Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ee223ac-e879-37e9-a6d5-774d99c9928a.roa
File:                     6ee223ac-e879-37e9-a6d5-774d99c9928a.roa (raw, json)
Hash identifier:          SihzJML42JAqzHCNGOoURZDSJ6SCaD/ZRIEQX98YrNA=
Subject key identifier:   0E:3D:29:1E:2A:F8:40:20:D4:29:27:9D:60:31:F0:7E:D6:20:D2:0D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B8DF6B00580AABEC792FC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ee223ac-e879-37e9-a6d5-774d99c9928a.roa
Signing time:             Mon 18 Mar 2024 22:10:18 +0000
ROA not before:           Mon 18 Mar 2024 22:10:18 +0000
ROA not after:            Sun 16 Jun 2024 22:10:18 +0000
asID:                     15169
IP address blocks:        104.134.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:df:6b:00:58:0a:ab:ec:79:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:10:18 2024 GMT
            Not After : Jun 16 22:10:18 2024 GMT
        Subject: CN=fab56a38-5017-4976-b5bc-8268613c93b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:cf:91:ff:8c:06:1e:a8:98:c5:03:b2:36:
                    1f:b5:6a:ac:f0:c0:65:7c:b2:a3:00:f7:c2:9e:8a:
                    89:0c:d1:84:50:dc:7d:0f:60:e5:48:d7:19:2e:25:
                    c9:f2:be:a3:e3:2f:50:20:c3:4f:72:60:f8:4d:d5:
                    de:cb:93:73:70:b4:e8:ab:65:bb:d1:12:a7:ac:9c:
                    61:00:d9:69:69:4c:41:07:d8:7e:0f:9a:25:5d:a1:
                    b5:38:33:e8:39:50:e6:ef:fd:7b:a2:55:53:5e:53:
                    e4:03:6f:ce:b7:75:9e:f3:f6:80:58:65:06:03:50:
                    c5:0e:71:bb:b7:97:ea:69:3b:eb:33:1b:bb:1e:69:
                    77:5e:58:38:7e:c8:f5:6d:13:ee:8a:ca:8b:9c:e9:
                    eb:32:7c:ad:7c:5d:ab:5d:ba:bb:98:5b:bc:71:fd:
                    0d:38:ef:26:d2:59:29:c3:5c:66:b9:4c:19:ef:fe:
                    06:4f:ce:20:4e:6f:47:5d:57:df:65:1c:48:a9:15:
                    f3:17:8c:77:53:ea:8c:52:85:f7:73:cd:56:ad:f8:
                    db:16:8c:a4:52:70:ef:75:da:bf:11:79:df:ad:16:
                    93:8a:fc:a9:2c:cc:34:02:f2:68:f6:f5:e0:6d:1a:
                    39:c4:8a:f2:1f:77:d9:0c:44:15:61:e4:85:f6:88:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:29:1E:2A:F8:40:20:D4:29:27:9D:60:31:F0:7E:D6:20:D2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ee223ac-e879-37e9-a6d5-774d99c9928a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:2e:3a:b5:d6:ad:7a:c7:d9:34:9e:e4:bf:3b:08:c4:8a:
         6f:73:f5:51:db:22:40:d7:28:57:9b:1f:e0:b9:72:25:e9:55:
         33:16:79:f4:e5:87:6f:7f:4c:f2:6a:fb:a2:a4:f2:f1:b4:0b:
         cf:d4:80:a6:3b:37:4b:fa:66:ad:b4:44:9d:9c:d3:75:28:71:
         a3:35:bd:14:5c:b1:42:de:fe:6d:52:0f:1d:b6:1c:c2:b9:1d:
         f9:fd:65:29:24:86:a5:ba:8e:43:9a:13:19:86:55:c0:5d:74:
         10:13:6f:22:46:d6:50:f5:30:06:0c:7f:82:fa:c9:c8:6b:5f:
         a3:88:93:4e:96:23:9a:a6:e4:fa:fa:37:f1:4c:a4:3e:ef:6e:
         29:64:0e:80:d7:a4:cf:62:b3:b7:cd:05:c1:36:43:5c:bf:25:
         3e:4f:f8:c5:54:19:50:e1:fb:0c:3c:e8:71:f3:fd:3b:8a:c2:
         23:35:96:8b:b2:38:60:66:da:9b:6f:09:05:04:02:e5:65:f2:
         55:4a:c7:21:b2:15:9c:43:5c:36:44:4e:b5:45:9a:dd:5f:c9:
         a1:9b:05:94:66:d3:6c:7a:04:31:0d:38:bc:22:92:f0:d2:45:
         2f:c6:39:47:d2:4f:67:01:62:ed:0f:2f:ee:8e:8c:e7:0b:1d:
         15:40:f9:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuN9rAFgKq+x5L8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxODIyMTAxOFoXDTI0MDYxNjIyMTAxOFowLzEtMCsGA1UEAxMk
ZmFiNTZhMzgtNTAxNy00OTc2LWI1YmMtODI2ODYxM2M5M2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JfPkf+MBh6omMUDsjYftWqs8MBlfLKjAPfC
noqJDNGEUNx9D2DlSNcZLiXJ8r6j4y9QIMNPcmD4TdXey5NzcLToq2W70RKnrJxh
ANlpaUxBB9h+D5olXaG1ODPoOVDm7/17olVTXlPkA2/Ot3We8/aAWGUGA1DFDnG7
t5fqaTvrMxu7Hml3Xlg4fsj1bRPuisqLnOnrMnytfF2rXbq7mFu8cf0NOO8m0lkp
w1xmuUwZ7/4GT84gTm9HXVffZRxIqRXzF4x3U+qMUoX3c81WrfjbFoykUnDvddq/
EXnfrRaTivypLMw0AvJo9vXgbRo5xIryH3fZDEQVYeSF9oizHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA49KR4q+EAg1CknnWAx8H7WININMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmVlMjIzYWMtZTg3OS0z
N2U5LWE2ZDUtNzc0ZDk5Yzk5MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyfLjq11q16x9k0nuS/OwjEim9z9VHbIkDXKFebH+C5ciXpVTMWefTl
h29/TPJq+6Kk8vG0C8/UgKY7N0v6Zq20RJ2c03UocaM1vRRcsULe/m1SDx22HMK5
Hfn9ZSkkhqW6jkOaExmGVcBddBATbyJG1lD1MAYMf4L6ychrX6OIk06WI5qm5Pr6
N/FMpD7vbilkDoDXpM9is7fNBcE2Q1y/JT5P+MVUGVDh+ww86HHz/TuKwiM1louy
OGBm2ptvCQUEAuVl8lVKxyGyFZxDXDZETrVFmt1fyaGbBZRm02x6BDENOLwikvDS
RS/GOUfST2cBYu0PL+6OjOcLHRVA+SM=
-----END CERTIFICATE-----
Generated at Sat May 11 09:50:06 2024 by rpki-client on console-fra.rpki-client.org