Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa
File:                     47cc97f2-3c67-35da-93c6-4033da29eec6.roa (raw, json)
Hash identifier:          KZmcx1Z8VvZW3hnirwoJJAjE6dLBwDYDhTcxWbheiJc=
Subject key identifier:   75:FF:F0:DD:F1:CF:60:91:36:EB:DD:BF:49:47:43:F7:5C:3A:20:42
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BA82B7E663769A7F64A380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa
Signing time:             Mon 18 Mar 2024 22:13:36 +0000
ROA not before:           Mon 18 Mar 2024 22:13:36 +0000
ROA not after:            Sun 16 Jun 2024 22:13:36 +0000
asID:                     15169
IP address blocks:        104.134.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:82:b7:e6:63:76:9a:7f:64:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:13:36 2024 GMT
            Not After : Jun 16 22:13:36 2024 GMT
        Subject: CN=aee7bbdd-f4f9-423b-acf2-aaecba83c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:7c:4f:24:fb:49:a0:3c:df:24:fe:8b:62:
                    0e:bc:dd:e6:ca:74:c0:7f:59:88:6c:42:2b:88:44:
                    26:2a:94:93:22:29:7f:7c:c0:67:b8:ec:52:59:2d:
                    81:d9:27:a8:c0:fc:42:3d:70:b2:b1:d9:23:a1:ee:
                    11:c5:35:ef:73:24:57:30:d7:98:39:85:95:5e:e3:
                    73:53:c6:59:d1:7b:a5:e1:91:67:4f:5e:1a:9d:11:
                    60:7c:db:76:9a:b1:3c:2c:c8:92:b1:cc:72:1b:88:
                    2c:53:5d:5b:a0:f8:e8:cf:05:5f:8b:77:1a:f4:13:
                    c6:fd:23:5a:10:36:14:5b:a7:e8:e8:bc:6c:02:de:
                    69:f7:ee:26:1a:a1:f0:df:02:30:2d:db:22:7b:7c:
                    3a:8a:83:7b:47:52:7d:74:46:c6:d0:da:93:cd:dd:
                    01:03:f4:69:ce:f7:eb:9e:6f:c8:d4:f6:43:29:86:
                    00:5d:8c:3f:69:35:52:b4:f0:6e:5b:d3:fe:2e:a7:
                    e9:87:56:14:54:1c:6c:80:70:f2:1a:b7:2f:ee:ab:
                    fe:21:b7:1e:90:16:da:83:e9:9e:72:5d:f5:d8:56:
                    9c:2b:76:0d:be:6a:87:cd:49:05:f0:e5:aa:03:c4:
                    ae:7c:45:3b:fa:aa:34:54:75:70:2b:4d:3b:ba:76:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:F0:DD:F1:CF:60:91:36:EB:DD:BF:49:47:43:F7:5C:3A:20:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:5f:1a:29:fd:df:71:e0:42:d5:c2:60:24:29:24:dd:e7:
         5a:22:d2:82:b9:2f:17:79:69:69:3e:21:0e:9c:84:6a:6b:15:
         3b:64:8b:d6:ec:6c:10:3b:5a:d5:6c:46:74:fd:20:67:4e:56:
         c7:08:b3:3d:99:79:dd:c7:2d:ef:f5:47:d4:86:bb:80:aa:11:
         f2:7e:7d:5e:ea:0d:46:31:f2:c4:e4:c6:63:78:cf:78:4f:87:
         52:23:d4:5a:df:a2:36:b1:11:5c:1f:45:c5:cb:66:e5:1e:57:
         e1:25:18:02:61:c7:cf:b0:ce:0f:ae:cb:ee:05:3c:89:01:59:
         5c:34:c4:9f:c3:11:3d:70:ab:a0:ff:9b:d9:db:c0:96:0d:e3:
         c0:bb:c7:d9:0e:f9:dd:cb:34:56:c4:53:f6:4f:b2:47:f3:74:
         f1:99:23:e2:f3:3f:cb:e6:f4:e0:2b:fd:cd:09:29:be:c2:37:
         0f:6e:3d:c5:00:b2:da:d5:be:d8:1c:c6:95:ae:b6:0b:af:65:
         6e:ef:b8:71:15:b3:ee:e0:03:1d:81:1b:a0:f7:36:d3:e8:dd:
         80:c6:f3:43:44:07:d2:37:7e:f6:80:4a:d6:31:26:7b:92:30:
         7d:e9:17:7c:e5:73:55:a0:ee:63:71:7d:77:4a:b2:b6:7b:04:
         47:07:4b:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuoK35mN2mn9ko4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxODIyMTMzNloXDTI0MDYxNjIyMTMzNlowLzEtMCsGA1UEAxMk
YWVlN2JiZGQtZjRmOS00MjNiLWFjZjItYWFlY2JhODNjMDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqp8TyT7SaA83yT+i2IOvN3mynTAf1mIbEIr
iEQmKpSTIil/fMBnuOxSWS2B2SeowPxCPXCysdkjoe4RxTXvcyRXMNeYOYWVXuNz
U8ZZ0Xul4ZFnT14anRFgfNt2mrE8LMiSscxyG4gsU11boPjozwVfi3ca9BPG/SNa
EDYUW6fo6LxsAt5p9+4mGqHw3wIwLdsie3w6ioN7R1J9dEbG0NqTzd0BA/Rpzvfr
nm/I1PZDKYYAXYw/aTVStPBuW9P+Lqfph1YUVBxsgHDyGrcv7qv+IbcekBbag+me
cl312FacK3YNvmqHzUkF8OWqA8SufEU7+qo0VHVwK007unaiOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHX/8N3xz2CRNuvdv0lHQ/dcOiBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDdjYzk3ZjItM2M2Ny0z
NWRhLTkzYzYtNDAzM2RhMjllZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuTXxop/d9x4ELVwmAkKSTd51oi0oK5Lxd5aWk+IQ6chGprFTtki9bs
bBA7WtVsRnT9IGdOVscIsz2Zed3HLe/1R9SGu4CqEfJ+fV7qDUYx8sTkxmN4z3hP
h1Ij1FrfojaxEVwfRcXLZuUeV+ElGAJhx8+wzg+uy+4FPIkBWVw0xJ/DET1wq6D/
m9nbwJYN48C7x9kO+d3LNFbEU/ZPskfzdPGZI+LzP8vm9OAr/c0JKb7CNw9uPcUA
strVvtgcxpWutguvZW7vuHEVs+7gAx2BG6D3NtPo3YDG80NEB9I3fvaAStYxJnuS
MH3pF3zlc1Wg7mNxfXdKsrZ7BEcHS+0=
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:25 2024 by rpki-client on console-fra.rpki-client.org