Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e46eae-aea0-35d6-a576-318e690e9195.roa
File:                     18e46eae-aea0-35d6-a576-318e690e9195.roa (raw, json)
Hash identifier:          8z2eRszkWoHpvG7Zl08JLkB9DweCnnWIm7BerfJ0XDs=
Subject key identifier:   19:D9:E5:DF:7A:3F:F1:42:9B:39:C9:F3:E5:21:D3:2B:E7:BA:A4:6D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1471153F058515BF2D40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e46eae-aea0-35d6-a576-318e690e9195.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:14:71:15:3f:05:85:15:bf:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=0f0ae0dc-af85-4439-b853-08d54de894d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:78:65:98:c0:f6:ac:02:97:5e:1c:83:a2:
                    16:ec:74:23:dc:36:c6:fb:40:15:dc:5a:04:d4:2f:
                    39:0e:b8:1f:fe:5f:26:b8:a5:46:33:1e:24:46:3b:
                    40:44:a7:03:b4:07:cd:6e:d5:12:31:79:8b:41:0c:
                    6c:02:7c:d4:75:06:dd:79:55:24:df:26:b5:18:c2:
                    d6:d9:3d:0a:5d:eb:55:94:db:fa:9c:b7:a7:41:ae:
                    1f:72:8c:e2:c7:3f:eb:ac:6f:4c:c9:23:e0:39:ca:
                    40:ae:2b:32:f0:3a:9b:19:f1:23:25:b9:5b:95:06:
                    e3:7a:ce:52:55:88:f0:fd:e3:df:01:9e:96:90:63:
                    3e:00:d3:88:45:b7:d8:33:fb:b7:19:37:e0:8e:a1:
                    04:61:45:af:4a:bb:a9:2b:c8:3d:f0:10:e2:c3:3c:
                    07:25:0d:8b:9c:09:17:d2:89:70:6c:90:0f:27:fe:
                    b9:cd:e9:cd:fd:3e:cf:f4:f6:0a:48:82:d6:d5:44:
                    a9:5f:d5:f1:fb:a0:e1:c7:27:91:45:df:25:b3:64:
                    1d:4f:25:86:ee:d2:c0:14:5f:c6:53:45:ab:b3:20:
                    40:80:5e:bc:14:07:2b:cd:83:0e:90:87:6f:ee:ea:
                    75:3f:73:23:e7:b3:10:7a:1c:47:e1:ba:46:97:87:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D9:E5:DF:7A:3F:F1:42:9B:39:C9:F3:E5:21:D3:2B:E7:BA:A4:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e46eae-aea0-35d6-a576-318e690e9195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:59:4c:27:34:2d:d5:7a:b8:ce:0a:a7:bd:8e:8f:48:2b:
         8f:1c:3b:e5:eb:9f:29:9b:45:b9:25:c2:d4:23:ee:e5:5d:16:
         8b:6a:c2:09:fc:cd:80:a3:ff:59:c8:84:c8:e8:35:59:f8:35:
         a3:53:8d:91:1f:0e:d7:82:6a:75:e9:fc:0b:43:68:1b:2a:52:
         c8:82:72:8e:93:38:46:fe:ae:15:cb:21:7e:ba:38:8a:ab:7c:
         f5:32:c9:a2:90:55:d3:11:12:4c:eb:a2:84:b3:10:fb:02:a4:
         ec:e9:17:b9:5c:41:54:79:14:39:4b:53:dd:f9:cc:84:e6:49:
         6d:32:b3:cd:ec:ae:06:0b:11:39:1d:7a:46:00:a9:83:ab:4f:
         19:25:db:0d:bd:c3:91:e2:27:0c:3f:6a:30:5c:01:f2:6f:e6:
         c7:65:d3:37:c9:33:33:7c:24:d1:fb:4f:6d:0d:47:ac:23:9d:
         37:20:74:f3:d3:c7:83:0d:0f:d2:dd:be:c4:4f:07:81:3e:d5:
         fd:78:c1:38:e9:c3:90:77:00:e8:c3:32:2d:1f:84:95:b9:36:
         34:1b:d3:ab:21:49:8f:ae:4d:df:22:8e:20:1e:d0:28:b6:99:
         58:eb:f3:bc:80:74:5d:f9:39:53:61:6e:78:53:b1:12:ea:eb:
         0c:94:4a:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVahRxFT8FhRW/LUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
MGYwYWUwZGMtYWY4NS00NDM5LWI4NTMtMDhkNTRkZTg5NGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTR4ZZjA9qwCl14cg6IW7HQj3DbG+0AV3FoE
1C85Drgf/l8muKVGMx4kRjtARKcDtAfNbtUSMXmLQQxsAnzUdQbdeVUk3ya1GMLW
2T0KXetVlNv6nLenQa4fcozixz/rrG9MySPgOcpArisy8DqbGfEjJblblQbjes5S
VYjw/ePfAZ6WkGM+ANOIRbfYM/u3GTfgjqEEYUWvSrupK8g98BDiwzwHJQ2LnAkX
0olwbJAPJ/65zenN/T7P9PYKSILW1USpX9Xx+6DhxyeRRd8ls2QdTyWG7tLAFF/G
U0WrsyBAgF68FAcrzYMOkIdv7up1P3Mj57MQehxH4bpGl4dsZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnZ5d96P/FCmznJ8+Uh0yvnuqRtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMThlNDZlYWUtYWVhMC0z
NWQ2LWE1NzYtMzE4ZTY5MGU5MTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeMWUwnNC3VerjOCqe9jo9IK48cO+XrnymbRbklwtQj7uVdFotqwgn8
zYCj/1nIhMjoNVn4NaNTjZEfDteCanXp/AtDaBsqUsiCco6TOEb+rhXLIX66OIqr
fPUyyaKQVdMREkzrooSzEPsCpOzpF7lcQVR5FDlLU935zITmSW0ys83srgYLETkd
ekYAqYOrTxkl2w29w5HiJww/ajBcAfJv5sdl0zfJMzN8JNH7T20NR6wjnTcgdPPT
x4MND9LdvsRPB4E+1f14wTjpw5B3AOjDMi0fhJW5NjQb06shSY+uTd8ijiAe0Ci2
mVjr87yAdF35OVNhbnhTsRLq6wyUSpE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:48 2024 by rpki-client on console-ams.rpki-client.org