Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
File:                     1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa (raw, json)
Hash identifier:          AXtJvj8nG/SpPxSI1tBqkZUouPcLXyVlOIov8gMwJZA=
Subject key identifier:   F0:A7:89:F2:24:D0:33:54:4C:DD:AB:BA:41:53:96:18:45:74:8E:4F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D29F720D3E4542A7D23CFC44
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.133.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:72:0d:3e:45:42:a7:d2:3c:fc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=a68135ed-1714-484e-9b9b-15b7e375359e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:40:26:92:e1:d1:09:eb:f5:48:4b:5d:4c:
                    4d:72:79:28:a7:dc:74:bb:af:bf:62:33:45:60:80:
                    75:f0:1a:20:d9:fc:40:9e:fa:a6:56:5c:cb:90:1f:
                    10:33:43:04:bf:07:a3:c7:0b:8a:f4:79:44:4b:94:
                    31:79:49:78:1c:94:81:07:91:20:d8:29:0a:a0:c1:
                    11:02:83:8b:13:21:58:c9:ae:47:a2:ac:ec:26:ae:
                    9e:38:d8:97:95:d3:73:a5:2b:5d:2c:f2:88:47:6a:
                    b1:9d:9d:7b:d2:8e:2e:e1:b7:bd:5f:43:93:f3:33:
                    ce:bd:a3:57:2e:b2:ca:d6:4b:00:78:87:b2:cb:a1:
                    c2:39:fb:6e:f9:fa:ee:df:95:56:e4:7b:7b:48:9a:
                    23:27:92:ea:c2:3c:7e:04:d8:64:22:54:ba:bf:63:
                    cc:9c:13:cb:11:76:a3:44:b5:12:be:02:76:5f:1f:
                    d3:44:8d:56:e7:97:8f:8e:46:11:9e:4e:3b:57:3f:
                    1a:36:69:a4:8e:82:ad:22:df:d9:c1:3a:60:6e:7a:
                    e0:e1:bc:ec:2d:2b:61:8b:e1:c7:fe:3e:ad:4b:0c:
                    c9:37:eb:d4:5c:2e:9e:97:1c:4d:84:89:c8:1b:de:
                    07:99:ec:93:19:42:4d:8c:f4:ba:3f:67:ee:ec:38:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:89:F2:24:D0:33:54:4C:DD:AB:BA:41:53:96:18:45:74:8E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:0f:6b:1a:e2:bd:42:56:6e:f0:65:45:3b:b9:d1:aa:93:
         12:94:15:6a:de:d1:25:e3:53:4f:85:be:2f:f8:06:d0:76:0e:
         98:cb:17:98:63:49:05:1a:1a:da:fd:4c:13:30:85:89:19:b6:
         18:69:c5:a1:1d:6b:94:de:a1:9d:aa:6c:8a:59:f3:6c:36:7d:
         8d:83:87:95:ba:c1:36:dc:a4:16:e0:8b:e5:c8:a5:a9:39:da:
         11:0d:b4:30:d3:c9:16:e0:64:72:1b:b8:01:3e:50:ec:06:5f:
         9a:f2:d8:fb:7e:5e:f8:0f:10:0b:44:f3:26:85:bc:f2:31:fc:
         7f:91:06:e5:8d:fa:f6:a7:49:a8:fd:c4:19:3d:cd:03:ae:5e:
         f5:1e:d2:2a:30:ab:ba:04:81:a9:2d:e6:e0:a9:aa:d1:ca:ab:
         69:54:fa:3d:93:f3:d1:87:28:24:94:64:5d:55:ae:33:a1:bf:
         1e:3b:66:19:4d:89:4b:cb:b3:72:99:e3:af:44:d6:de:30:07:
         dc:f8:1f:15:3d:40:9c:80:66:c2:1b:09:36:75:52:7e:ec:c4:
         70:0f:2a:a8:7f:eb:cd:26:ab:a0:9e:13:d4:a9:72:e8:6b:c7:
         7f:2b:b0:ee:3a:3b:3b:e8:77:ee:fe:fe:05:42:e4:bb:b6:10:
         2c:5c:28:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn3INPkVCp9I8/EQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk
YTY4MTM1ZWQtMTcxNC00ODRlLTliOWItMTViN2UzNzUzNTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP5AJpLh0Qnr9UhLXUxNcnkop9x0u6+/YjNF
YIB18Bog2fxAnvqmVlzLkB8QM0MEvwejxwuK9HlES5QxeUl4HJSBB5Eg2CkKoMER
AoOLEyFYya5HoqzsJq6eONiXldNzpStdLPKIR2qxnZ170o4u4be9X0OT8zPOvaNX
LrLK1ksAeIeyy6HCOftu+fru35VW5Ht7SJojJ5Lqwjx+BNhkIlS6v2PMnBPLEXaj
RLUSvgJ2Xx/TRI1W55ePjkYRnk47Vz8aNmmkjoKtIt/ZwTpgbnrg4bzsLSthi+HH
/j6tSwzJN+vUXC6elxxNhInIG94HmeyTGUJNjPS6P2fu7DiWWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCnifIk0DNUTN2rukFTlhhFdI5PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWE1NGU5ZTYtY2EzMS0z
MzFkLWE0NTItZWI1ZWNkNzI3YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIULMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvvD2sa4r1CVm7wZUU7udGqkxKUFWre0SXjU0+Fvi/4BtB2DpjLF5hj
SQUaGtr9TBMwhYkZthhpxaEda5TeoZ2qbIpZ82w2fY2Dh5W6wTbcpBbgi+XIpak5
2hENtDDTyRbgZHIbuAE+UOwGX5ry2Pt+XvgPEAtE8yaFvPIx/H+RBuWN+vanSaj9
xBk9zQOuXvUe0iowq7oEgakt5uCpqtHKq2lU+j2T89GHKCSUZF1VrjOhvx47ZhlN
iUvLs3KZ469E1t4wB9z4HxU9QJyAZsIbCTZ1Un7sxHAPKqh/680mq6CeE9Spcuhr
x38rsO46Ozvod+7+/gVC5Lu2ECxcKHY=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:42 2024 by rpki-client on console-ams.rpki-client.org