Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92a1859f-eb82-3191-a435-195ec8014d40.roa
File:                     92a1859f-eb82-3191-a435-195ec8014d40.roa (raw, json)
Hash identifier:          +MYNs2W6Um3XT1e/N62+pLJWb5DXy0PnzD1wmw52i+I=
Subject key identifier:   03:89:EC:F3:40:D1:4E:52:2C:88:98:B8:B1:82:3B:5A:10:93:E8:AC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847D56A1A8D954AC5ADE719B8E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92a1859f-eb82-3191-a435-195ec8014d40.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     41264
IP address blocks:        104.133.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:1a:8d:95:4a:c5:ad:e7:19:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=76c302a5-8930-4c70-b887-e6c9ce853040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0e:2c:51:16:1e:96:74:6d:88:6d:18:fe:09:
                    23:bf:02:3d:f3:17:84:bb:ec:ee:d3:09:a7:e4:ed:
                    0b:b2:cd:a2:3b:a3:3b:60:3a:59:38:d2:fa:77:92:
                    65:d2:13:ce:22:bd:10:2f:8c:eb:82:5c:8c:84:60:
                    11:05:24:70:19:30:5a:c9:46:7f:d4:1f:a3:34:e5:
                    36:c8:79:03:55:cc:30:a3:bf:4e:97:11:60:bd:88:
                    61:6f:0b:98:7d:ac:b8:97:40:a1:af:2b:6c:25:14:
                    29:5d:42:b2:79:28:ec:4d:7b:e2:f9:7d:26:f4:85:
                    e1:a6:07:65:41:fb:4c:47:fb:f3:c3:a5:19:b7:af:
                    8d:c4:cf:3c:09:ad:7f:b1:8f:07:9a:1b:e6:e5:fa:
                    7f:f0:a2:fd:2e:d5:f1:09:ed:df:6d:3b:e1:94:c9:
                    9b:dc:72:0d:6e:0f:17:58:47:20:51:ee:46:fc:9d:
                    a9:4a:4e:0c:ee:7f:ca:6c:08:fa:94:fc:62:f6:38:
                    a9:35:9a:2a:18:d9:f8:bc:be:c3:12:f5:61:dc:af:
                    c0:34:f1:74:37:f9:02:45:9f:0c:8b:76:64:5f:31:
                    37:c5:58:9e:77:19:e1:58:2c:fa:45:8c:2d:fb:6c:
                    e1:a5:40:53:b1:ca:7b:6b:a7:87:af:b9:21:1c:a3:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:EC:F3:40:D1:4E:52:2C:88:98:B8:B1:82:3B:5A:10:93:E8:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92a1859f-eb82-3191-a435-195ec8014d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:05:5f:09:b8:57:71:d3:22:c7:88:25:59:02:5d:ed:40:a6:
         c5:0f:60:f5:18:bd:d5:ad:12:2c:94:f4:f5:9b:73:3d:b5:fd:
         f5:d7:cf:67:29:2a:71:bd:48:1c:87:e7:52:fe:53:b0:6d:5d:
         9c:a8:ca:92:bf:c7:d7:ae:60:26:68:a8:38:72:d0:45:8e:38:
         a3:1c:a0:7e:8f:00:66:9c:34:ce:98:9b:57:0c:d5:bb:b9:e6:
         f4:06:af:c9:49:a0:38:81:3a:cb:b4:0b:5d:5e:4e:bf:e3:46:
         b6:84:77:67:68:c9:c4:c7:0c:81:4a:b1:9b:28:bc:83:32:16:
         8b:ae:48:f3:9b:2e:f6:7f:71:b9:f6:e5:2f:b5:7a:aa:83:d1:
         02:dd:47:51:e5:87:81:06:11:75:45:c1:27:7d:f1:d2:6e:0f:
         74:99:f3:d5:4e:f5:b6:50:2e:9e:23:92:4e:b0:75:06:fe:2d:
         d1:81:0e:b9:96:ca:1e:78:da:e7:4d:05:6a:31:df:be:87:2c:
         45:bb:27:ff:dc:19:04:26:24:89:19:37:c0:d0:49:58:cb:5a:
         df:a6:4e:ca:be:47:43:48:88:92:f2:e8:7b:d9:64:8a:ba:38:
         ee:58:a4:8c:fa:da:d2:50:d0:d4:19:c1:00:67:bd:21:19:95:
         38:7a:18:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVahqNlUrFrecZuOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
NzZjMzAyYTUtODkzMC00YzcwLWI4ODctZTZjOWNlODUzMDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A4sURYelnRtiG0Y/gkjvwI98xeEu+zu0wmn
5O0Lss2iO6M7YDpZONL6d5Jl0hPOIr0QL4zrglyMhGARBSRwGTBayUZ/1B+jNOU2
yHkDVcwwo79OlxFgvYhhbwuYfay4l0ChrytsJRQpXUKyeSjsTXvi+X0m9IXhpgdl
QftMR/vzw6UZt6+NxM88Ca1/sY8Hmhvm5fp/8KL9LtXxCe3fbTvhlMmb3HINbg8X
WEcgUe5G/J2pSk4M7n/KbAj6lPxi9jipNZoqGNn4vL7DEvVh3K/ANPF0N/kCRZ8M
i3ZkXzE3xViedxnhWCz6RYwt+2zhpUBTscp7a6eHr7khHKNFhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOJ7PNA0U5SLIiYuLGCO1oQk+isMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTJhMTg1OWYtZWI4Mi0z
MTkxLWE0MzUtMTk1ZWM4MDE0ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgFXwm4V3HTIseIJVkCXe1ApsUPYPUYvdWtEiyU9PWbcz21/fXXz2cp
KnG9SByH51L+U7BtXZyoypK/x9euYCZoqDhy0EWOOKMcoH6PAGacNM6Ym1cM1bu5
5vQGr8lJoDiBOsu0C11eTr/jRraEd2doycTHDIFKsZsovIMyFouuSPObLvZ/cbn2
5S+1eqqD0QLdR1Hlh4EGEXVFwSd98dJuD3SZ89VO9bZQLp4jkk6wdQb+LdGBDrmW
yh542udNBWox376HLEW7J//cGQQmJIkZN8DQSVjLWt+mTsq+R0NIiJLy6HvZZIq6
OO5YpIz62tJQ0NQZwQBnvSEZlTh6GCE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:55 2024 by rpki-client on console-ams.rpki-client.org