Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
File:                     448e5339-25f5-3339-84a4-1e29679e812e.roa (raw, json)
Hash identifier:          /WbbLEJN/3tySt4lf3seEzGRm2arxojtvjXSU0ZdTd8=
Subject key identifier:   85:DC:AB:F0:75:F6:A2:0A:22:12:A7:E5:BB:9E:FC:15:4E:4B:EC:93
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0F2E83BDC812E622BE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     395973
IP address blocks:        104.134.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:0f:2e:83:bd:c8:12:e6:22:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=0da91183-3232-421e-a090-2c61d5fbe801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:5c:70:4c:6a:3b:e4:fc:34:0d:f1:88:a3:
                    51:6b:88:db:47:08:c7:b8:c8:a4:62:df:92:e6:28:
                    46:71:c9:fc:1b:67:f1:86:b7:05:fb:4c:84:f7:68:
                    0d:07:70:11:65:54:5c:54:7d:b4:60:00:ce:ba:41:
                    6d:8c:a0:01:f8:2c:fb:1d:7f:b4:e4:38:e2:1f:71:
                    6a:06:7b:73:f7:43:49:15:bd:da:f6:a8:1d:a4:59:
                    5a:70:2d:c0:e5:4d:82:21:a9:fb:e2:41:78:a7:8c:
                    cb:e3:3e:b7:a0:3b:cc:fb:00:00:fb:a6:47:14:2b:
                    6a:bd:c7:83:11:84:3c:c9:91:51:f8:a3:be:5b:e4:
                    1b:74:d6:34:aa:97:09:0c:06:c2:4d:fd:5c:54:f1:
                    3a:aa:ef:7c:3a:5f:dd:e2:1b:40:25:5f:71:6b:17:
                    41:76:b7:18:6f:53:d7:ef:a6:72:1e:d8:75:60:6c:
                    50:c3:34:90:65:60:6c:44:8e:98:d3:44:9c:80:ea:
                    3a:b2:c9:12:f6:f0:fe:ea:1d:5b:c3:16:0b:9c:29:
                    34:de:3b:a4:82:77:4f:ac:ef:d4:b1:d8:2a:3c:ac:
                    cd:ce:df:27:cd:9c:c7:08:10:4f:b1:c1:1d:4a:3f:
                    7a:f0:c7:62:c2:3b:50:04:a9:f1:0e:1f:60:32:fc:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DC:AB:F0:75:F6:A2:0A:22:12:A7:E5:BB:9E:FC:15:4E:4B:EC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:c2:66:c2:7b:03:c1:76:d8:66:c6:fa:06:3a:2b:79:48:3c:
         11:c5:8e:94:4b:33:fd:65:23:f1:12:00:99:fb:01:6d:fc:bb:
         74:85:e5:cf:78:94:4c:3f:f5:3b:67:1d:a2:fa:6b:f9:27:a8:
         61:4e:45:e8:2c:9a:ea:bc:23:c3:c7:33:ca:43:20:33:44:a1:
         0d:19:89:b6:17:2b:aa:1f:9c:6d:a3:7e:eb:03:b3:48:00:b0:
         01:dd:05:0d:ec:50:f3:e1:0f:66:87:92:f4:83:d7:c7:31:c1:
         a7:b0:a5:35:05:ba:2f:51:7e:f4:72:8b:c7:e2:ee:ca:d1:aa:
         56:8b:7a:48:7f:fd:8a:78:ad:9a:96:2c:39:4f:fe:1a:90:ed:
         3b:e6:c8:a4:f0:05:49:23:a0:eb:66:9b:e6:72:17:4a:de:c6:
         3a:b7:61:7f:f2:25:7c:3e:cc:37:62:be:7e:04:3c:11:a9:64:
         2c:16:d4:f8:c9:e7:23:3c:5e:b5:37:d1:13:5f:7e:5a:e7:4b:
         45:cd:08:55:8c:75:68:04:35:2e:5a:aa:92:59:26:c2:bd:13:
         00:36:8b:49:a3:98:2c:79:f4:13:fd:da:9c:2c:59:ff:d9:a7:
         28:39:59:75:af:da:24:e9:23:07:d6:91:7c:6e:19:0d:c9:bc:
         f5:28:2e:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVag8ug73IEuYivgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
MGRhOTExODMtMzIzMi00MjFlLWEwOTAtMmM2MWQ1ZmJlODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP1ccExqO+T8NA3xiKNRa4jbRwjHuMikYt+S
5ihGccn8G2fxhrcF+0yE92gNB3ARZVRcVH20YADOukFtjKAB+Cz7HX+05DjiH3Fq
Bntz90NJFb3a9qgdpFlacC3A5U2CIan74kF4p4zL4z63oDvM+wAA+6ZHFCtqvceD
EYQ8yZFR+KO+W+QbdNY0qpcJDAbCTf1cVPE6qu98Ol/d4htAJV9xaxdBdrcYb1PX
76ZyHth1YGxQwzSQZWBsRI6Y00ScgOo6sskS9vD+6h1bwxYLnCk03jukgndPrO/U
sdgqPKzNzt8nzZzHCBBPscEdSj968MdiwjtQBKnxDh9gMvyxCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXcq/B19qIKIhKn5bue/BVOS+yTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDQ4ZTUzMzktMjVmNS0z
MzM5LTg0YTQtMWUyOTY3OWU4MTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXCZsJ7A8F22GbG+gY6K3lIPBHFjpRLM/1lI/ESAJn7AW38u3SF5c94
lEw/9TtnHaL6a/knqGFORegsmuq8I8PHM8pDIDNEoQ0ZibYXK6ofnG2jfusDs0gA
sAHdBQ3sUPPhD2aHkvSD18cxwaewpTUFui9RfvRyi8fi7srRqlaLekh//Yp4rZqW
LDlP/hqQ7TvmyKTwBUkjoOtmm+ZyF0rexjq3YX/yJXw+zDdivn4EPBGpZCwW1PjJ
5yM8XrU30RNfflrnS0XNCFWMdWgENS5aqpJZJsK9EwA2i0mjmCx59BP92pwsWf/Z
pyg5WXWv2iTpIwfWkXxuGQ3JvPUoLlg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:51 2024 by rpki-client on console-ams.rpki-client.org