Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
File:                     7891b2df-185a-3462-825e-ae609edda099.roa (raw, json)
Hash identifier:          dsVBF+Rxb0LvOTXfqplp0m5h7ccaz1QveIROWaaKrss=
Subject key identifier:   4E:40:F3:7D:53:8D:03:E4:7E:1E:D7:6D:F5:26:D5:0A:42:B6:24:52
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535854AC085C9EBB1B7868D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
Signing time:             Thu 14 Mar 2024 21:52:29 +0000
ROA not before:           Thu 14 Mar 2024 21:52:29 +0000
ROA not after:            Wed 12 Jun 2024 21:52:29 +0000
asID:                     15169
IP address blocks:        104.134.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:4a:c0:85:c9:eb:b1:b7:86:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:29 2024 GMT
            Not After : Jun 12 21:52:29 2024 GMT
        Subject: CN=536236ca-2d74-450c-877d-311600a0f52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:a9:4a:dd:44:a6:3f:f7:a7:da:fc:86:f1:
                    c6:4e:86:7c:18:fb:d3:c6:66:a1:c5:93:72:a0:4b:
                    bb:2f:85:80:e6:aa:ad:0b:c3:76:0e:a5:ec:c0:dc:
                    3f:5d:46:a8:d5:05:1f:3d:7c:ae:7a:93:3c:5e:bf:
                    1f:48:d3:30:b8:59:d6:e9:2f:49:fe:b4:b4:b4:35:
                    36:b3:fc:6e:f9:8a:c2:be:9f:52:ed:33:8d:13:e5:
                    c8:6d:c6:77:3c:89:04:83:21:5b:82:89:3e:6d:7b:
                    6b:ea:d0:2b:d4:f5:5a:e0:a3:1b:44:3c:1a:ec:9d:
                    e2:c1:69:6b:44:fa:d3:e8:dc:bc:49:01:cd:0d:d5:
                    6c:c8:49:52:15:f7:87:a4:d6:f3:e4:cc:22:b0:33:
                    3c:89:c6:ea:eb:60:29:ae:5c:7a:a6:e2:e5:fb:f2:
                    b4:59:c5:25:6b:fe:32:97:47:f2:a3:3e:02:ab:e8:
                    9d:76:61:77:8a:5f:5b:fe:11:28:38:d5:37:1e:cf:
                    da:6e:1e:63:94:4b:94:94:8f:a9:6b:c1:ab:30:b9:
                    51:88:b5:f5:cf:a6:46:cf:6d:24:33:cb:e5:b1:cf:
                    bb:ed:05:b4:b7:69:87:ac:77:87:71:37:71:c0:d3:
                    9f:4a:3c:cf:4f:a3:92:40:fd:e5:6e:cf:25:07:9b:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:F3:7D:53:8D:03:E4:7E:1E:D7:6D:F5:26:D5:0A:42:B6:24:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:95:c0:f8:77:ae:f0:f6:9f:3e:9f:e1:68:8d:90:c8:52:
         fe:8f:9a:bb:a7:11:3c:0d:49:6d:e4:bc:61:bb:ea:df:0c:9d:
         df:7e:5b:02:b8:de:aa:a1:11:30:5b:fb:ef:51:03:3c:2d:e5:
         49:5d:f6:84:9d:06:6d:9c:3c:29:e6:84:cc:bb:25:b0:84:2b:
         09:e0:47:80:b6:a6:5f:15:eb:c1:67:a4:8c:dc:a9:c3:e8:88:
         e4:60:7f:db:1f:f6:2b:95:9b:de:86:dd:14:59:05:4e:82:c8:
         02:be:85:8a:3f:ad:50:38:71:0a:27:1d:bc:9f:8c:2a:9c:4d:
         d7:ad:60:78:0b:12:83:67:23:2d:2c:52:59:c1:d6:1d:d3:31:
         16:3e:54:73:59:a4:4a:54:cf:01:70:72:e1:3e:98:dd:eb:bd:
         dd:ec:18:d1:3e:ac:56:6f:16:66:b4:23:9b:6d:d9:9a:8b:38:
         9d:04:c7:e4:ec:3c:e8:91:03:26:c7:fb:fb:ae:c7:f9:23:03:
         8e:8e:64:d5:6b:3a:03:16:3e:7e:b5:af:b8:0b:af:c1:62:b5:
         23:b7:25:2f:ac:71:2e:a6:ab:da:d8:ac:48:64:27:0a:45:53:
         9f:ff:0b:60:19:4b:29:4d:02:62:21:5d:a3:15:a8:03:24:3b:
         d9:e2:a4:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hUrAhcnrsbeGjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTIyOVoXDTI0MDYxMjIxNTIyOVowLzEtMCsGA1UEAxMk
NTM2MjM2Y2EtMmQ3NC00NTBjLTg3N2QtMzExNjAwYTBmNTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj+pSt1Epj/3p9r8hvHGToZ8GPvTxmahxZNy
oEu7L4WA5qqtC8N2DqXswNw/XUao1QUfPXyuepM8Xr8fSNMwuFnW6S9J/rS0tDU2
s/xu+YrCvp9S7TONE+XIbcZ3PIkEgyFbgok+bXtr6tAr1PVa4KMbRDwa7J3iwWlr
RPrT6Ny8SQHNDdVsyElSFfeHpNbz5MwisDM8icbq62Aprlx6puLl+/K0WcUla/4y
l0fyoz4Cq+iddmF3il9b/hEoONU3Hs/abh5jlEuUlI+pa8GrMLlRiLX1z6ZGz20k
M8vlsc+77QW0t2mHrHeHcTdxwNOfSjzPT6OSQP3lbs8lB5tZBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5A831TjQPkfh7XbfUm1QpCtiRSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzg5MWIyZGYtMTg1YS0z
NDYyLTgyNWUtYWU2MDllZGRhMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIauMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxolcD4d67w9p8+n+FojZDIUv6PmrunETwNSW3kvGG76t8Mnd9+WwK4
3qqhETBb++9RAzwt5Uld9oSdBm2cPCnmhMy7JbCEKwngR4C2pl8V68FnpIzcqcPo
iORgf9sf9iuVm96G3RRZBU6CyAK+hYo/rVA4cQonHbyfjCqcTdetYHgLEoNnIy0s
UlnB1h3TMRY+VHNZpEpUzwFwcuE+mN3rvd3sGNE+rFZvFma0I5tt2ZqLOJ0Ex+Ts
POiRAybH+/uux/kjA46OZNVrOgMWPn61r7gLr8FitSO3JS+scS6mq9rYrEhkJwpF
U5//C2AZSylNAmIhXaMVqAMkO9nipNc=
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:34 2024 by rpki-client on console-ams.rpki-client.org