Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/602d67d4-0ed4-3531-bb95-c6715296097b.roa
File:                     602d67d4-0ed4-3531-bb95-c6715296097b.roa (raw, json)
Hash identifier:          rvbou4TIzCVrpMThds5De3R+DLSKD0EGYomMBfpzEU0=
Subject key identifier:   04:BD:D0:38:FF:2F:EC:A8:53:C1:00:27:E0:8D:27:63:A8:BE:F3:C3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BB3285B15185D130304A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/602d67d4-0ed4-3531-bb95-c6715296097b.roa
Signing time:             Mon 18 Mar 2024 22:14:59 +0000
ROA not before:           Mon 18 Mar 2024 22:14:59 +0000
ROA not after:            Sun 16 Jun 2024 22:14:59 +0000
asID:                     15169
IP address blocks:        104.134.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:32:85:b1:51:85:d1:30:30:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:14:59 2024 GMT
            Not After : Jun 16 22:14:59 2024 GMT
        Subject: CN=ea872159-c412-4554-ae34-acaea630a129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:37:81:ad:1c:3c:b7:e1:2c:8e:fc:c5:7c:
                    7e:3b:89:71:aa:c9:fd:fd:23:d3:3e:05:13:df:32:
                    a2:d9:01:b1:4e:23:bc:3b:82:b9:8f:99:63:33:bc:
                    93:8c:1e:06:10:e2:29:af:b6:14:19:5c:5d:94:4e:
                    b9:01:fc:7a:dc:dd:9a:96:8a:47:29:7e:7e:e6:70:
                    41:de:34:d0:f3:c6:eb:4c:ea:4a:c9:2f:4a:3f:68:
                    be:75:77:31:91:20:65:89:d7:9e:47:b2:13:4c:ef:
                    b9:05:58:c2:d8:89:18:9d:ea:0e:a9:82:de:3c:cd:
                    20:49:7c:73:54:fc:38:ac:97:e9:18:c9:f9:6b:a8:
                    00:62:ba:bb:19:61:89:e5:fb:44:46:78:58:d1:82:
                    15:0c:16:e0:db:65:54:40:40:f6:bd:49:5d:c7:d8:
                    52:66:00:35:41:e5:69:b6:bb:c6:94:4a:de:8a:4a:
                    ff:df:e8:5d:9b:9e:16:4e:73:b0:42:cc:91:c1:62:
                    3f:28:2b:65:8c:ff:1d:c0:d8:64:ee:65:b5:4a:e6:
                    f7:e7:7e:45:01:57:f4:a2:da:0e:09:d3:29:ae:62:
                    02:d0:d3:e7:d8:08:6e:f8:11:c2:30:51:07:36:7c:
                    84:de:ed:b6:92:86:97:5b:ca:fc:7e:4e:45:7c:c8:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:D0:38:FF:2F:EC:A8:53:C1:00:27:E0:8D:27:63:A8:BE:F3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/602d67d4-0ed4-3531-bb95-c6715296097b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:f8:0b:8d:3d:5b:cc:7b:56:66:34:a1:d0:d9:dc:f8:e1:
         ee:a0:24:f2:0b:f4:ad:4c:cf:e8:87:2f:07:f3:47:55:39:a7:
         35:d7:e8:b5:d1:12:0f:0b:e1:94:bb:4f:a4:c7:56:4f:08:86:
         84:63:42:d9:52:20:89:9b:09:0b:9a:36:13:08:f5:83:77:cf:
         8d:38:80:4d:cb:18:ab:91:89:6a:b2:d0:b1:de:63:d3:55:e5:
         75:ad:86:8b:1c:c1:64:96:dc:1d:7f:b0:09:98:24:92:8b:d0:
         eb:d2:08:27:3d:b4:4c:e9:32:10:fd:5f:e9:96:ee:b0:45:c4:
         35:30:23:35:f5:76:fc:92:48:05:30:ae:3b:c2:d2:cf:02:8c:
         1b:1f:f2:00:9f:ce:ec:48:10:19:f3:59:7d:10:08:2a:6a:32:
         64:83:5f:bb:6c:64:74:85:80:54:a0:de:af:12:04:dd:2e:a9:
         84:3e:6c:17:21:37:25:ce:49:26:6c:21:68:27:6f:f6:c4:c2:
         f1:1b:ef:6d:e5:7a:4b:44:65:21:c2:19:fb:02:10:75:b8:f7:
         69:51:3e:c2:3d:55:52:00:a7:4a:c0:f6:97:8c:14:ac:0b:f2:
         86:77:c6:f1:2b:b4:30:be:a3:00:f5:86:da:d0:b4:03:3a:50:
         c8:0b:7d:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuzKFsVGF0TAwSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxODIyMTQ1OVoXDTI0MDYxNjIyMTQ1OVowLzEtMCsGA1UEAxMk
ZWE4NzIxNTktYzQxMi00NTU0LWFlMzQtYWNhZWE2MzBhMTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17U3ga0cPLfhLI78xXx+O4lxqsn9/SPTPgUT
3zKi2QGxTiO8O4K5j5ljM7yTjB4GEOIpr7YUGVxdlE65Afx63N2alopHKX5+5nBB
3jTQ88brTOpKyS9KP2i+dXcxkSBlideeR7ITTO+5BVjC2IkYneoOqYLePM0gSXxz
VPw4rJfpGMn5a6gAYrq7GWGJ5ftERnhY0YIVDBbg22VUQED2vUldx9hSZgA1QeVp
trvGlEreikr/3+hdm54WTnOwQsyRwWI/KCtljP8dwNhk7mW1Sub3535FAVf0otoO
CdMprmIC0NPn2Ahu+BHCMFEHNnyE3u22koaXW8r8fk5FfMg39wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAS90Dj/L+yoU8EAJ+CNJ2OovvPDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjAyZDY3ZDQtMGVkNC0z
NTMxLWJiOTUtYzY3MTUyOTYwOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERM+AuNPVvMe1ZmNKHQ2dz44e6gJPIL9K1Mz+iHLwfzR1U5pzXX6LXR
Eg8L4ZS7T6THVk8IhoRjQtlSIImbCQuaNhMI9YN3z404gE3LGKuRiWqy0LHeY9NV
5XWthoscwWSW3B1/sAmYJJKL0OvSCCc9tEzpMhD9X+mW7rBFxDUwIzX1dvySSAUw
rjvC0s8CjBsf8gCfzuxIEBnzWX0QCCpqMmSDX7tsZHSFgFSg3q8SBN0uqYQ+bBch
NyXOSSZsIWgnb/bEwvEb723lektEZSHCGfsCEHW492lRPsI9VVIAp0rA9peMFKwL
8oZ3xvErtDC+owD1htrQtAM6UMgLfe0=
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:32 2024 by rpki-client on console-ams.rpki-client.org