzKwLEq/h79ngO0k
k4p07gglJzaTUvh1JzqcHztzGSesp4RSSLVj1P6AuXYm6lcZ3hFpopETxLeAEI8F
2HBqOJfz8u0SpdrFIsMM9diQ7tg212BQ2YxQaaCaaemMBx9ayEWwVoKz/Tr4uMoj
rvLXa8yTta87vccgScnwCoWEf32AMYME665+SkWjnTZHBpvXpZ6VoCaHySXtTJTQ
iDvRKPfAt0xkOpwcyV0jfcpYOwb/saE=
-----END CERTIFICATE-----
Generated at Sat May 11 09:50:02 2024 by rpki-client on console-fra.rpki-client.org