Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52c01ffb-c31c-3de0-b569-1665d7d66adf.roa
File:                     52c01ffb-c31c-3de0-b569-1665d7d66adf.roa (raw, json)
Hash identifier:          +PGtYqFgT6/51pnvs3r1UaxD+cJOUoSxWiG3fXgv0m4=
Subject key identifier:   6D:5A:3C:AF:EE:26:3B:0A:2D:04:C7:46:1F:26:E6:8F:1F:2B:A5:E7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535852AFB57800D3D7F92EB15
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52c01ffb-c31c-3de0-b569-1665d7d66adf.roa
Signing time:             Thu 14 Mar 2024 21:52:14 +0000
ROA not before:           Thu 14 Mar 2024 21:52:14 +0000
ROA not after:            Wed 12 Jun 2024 21:52:14 +0000
asID:                     41264
IP address blocks:        104.133.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:2a:fb:57:80:0d:3d:7f:92:eb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:14 2024 GMT
            Not After : Jun 12 21:52:14 2024 GMT
        Subject: CN=647215df-c3db-4f2a-ab4f-0827f3c82dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:3a:19:2d:98:7b:ca:aa:40:cb:7f:ee:c6:
                    3c:76:49:a8:9d:4b:03:d1:68:5a:2e:de:e1:c2:1d:
                    36:3a:30:6a:75:62:2d:d2:55:13:41:da:9f:07:80:
                    f5:47:08:e2:38:8a:90:f0:1e:cd:08:81:a3:6a:24:
                    ab:30:e0:c5:30:3b:2f:fc:3c:f3:b5:58:ef:c4:67:
                    0c:1c:4e:0a:0d:da:be:7b:2d:6e:20:70:5c:ca:89:
                    85:39:86:5d:be:1d:db:d4:45:26:a3:31:94:65:d3:
                    83:7b:2e:dd:17:ab:41:af:bd:22:c8:9a:b6:b7:90:
                    49:10:2d:15:fa:43:95:88:4d:fd:76:78:7e:91:47:
                    fe:ab:d0:86:19:b4:4e:91:9c:d3:be:aa:99:b6:35:
                    29:b0:52:e5:05:90:02:3e:2b:97:62:db:c6:58:17:
                    d6:25:09:46:97:1e:c6:33:21:83:da:ce:e0:f7:32:
                    43:24:60:3d:4c:81:53:fa:bf:59:f6:d4:0c:d2:93:
                    9b:21:a1:28:93:bb:64:f4:6a:13:6d:9e:66:15:e9:
                    74:eb:ab:bb:00:e1:91:33:49:d4:1f:56:3a:e2:d5:
                    27:e2:8f:bd:58:d1:13:a4:f9:b8:91:3e:c1:76:4b:
                    fb:49:16:ff:f0:ba:8c:dc:e0:93:7c:b8:00:37:cd:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5A:3C:AF:EE:26:3B:0A:2D:04:C7:46:1F:26:E6:8F:1F:2B:A5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52c01ffb-c31c-3de0-b569-1665d7d66adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:62:c1:b9:ff:74:fa:9f:63:d1:82:6e:2a:ee:ed:88:63:
         56:da:04:d4:62:68:72:41:74:ee:9a:17:89:7d:0b:40:25:1d:
         7b:91:9a:55:c3:9e:fe:53:e6:70:f6:8b:04:7a:9f:d9:70:86:
         b1:d8:bc:90:ac:de:1e:41:c2:e2:a3:a5:c7:cf:c4:b2:9b:df:
         93:7e:61:0c:4a:8e:b2:b2:22:28:9e:73:81:1b:28:e9:cb:d3:
         92:b3:35:23:8c:2b:00:62:81:ac:54:de:6a:57:1a:74:0b:01:
         d5:1b:cf:d9:34:79:0c:43:ec:1b:5c:35:90:6b:8b:22:9a:88:
         30:14:34:bf:48:64:10:71:a2:de:58:db:52:4d:3a:d2:65:c4:
         ef:e6:63:b0:e3:b7:bf:60:62:b3:fd:9f:c4:ed:ac:4b:8f:b4:
         81:69:09:c6:37:11:28:b6:a4:fa:3e:56:62:d0:e9:ba:62:bb:
         32:92:d0:48:7d:e4:44:6a:88:cf:cb:92:34:a5:40:f0:c0:b6:
         9d:d8:bc:b9:16:4f:aa:f8:5a:f2:eb:0b:31:7b:34:04:08:f0:
         47:f2:14:b5:4d:b7:15:45:ee:9e:3e:fc:80:6c:84:2b:b1:92:
         10:e3:db:05:d2:48:58:0e:40:af:14:51:d7:28:a9:2b:ba:8c:
         04:60:16:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hSr7V4ANPX+S6xUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTIxNFoXDTI0MDYxMjIxNTIxNFowLzEtMCsGA1UEAxMk
NjQ3MjE1ZGYtYzNkYi00ZjJhLWFiNGYtMDgyN2YzYzgyZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsE6GS2Ye8qqQMt/7sY8dkmonUsD0WhaLt7h
wh02OjBqdWIt0lUTQdqfB4D1RwjiOIqQ8B7NCIGjaiSrMODFMDsv/DzztVjvxGcM
HE4KDdq+ey1uIHBcyomFOYZdvh3b1EUmozGUZdODey7dF6tBr70iyJq2t5BJEC0V
+kOViE39dnh+kUf+q9CGGbROkZzTvqqZtjUpsFLlBZACPiuXYtvGWBfWJQlGlx7G
MyGD2s7g9zJDJGA9TIFT+r9Z9tQM0pObIaEok7tk9GoTbZ5mFel066u7AOGRM0nU
H1Y64tUn4o+9WNETpPm4kT7Bdkv7SRb/8LqM3OCTfLgAN81EQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1aPK/uJjsKLQTHRh8m5o8fK6XnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTJjMDFmZmItYzMxYy0z
ZGUwLWI1NjktMTY2NWQ3ZDY2YWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH48YsG5/3T6n2PRgm4q7u2IY1baBNRiaHJBdO6aF4l9C0AlHXuRmlXD
nv5T5nD2iwR6n9lwhrHYvJCs3h5BwuKjpcfPxLKb35N+YQxKjrKyIiiec4EbKOnL
05KzNSOMKwBigaxU3mpXGnQLAdUbz9k0eQxD7BtcNZBriyKaiDAUNL9IZBBxot5Y
21JNOtJlxO/mY7Djt79gYrP9n8TtrEuPtIFpCcY3ESi2pPo+VmLQ6bpiuzKS0Eh9
5ERqiM/LkjSlQPDAtp3YvLkWT6r4WvLrCzF7NAQI8EfyFLVNtxVF7p4+/IBshCux
khDj2wXSSFgOQK8UUdcoqSu6jARgFkA=
-----END CERTIFICATE-----
Generated at Sun May 12 10:23:40 2024 by rpki-client on console-ams.rpki-client.org