Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
File:                     3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa (raw, json)
Hash identifier:          FY6VSqKPKAJo5hpbVr2h0tWaYD00cFCUrA6QUs89Mgk=
Subject key identifier:   2D:E2:B3:C3:45:89:A0:EC:01:18:5D:93:D9:B3:04:C8:B1:16:24:07
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A08F54D71C76E58D9BE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:08:f5:4d:71:c7:6e:58:d9:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=93adc324-0c54-4bf7-b610-552f14c12ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:ee:eb:ba:40:f7:74:fa:1d:ed:6b:97:f4:
                    92:f3:3b:8f:9a:b3:c7:ec:5d:f0:29:c9:52:0e:e2:
                    bb:45:b2:3e:06:46:13:c9:16:d0:b9:b7:b1:4d:77:
                    ea:1a:30:dc:a6:d6:e6:c0:0a:29:4e:ce:1e:00:c6:
                    b8:7d:25:cd:4a:ed:76:38:fe:43:c4:d0:f6:3a:86:
                    e4:1f:50:8f:51:c2:96:3e:65:10:32:e3:1f:b2:80:
                    c2:05:fd:15:a2:ca:bb:78:a9:ed:ac:32:bb:20:a0:
                    2e:4b:c8:8f:7f:b5:f3:0d:0d:2e:12:a4:39:dc:d5:
                    70:9b:21:ab:92:ac:84:2f:16:74:fc:d6:be:e7:97:
                    30:fb:c0:8c:b1:31:f6:ed:df:f6:02:b9:89:08:9c:
                    47:45:a9:11:6d:e1:aa:52:c6:53:8d:06:a6:6c:19:
                    63:f2:d7:f3:ee:33:25:ae:28:7e:9a:fb:84:f6:cd:
                    46:bc:13:ff:9f:54:1f:55:a5:87:61:31:e8:f7:80:
                    b6:52:ca:13:8d:0d:58:a9:14:61:4c:42:ff:44:99:
                    c6:31:a9:6e:c4:49:7d:4c:31:d6:7a:90:74:04:7a:
                    0c:1b:2b:54:8d:11:52:f9:be:fe:d6:ef:fa:c0:b4:
                    38:42:28:57:f8:1f:9d:e2:56:55:d2:f7:c9:33:49:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E2:B3:C3:45:89:A0:EC:01:18:5D:93:D9:B3:04:C8:B1:16:24:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:d8:64:b6:60:b7:2a:c9:f9:bf:88:0d:6c:cd:b6:1a:74:
         ad:bb:5d:0f:9c:5f:0a:41:13:e2:5e:b9:9f:dc:04:9d:b6:90:
         68:8d:30:e3:01:0e:78:98:a8:15:16:3f:89:4d:63:4f:c0:4a:
         8e:01:59:84:ae:fe:84:d8:0c:72:60:6b:02:77:39:0f:60:05:
         c0:4e:8f:3d:25:c4:11:f1:03:04:6b:6d:95:0b:95:68:95:0c:
         ad:9b:67:7e:43:47:c9:d5:93:69:79:b4:39:6a:50:c2:d9:e2:
         72:9b:c3:87:62:3f:2b:b8:ff:a0:c1:6f:aa:46:82:61:95:e2:
         0e:4e:c0:89:c9:ca:54:7d:27:65:f2:29:4f:d8:65:02:2b:4b:
         c3:91:e4:f3:e4:1d:5a:97:0f:68:52:7f:67:0b:55:5e:f3:0b:
         84:4f:1b:17:1a:88:1b:e9:07:3b:83:fd:36:64:a9:b7:ec:81:
         9c:31:b3:bd:b9:de:b0:62:bc:cb:78:49:47:2a:50:6c:c1:2b:
         40:31:c5:79:ca:4f:15:89:69:56:a6:0c:96:10:a1:a0:cd:f0:
         b6:bf:24:b1:f3:f5:09:46:16:0f:c8:e7:65:20:26:c0:19:e4:
         0a:33:00:2b:6c:36:c7:08:90:73:5c:e5:1a:ea:8b:8a:e2:03:
         ea:26:a2:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVagj1TXHHbljZvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
OTNhZGMzMjQtMGM1NC00YmY3LWI2MTAtNTUyZjE0YzEyYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW/u67pA93T6He1rl/SS8zuPmrPH7F3wKclS
DuK7RbI+BkYTyRbQubexTXfqGjDcptbmwAopTs4eAMa4fSXNSu12OP5DxND2Oobk
H1CPUcKWPmUQMuMfsoDCBf0Vosq7eKntrDK7IKAuS8iPf7XzDQ0uEqQ53NVwmyGr
kqyELxZ0/Na+55cw+8CMsTH27d/2ArmJCJxHRakRbeGqUsZTjQambBlj8tfz7jMl
rih+mvuE9s1GvBP/n1QfVaWHYTHo94C2UsoTjQ1YqRRhTEL/RJnGMaluxEl9TDHW
epB0BHoMGytUjRFS+b7+1u/6wLQ4QihX+B+d4lZV0vfJM0nX0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3is8NFiaDsARhdk9mzBMixFiQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2JmOTJiYWItZGM4My0z
NWNkLWIwYTAtOWI3ODA4ZWVhOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzh2GS2YLcqyfm/iA1szbYadK27XQ+cXwpBE+JeuZ/cBJ22kGiNMOMB
DniYqBUWP4lNY0/ASo4BWYSu/oTYDHJgawJ3OQ9gBcBOjz0lxBHxAwRrbZULlWiV
DK2bZ35DR8nVk2l5tDlqUMLZ4nKbw4diPyu4/6DBb6pGgmGV4g5OwInJylR9J2Xy
KU/YZQIrS8OR5PPkHVqXD2hSf2cLVV7zC4RPGxcaiBvpBzuD/TZkqbfsgZwxs725
3rBivMt4SUcqUGzBK0AxxXnKTxWJaVamDJYQoaDN8La/JLHz9QlGFg/I52UgJsAZ
5AozACtsNscIkHNc5Rrqi4riA+omono=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:48 2024 by rpki-client on console-fra.rpki-client.org