Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53832379-18f8-3648-a91a-7f4339cb3e21.roa
File:                     53832379-18f8-3648-a91a-7f4339cb3e21.roa (raw, json)
Hash identifier:          uJjhNkYGZZWBHOgaKoDo8n4N//d76RL7ga5NzpCf4DE=
Subject key identifier:   10:A6:4A:5E:C0:26:CC:9B:12:7C:03:D5:61:14:C5:39:AA:CC:06:47
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1C6B2BBDA9BC0FEFC400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53832379-18f8-3648-a91a-7f4339cb3e21.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:1c:6b:2b:bd:a9:bc:0f:ef:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=0931f949-cdc2-44c4-b999-5a3dc844a2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:26:5e:93:00:b9:47:ed:90:7c:27:e8:e8:
                    42:c5:f4:e1:6c:5a:82:91:bf:f3:25:8d:e1:19:e8:
                    8b:3d:2a:c6:14:d2:1b:a2:0b:fe:27:fd:03:94:8e:
                    35:d1:58:7b:74:ad:9a:0a:45:21:bc:84:b9:b0:85:
                    94:81:d3:55:57:eb:5a:da:f8:c1:88:de:44:8a:a1:
                    b6:25:1a:1f:b7:af:a7:c0:d4:21:b5:7f:c0:cd:fc:
                    09:79:04:18:7e:5e:e4:fa:17:74:66:9e:f7:56:15:
                    5e:15:4d:e7:2f:3d:9b:37:d1:05:0b:52:d3:ec:b7:
                    e4:d7:27:f0:67:df:ec:de:73:fe:53:53:de:e6:2d:
                    7b:a9:50:0f:25:d3:71:51:ed:e7:6f:ce:77:44:e1:
                    5e:9e:57:0b:da:82:66:2e:51:8a:8f:5f:de:49:7b:
                    c4:38:b3:11:fe:04:c7:23:7f:2d:09:33:18:7f:25:
                    ef:e2:ba:3f:c7:64:24:2a:67:2c:1c:7b:4f:77:cc:
                    e8:8c:d2:c0:12:42:a3:ab:57:3d:4c:0c:e2:da:a9:
                    12:c3:50:b7:b6:cf:69:8c:2e:e7:cd:99:a5:35:df:
                    90:aa:4e:6d:25:a5:ac:d6:0e:ee:8c:e1:f3:25:e1:
                    84:dc:b6:a1:5d:00:3e:69:4c:8d:73:9c:74:79:3a:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A6:4A:5E:C0:26:CC:9B:12:7C:03:D5:61:14:C5:39:AA:CC:06:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53832379-18f8-3648-a91a-7f4339cb3e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:20:62:87:fd:17:28:f2:4c:cf:d0:85:01:49:92:f7:d4:
         1a:8d:ae:0d:f8:be:47:5a:d9:7b:1b:ef:7c:e6:db:62:6f:db:
         2f:fb:26:78:8e:3c:ad:29:ac:e5:30:c8:6f:6e:81:a8:76:58:
         5b:55:5c:42:4a:3b:3d:b0:92:00:7b:ab:74:2b:cc:5e:aa:73:
         6f:56:bd:88:1c:44:05:57:4a:7f:ef:81:30:db:61:a6:47:fa:
         22:1d:30:94:bf:dd:53:b3:43:b3:aa:e8:e0:ff:bf:40:d4:af:
         82:c0:d5:ae:16:61:85:d5:68:b1:18:59:34:14:6b:8a:6b:42:
         97:d5:f2:73:a4:5c:ce:87:4e:f3:ea:be:2c:80:61:c7:4c:f2:
         13:1a:d1:7a:cd:48:db:7f:ec:25:b2:73:33:f5:0c:89:c8:47:
         65:74:9e:f8:6d:6b:47:89:98:7f:f1:1f:45:e1:7b:10:a4:9f:
         f7:31:d6:87:47:65:3e:b9:1d:a2:49:0b:3b:64:8a:03:8a:d5:
         ab:8a:15:6b:87:6b:a4:3b:e4:83:a7:e6:1f:d6:29:bf:8b:60:
         bd:f1:64:1b:c2:9c:58:11:b3:10:b5:65:28:9f:0a:b7:33:67:
         25:78:07:ec:47:ce:8b:89:2a:81:21:ae:ad:56:15:1b:9f:b2:
         9e:0a:88:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVahxrK72pvA/vxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
MDkzMWY5NDktY2RjMi00NGM0LWI5OTktNWEzZGM4NDRhMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhYmXpMAuUftkHwn6OhCxfThbFqCkb/zJY3h
GeiLPSrGFNIbogv+J/0DlI410Vh7dK2aCkUhvIS5sIWUgdNVV+ta2vjBiN5EiqG2
JRoft6+nwNQhtX/AzfwJeQQYfl7k+hd0Zp73VhVeFU3nLz2bN9EFC1LT7Lfk1yfw
Z9/s3nP+U1Pe5i17qVAPJdNxUe3nb853ROFenlcL2oJmLlGKj1/eSXvEOLMR/gTH
I38tCTMYfyXv4ro/x2QkKmcsHHtPd8zojNLAEkKjq1c9TAzi2qkSw1C3ts9pjC7n
zZmlNd+Qqk5tJaWs1g7ujOHzJeGE3LahXQA+aUyNc5x0eTo5FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBCmSl7AJsybEnwD1WEUxTmqzAZHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTM4MzIzNzktMThmOC0z
NjQ4LWE5MWEtN2Y0MzM5Y2IzZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCnIGKH/Rco8kzP0IUBSZL31BqNrg34vkda2Xsb73zm22Jv2y/7JniO
PK0prOUwyG9ugah2WFtVXEJKOz2wkgB7q3QrzF6qc29WvYgcRAVXSn/vgTDbYaZH
+iIdMJS/3VOzQ7Oq6OD/v0DUr4LA1a4WYYXVaLEYWTQUa4prQpfV8nOkXM6HTvPq
viyAYcdM8hMa0XrNSNt/7CWyczP1DInIR2V0nvhta0eJmH/xH0XhexCkn/cx1odH
ZT65HaJJCztkigOK1auKFWuHa6Q75IOn5h/WKb+LYL3xZBvCnFgRsxC1ZSifCrcz
ZyV4B+xHzouJKoEhrq1WFRufsp4KiN4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:49 2024 by rpki-client on console-fra.rpki-client.org