Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa
File:                     8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa (raw, json)
Hash identifier:          i/apVsFjRjp4Tdeao6ZCvwF7kqas9j34IMc0AukFJFY=
Subject key identifier:   90:A9:67:9B:F0:E2:1C:99:38:9C:89:F7:7A:54:B1:C3:B5:BD:EE:8A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A0DCFC48E46D0981C5B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:0d:cf:c4:8e:46:d0:98:1c:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=e9e2dd71-5cf0-4737-ba82-b2a7bdacafa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:dd:73:19:8f:1f:73:72:ff:e0:d8:f4:62:
                    e0:36:9e:42:8c:3e:6d:31:99:17:2e:b6:a0:57:ca:
                    e2:0e:44:91:52:1b:88:d4:f8:38:86:df:c3:42:ac:
                    35:e1:38:af:71:df:5c:66:b6:d4:90:1f:49:1d:fa:
                    90:2c:3b:25:44:d6:76:23:c2:fb:f8:6d:a8:4f:3b:
                    b7:23:8b:26:0c:d7:77:39:f4:28:f5:18:a0:01:18:
                    8b:0e:0c:22:c2:80:e1:f2:3e:d9:03:ac:5b:1c:a5:
                    7a:64:10:44:9b:2d:8f:df:89:bb:77:8b:f4:d3:b4:
                    e8:b2:0e:47:4f:13:59:33:0f:75:c4:4f:c9:ee:4f:
                    16:c1:69:d6:21:55:65:02:eb:f6:ed:98:20:6c:94:
                    34:ec:d5:a3:64:7b:a9:75:30:1e:41:da:9c:1d:0d:
                    8f:bd:ec:31:0a:e8:34:81:e1:0f:d3:62:4f:fb:2b:
                    72:fe:28:3a:e2:57:37:68:2e:15:2c:e3:a3:10:ba:
                    e9:09:ec:a7:1b:3e:1c:87:39:73:eb:b3:41:f0:e0:
                    4d:0a:df:26:80:5a:45:f8:4e:a0:77:02:0c:3c:03:
                    be:75:03:67:63:80:42:13:ec:68:e7:7c:48:1d:78:
                    dd:35:1c:16:16:95:89:6c:7a:a4:9f:29:59:c2:a9:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A9:67:9B:F0:E2:1C:99:38:9C:89:F7:7A:54:B1:C3:B5:BD:EE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8bdc59de-5b26-3a8b-aa40-97be1e6419b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:c9:a0:d9:4d:21:0a:61:a0:a4:8f:f0:a6:ca:c0:36:0a:8c:
         fb:97:75:ef:e9:bf:50:06:0d:c6:69:cc:9d:b2:b8:72:fe:8b:
         4f:f1:91:2f:98:0a:7f:f0:71:ea:e1:86:f0:d4:12:92:ee:f2:
         3a:24:ee:31:49:64:0a:3b:58:ee:ce:1f:cd:40:b1:35:6f:61:
         81:fc:c6:31:76:d0:f9:f6:05:89:16:1b:6b:e2:89:0c:67:ca:
         ac:bb:c1:eb:c6:d0:2f:03:d3:fe:3c:01:19:42:13:83:7e:d0:
         3a:de:4b:a0:38:5e:37:dd:92:b0:9f:21:f8:f9:ba:2e:e8:24:
         f6:f0:f8:ba:ab:1d:45:06:61:63:6d:00:c2:c8:b6:1a:ee:90:
         11:98:b7:aa:ee:59:69:fd:56:4e:23:22:6a:ac:c0:62:bc:d2:
         60:ba:42:fc:f9:40:15:a6:81:d2:fd:07:63:8c:d1:db:8d:56:
         1b:82:76:bf:4b:20:7d:eb:4e:ec:e6:b9:a9:8e:eb:f1:d1:16:
         0b:77:c1:3a:da:ab:cb:78:80:0b:db:31:8d:7b:f6:e7:d8:52:
         62:4a:bc:34:d1:cd:fb:8b:c9:13:86:8c:e1:f5:49:37:d3:89:
         08:ce:37:67:0a:54:52:a3:72:87:bb:5f:44:8c:c5:a0:1f:aa:
         cd:9f:9d:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVag3PxI5G0JgcWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
ZTllMmRkNzEtNWNmMC00NzM3LWJhODItYjJhN2JkYWNhZmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFndcxmPH3Ny/+DY9GLgNp5CjD5tMZkXLrag
V8riDkSRUhuI1Pg4ht/DQqw14Tivcd9cZrbUkB9JHfqQLDslRNZ2I8L7+G2oTzu3
I4smDNd3OfQo9RigARiLDgwiwoDh8j7ZA6xbHKV6ZBBEmy2P34m7d4v007Tosg5H
TxNZMw91xE/J7k8WwWnWIVVlAuv27ZggbJQ07NWjZHupdTAeQdqcHQ2PvewxCug0
geEP02JP+yty/ig64lc3aC4VLOOjELrpCeynGz4chzlz67NB8OBNCt8mgFpF+E6g
dwIMPAO+dQNnY4BCE+xo53xIHXjdNRwWFpWJbHqknylZwqnEdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCpZ5vw4hyZOJyJ93pUscO1ve6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGJkYzU5ZGUtNWIyNi0z
YThiLWFhNDAtOTdiZTFlNjQxOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALrJoNlNIQphoKSP8KbKwDYKjPuXde/pv1AGDcZpzJ2yuHL+i0/xkS+Y
Cn/wcerhhvDUEpLu8jok7jFJZAo7WO7OH81AsTVvYYH8xjF20Pn2BYkWG2viiQxn
yqy7wevG0C8D0/48ARlCE4N+0DreS6A4XjfdkrCfIfj5ui7oJPbw+LqrHUUGYWNt
AMLIthrukBGYt6ruWWn9Vk4jImqswGK80mC6Qvz5QBWmgdL9B2OM0duNVhuCdr9L
IH3rTuzmuamO6/HRFgt3wTraq8t4gAvbMY179ufYUmJKvDTRzfuLyROGjOH1STfT
iQjON2cKVFKjcoe7X0SMxaAfqs2fnRE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:08 2024 by rpki-client on console-fra.rpki-client.org