Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c9e2f6-cd28-3294-a8c3-6d6f7ee88f6f.roa
File:                     98c9e2f6-cd28-3294-a8c3-6d6f7ee88f6f.roa (raw, json)
Hash identifier:          KKmTWAxTxnpMcCTmfuIvVAfEdfohEDLDZ9Me2/iWRj8=
Subject key identifier:   EC:47:46:86:52:8B:05:9A:5A:CF:49:40:63:51:73:CD:12:FF:93:6D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358502BDCCDCE58DB104B080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c9e2f6-cd28-3294-a8c3-6d6f7ee88f6f.roa
Signing time:             Thu 14 Mar 2024 21:51:55 +0000
ROA not before:           Thu 14 Mar 2024 21:51:55 +0000
ROA not after:            Wed 12 Jun 2024 21:51:55 +0000
asID:                     41264
IP address blocks:        104.133.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:02:bd:cc:dc:e5:8d:b1:04:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:55 2024 GMT
            Not After : Jun 12 21:51:55 2024 GMT
        Subject: CN=bcd5cb32-be3f-42b0-af04-58d95183536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:ea:73:49:c2:f1:a1:d3:cc:d5:b2:8f:f2:
                    70:19:97:b0:c5:f3:00:94:c7:84:ce:c3:a6:bf:49:
                    5d:51:d8:9d:5d:43:e6:33:39:cb:89:f1:8b:1f:5a:
                    ec:3c:03:89:c2:f7:98:68:eb:8b:1c:ba:61:d0:c7:
                    59:52:17:3f:0c:03:f3:50:61:02:b8:39:38:5b:4f:
                    f3:30:cf:37:66:ae:b5:91:6c:a9:f1:a5:7d:81:51:
                    65:9b:65:5a:14:ac:d1:97:b2:04:88:8c:87:ce:df:
                    cf:27:38:f0:f2:15:b3:ad:0b:ea:98:53:da:00:2b:
                    db:a1:f1:60:e4:6f:4e:1e:5a:e5:cb:59:ec:d7:64:
                    83:df:f5:15:36:23:22:35:56:98:d9:c0:c7:27:c9:
                    bb:d1:fd:9b:7f:ab:4d:d4:b2:fa:1e:94:6e:78:11:
                    cc:ba:56:49:b7:a6:b3:1a:de:25:4f:46:1b:c7:59:
                    e1:20:6a:7b:44:2b:bf:a8:fb:65:e1:a6:9f:d7:c9:
                    73:23:a4:5c:f1:fb:76:6f:e5:0e:bc:9f:0b:aa:93:
                    5c:d2:3c:3e:7b:8d:97:6f:42:91:5b:f5:a4:64:0d:
                    40:47:16:e9:17:6e:07:95:a8:f0:b0:f3:aa:31:84:
                    2b:a3:85:3c:df:61:1b:13:56:d0:5d:15:c6:a2:1a:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:46:86:52:8B:05:9A:5A:CF:49:40:63:51:73:CD:12:FF:93:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c9e2f6-cd28-3294-a8c3-6d6f7ee88f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:a4:03:da:64:ef:4c:a5:8e:78:41:be:ec:8d:ae:09:48:
         3b:46:8b:12:ef:41:fa:e3:49:fa:04:84:c3:a8:7a:65:5a:e6:
         1d:ed:72:49:fd:f5:76:f9:1c:ee:30:66:48:27:42:ae:9f:e2:
         a2:35:de:6d:e8:a3:70:90:89:a5:1b:49:8a:a7:5f:56:ec:0d:
         92:cc:b1:18:f4:5f:e0:2a:ed:dd:bc:ab:58:e4:77:86:64:f8:
         ae:15:79:df:99:46:51:dd:d3:eb:1d:61:4b:3b:63:8a:6a:be:
         e9:fc:8b:51:40:28:a9:b2:b1:11:51:a0:b2:88:a4:d1:b6:c2:
         89:74:c3:1f:cb:c6:30:ff:6b:15:59:ae:22:c0:33:73:6d:f0:
         d6:b5:9f:d2:72:f5:c9:3c:ca:0c:5a:ea:82:7a:71:e2:9d:9e:
         0a:a2:b8:99:07:31:6c:24:32:98:76:4c:93:f9:f7:54:ea:0c:
         e2:cb:5f:25:4d:c2:3c:8f:59:53:da:5f:15:96:18:c7:7d:51:
         64:e8:c4:b9:ef:d9:53:db:df:36:c9:4e:bc:ef:21:ac:49:88:
         fd:bd:f1:43:94:da:81:8d:97:fd:28:07:e1:f7:79:c8:24:29:
         6c:46:7b:61:0f:63:09:59:5b:fd:46:18:08:67:7b:bc:4a:47:
         78:60:41:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hQK9zNzljbEEsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTE1NVoXDTI0MDYxMjIxNTE1NVowLzEtMCsGA1UEAxMk
YmNkNWNiMzItYmUzZi00MmIwLWFmMDQtNThkOTUxODM1MzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jqc0nC8aHTzNWyj/JwGZewxfMAlMeEzsOm
v0ldUdidXUPmMznLifGLH1rsPAOJwveYaOuLHLph0MdZUhc/DAPzUGECuDk4W0/z
MM83Zq61kWyp8aV9gVFlm2VaFKzRl7IEiIyHzt/PJzjw8hWzrQvqmFPaACvbofFg
5G9OHlrly1ns12SD3/UVNiMiNVaY2cDHJ8m70f2bf6tN1LL6HpRueBHMulZJt6az
Gt4lT0Ybx1nhIGp7RCu/qPtl4aaf18lzI6Rc8ft2b+UOvJ8LqpNc0jw+e42Xb0KR
W/WkZA1ARxbpF24HlajwsPOqMYQro4U832EbE1bQXRXGohqQZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxHRoZSiwWaWs9JQGNRc80S/5NtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOThjOWUyZjYtY2QyOC0z
Mjk0LWE4YzMtNmQ2ZjdlZTg4ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+apAPaZO9MpY54Qb7sja4JSDtGixLvQfrjSfoEhMOoemVa5h3tckn9
9Xb5HO4wZkgnQq6f4qI13m3oo3CQiaUbSYqnX1bsDZLMsRj0X+Aq7d28q1jkd4Zk
+K4Ved+ZRlHd0+sdYUs7Y4pqvun8i1FAKKmysRFRoLKIpNG2wol0wx/LxjD/axVZ
riLAM3Nt8Na1n9Jy9ck8ygxa6oJ6ceKdngqiuJkHMWwkMph2TJP591TqDOLLXyVN
wjyPWVPaXxWWGMd9UWToxLnv2VPb3zbJTrzvIaxJiP298UOU2oGNl/0oB+H3ecgk
KWxGe2EPYwlZW/1GGAhne7xKR3hgQb8=
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:39 2024 by rpki-client on console-ams.rpki-client.org