Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa
File:                     65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa (raw, json)
Hash identifier:          N1SfsDgsq9F5/UQLJaQdIAd5DZl+unTqTFB4jpBaC9k=
Subject key identifier:   8E:F4:0D:4E:7E:26:21:50:CF:FD:AA:11:9E:9F:45:FE:62:55:42:8A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358461C94834CAF8D2B00C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa
Signing time:             Thu 14 Mar 2024 21:50:39 +0000
ROA not before:           Thu 14 Mar 2024 21:50:39 +0000
ROA not after:            Wed 12 Jun 2024 21:50:39 +0000
asID:                     41264
IP address blocks:        104.133.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:61:c9:48:34:ca:f8:d2:b0:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:50:39 2024 GMT
            Not After : Jun 12 21:50:39 2024 GMT
        Subject: CN=3dff5754-b221-4197-9ebc-85e87720f22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:34:23:91:5f:83:a0:83:8e:a2:63:58:4a:
                    cf:58:d0:b1:f1:de:a2:87:d9:b9:ef:83:22:c3:8f:
                    c9:b9:59:8a:ec:b5:7e:ae:06:81:23:fb:be:37:be:
                    71:b3:2a:c0:80:b2:fe:a8:2b:56:d0:f4:f4:33:7d:
                    31:95:e1:dd:e5:c4:4d:12:41:af:6a:cf:33:c7:42:
                    f6:4a:36:14:86:7a:69:0a:2c:83:aa:d5:c7:f7:2f:
                    05:94:66:99:ad:9a:bc:0b:81:d1:ea:df:e8:cd:aa:
                    f6:f5:56:a2:e8:b2:7c:d7:a7:0e:13:fc:38:f2:0e:
                    53:c6:01:a0:6e:6d:d2:eb:3c:82:8d:5d:63:52:86:
                    96:81:3c:ee:a9:0b:a6:2c:76:b9:35:6c:ab:44:c6:
                    63:83:71:1f:18:a6:f8:38:3b:da:d4:f6:2b:aa:7d:
                    ce:63:6d:6a:22:70:2d:8a:a7:4e:96:b5:cb:3d:b9:
                    b0:29:47:cb:eb:55:8c:aa:f5:67:2b:75:03:d4:4e:
                    d1:9e:fc:ec:1b:0c:cd:22:c7:28:7f:83:46:82:af:
                    5c:81:af:ae:63:0b:93:7a:2f:9a:b2:b5:b5:f9:eb:
                    6b:00:61:8b:40:07:fb:fd:f2:ca:34:7d:76:05:b1:
                    3d:12:d1:51:82:90:c6:12:43:06:01:36:70:a3:21:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:0D:4E:7E:26:21:50:CF:FD:AA:11:9E:9F:45:FE:62:55:42:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:36:81:3f:ee:da:85:20:d4:00:de:7c:cd:d6:39:d3:e3:22:
         6f:7e:4d:06:e6:95:33:81:e8:e7:ca:22:11:4e:09:0c:29:47:
         59:60:07:55:16:51:b7:ef:29:11:4d:2d:6a:15:cf:c3:de:78:
         92:94:fb:8b:b2:2e:a2:03:34:d0:e3:68:38:a1:a1:18:ef:9f:
         0d:7a:00:3e:fe:7f:2e:1d:14:b1:13:a1:e0:96:30:64:e8:1f:
         b1:14:64:89:98:79:2c:0a:43:27:d4:ef:a9:19:56:06:79:d4:
         23:9b:9b:dd:61:0f:b6:4d:6c:c4:a6:f3:d6:75:0a:fb:c1:de:
         6f:9f:0c:cc:cb:2f:c5:58:c7:ce:0e:03:cf:1c:36:02:15:61:
         be:dc:bc:b4:84:9b:d6:33:fd:be:bd:99:8c:55:0b:18:3c:8a:
         2f:05:5f:d5:1e:8e:ca:b4:bf:6a:91:ac:f5:83:5d:2f:26:31:
         77:61:f1:fe:ac:3a:16:c1:7b:8e:0b:a8:86:27:8a:8f:1d:9b:
         d0:3c:5c:ce:fe:7d:eb:7a:33:cb:9e:eb:f1:0b:4d:74:d0:63:
         b3:19:67:21:cb:05:7c:65:62:cf:76:f2:ff:d5:cb:e2:76:0c:
         32:f5:fd:6d:55:a6:9f:8b:e9:69:fe:48:e9:bc:5f:5a:e9:90:
         5a:ff:9c:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hGHJSDTK+NKwDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTAzOVoXDTI0MDYxMjIxNTAzOVowLzEtMCsGA1UEAxMk
M2RmZjU3NTQtYjIyMS00MTk3LTllYmMtODVlODc3MjBmMjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrM0I5Ffg6CDjqJjWErPWNCx8d6ih9m574Mi
w4/JuVmK7LV+rgaBI/u+N75xsyrAgLL+qCtW0PT0M30xleHd5cRNEkGvas8zx0L2
SjYUhnppCiyDqtXH9y8FlGaZrZq8C4HR6t/ozar29Vai6LJ816cOE/w48g5TxgGg
bm3S6zyCjV1jUoaWgTzuqQumLHa5NWyrRMZjg3EfGKb4ODva1PYrqn3OY21qInAt
iqdOlrXLPbmwKUfL61WMqvVnK3UD1E7RnvzsGwzNIscof4NGgq9cga+uYwuTei+a
srW1+etrAGGLQAf7/fLKNH12BbE9EtFRgpDGEkMGATZwoyHkywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI70DU5+JiFQz/2qEZ6fRf5iVUKKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjViM2E0OWEtYjRhNS0z
NzIxLTk4ODktZGRjMTQ4OGI0YjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA2gT/u2oUg1ADefM3WOdPjIm9+TQbmlTOB6OfKIhFOCQwpR1lgB1UW
UbfvKRFNLWoVz8PeeJKU+4uyLqIDNNDjaDihoRjvnw16AD7+fy4dFLEToeCWMGTo
H7EUZImYeSwKQyfU76kZVgZ51CObm91hD7ZNbMSm89Z1CvvB3m+fDMzLL8VYx84O
A88cNgIVYb7cvLSEm9Yz/b69mYxVCxg8ii8FX9Uejsq0v2qRrPWDXS8mMXdh8f6s
OhbBe44LqIYnio8dm9A8XM7+fet6M8ue6/ELTXTQY7MZZyHLBXxlYs928v/Vy+J2
DDL1/W1Vpp+L6Wn+SOm8X1rpkFr/nF0=
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:58 2024 by rpki-client on console-fra.rpki-client.org