Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa
File:                     58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa (raw, json)
Hash identifier:          sOTViG6oXYh0wOsTghOeOncv4PaZUN3SaB1RS+vjdcE=
Subject key identifier:   17:01:8A:66:11:15:29:39:A3:3C:E6:CB:7F:74:72:4C:39:4E:5E:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535845FA0557259064943EB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa
Signing time:             Thu 14 Mar 2024 21:50:38 +0000
ROA not before:           Thu 14 Mar 2024 21:50:38 +0000
ROA not after:            Wed 12 Jun 2024 21:50:38 +0000
asID:                     41264
IP address blocks:        104.133.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:5f:a0:55:72:59:06:49:43:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:50:38 2024 GMT
            Not After : Jun 12 21:50:38 2024 GMT
        Subject: CN=c8924b27-213d-4353-8e36-056d5ca5f405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:f7:d1:71:90:b6:71:71:03:9d:31:44:25:
                    69:8b:32:5b:0a:e3:a4:b5:36:03:51:6d:5a:bb:4d:
                    ef:e7:48:f7:35:a4:f8:a7:39:fe:81:ad:ea:a2:53:
                    ae:04:55:a4:26:7f:15:87:30:ee:e7:6d:70:1b:dd:
                    9d:28:5b:90:42:1d:2e:18:0e:05:53:c6:5f:23:36:
                    f0:5f:b0:fb:0b:9f:7e:99:aa:de:95:4c:b6:04:d7:
                    6d:54:33:36:62:e7:b8:b2:82:10:a4:43:85:6a:25:
                    16:78:f1:0b:3c:22:30:7e:69:ab:dd:0e:59:b9:b3:
                    5f:cf:7d:42:fe:9f:3d:71:95:5d:21:9f:aa:69:31:
                    f7:6c:04:11:cf:67:77:c9:72:74:51:90:23:68:1b:
                    06:41:6a:22:f9:ac:e0:eb:b7:84:aa:76:7c:43:cc:
                    5e:c2:2b:15:4e:99:72:2b:dd:b2:bf:b7:b3:e0:8a:
                    1e:29:68:72:3a:74:91:db:7e:c4:9b:9f:ba:cb:38:
                    50:31:5d:f7:39:c5:55:1e:0c:65:50:a7:c5:a4:14:
                    81:b6:9b:23:14:e9:4c:63:20:9e:37:11:0c:9a:34:
                    8b:d8:3e:95:74:f4:16:75:68:b5:ab:96:71:a3:3c:
                    f3:11:fd:fc:17:1e:8f:9e:b2:2c:98:97:ec:61:26:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:01:8A:66:11:15:29:39:A3:3C:E6:CB:7F:74:72:4C:39:4E:5E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:31:a4:ed:41:03:96:ae:f8:56:d8:2f:2e:be:4f:44:4a:
         c6:ed:c2:0c:56:4c:17:b6:fe:50:10:13:f4:4f:48:04:5f:83:
         98:e0:8c:cc:11:0f:02:79:a3:c4:e3:84:78:1a:28:32:4d:ce:
         e3:76:10:e0:b9:00:a3:35:f8:58:9f:f7:75:bf:47:df:a0:dd:
         bd:15:c6:bb:b8:be:3c:3b:8f:a3:10:7a:4f:91:70:06:d6:3f:
         05:86:13:51:b2:28:ab:93:4d:83:c4:8d:52:42:e4:b4:34:52:
         ed:05:16:6c:5f:a2:3b:70:d4:cc:fa:84:d7:1c:86:df:a0:9b:
         23:f6:9b:a5:35:01:d1:8d:55:70:58:7a:85:a1:ba:e1:ba:de:
         9d:f8:cf:38:52:de:8d:a8:47:76:d8:e5:ac:82:c4:fe:d0:c6:
         24:ea:35:c0:bc:a4:bd:13:31:e8:d0:ac:55:98:9d:c2:e9:bc:
         98:65:f8:01:8c:59:56:07:6d:b1:0d:41:7b:cc:16:26:e1:df:
         eb:70:8a:21:96:1d:32:67:6c:14:ed:cb:2d:8d:13:a7:77:6e:
         c2:b9:41:a2:ff:cb:6c:12:17:e3:d9:bd:78:d0:84:50:51:8d:
         aa:f4:62:b3:e6:58:d4:42:6c:e2:bd:d9:dd:cb:11:70:29:4e:
         27:2c:5a:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hF+gVXJZBklD6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTAzOFoXDTI0MDYxMjIxNTAzOFowLzEtMCsGA1UEAxMk
Yzg5MjRiMjctMjEzZC00MzUzLThlMzYtMDU2ZDVjYTVmNDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEb30XGQtnFxA50xRCVpizJbCuOktTYDUW1a
u03v50j3NaT4pzn+ga3qolOuBFWkJn8VhzDu521wG92dKFuQQh0uGA4FU8ZfIzbw
X7D7C59+marelUy2BNdtVDM2Yue4soIQpEOFaiUWePELPCIwfmmr3Q5ZubNfz31C
/p89cZVdIZ+qaTH3bAQRz2d3yXJ0UZAjaBsGQWoi+azg67eEqnZ8Q8xewisVTply
K92yv7ez4IoeKWhyOnSR237Em5+6yzhQMV33OcVVHgxlUKfFpBSBtpsjFOlMYyCe
NxEMmjSL2D6VdPQWdWi1q5ZxozzzEf38Fx6PnrIsmJfsYSYn3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcBimYRFSk5ozzmy390ckw5Tl62MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNThlNjc1NjItOTMzNi0z
OWM0LTliYmQtNTQ4NWFhYTJjNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADl8MaTtQQOWrvhW2C8uvk9ESsbtwgxWTBe2/lAQE/RPSARfg5jgjMwR
DwJ5o8TjhHgaKDJNzuN2EOC5AKM1+Fif93W/R9+g3b0Vxru4vjw7j6MQek+RcAbW
PwWGE1GyKKuTTYPEjVJC5LQ0Uu0FFmxfojtw1Mz6hNccht+gmyP2m6U1AdGNVXBY
eoWhuuG63p34zzhS3o2oR3bY5ayCxP7QxiTqNcC8pL0TMejQrFWYncLpvJhl+AGM
WVYHbbENQXvMFibh3+twiiGWHTJnbBTtyy2NE6d3bsK5QaL/y2wSF+PZvXjQhFBR
jar0YrPmWNRCbOK92d3LEXApTicsWpQ=
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:31 2024 by rpki-client on console-ams.rpki-client.org