Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/99a37fb0-5c3f-3d5b-9842-49c168dd8ca4.roa
File:                     99a37fb0-5c3f-3d5b-9842-49c168dd8ca4.roa (raw, json)
Hash identifier:          HaUe1T4t7LEfStSf5aGnkSHqOWntJ1ddDjd4FbWNVhY=
Subject key identifier:   35:E6:0D:A5:C8:B7:6D:E4:F9:72:CA:EF:BB:64:19:1E:0C:FB:1D:FF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DF966E6D95B801D57BC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/99a37fb0-5c3f-3d5b-9842-49c168dd8ca4.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        104.134.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:df:96:6e:6d:95:b8:01:d5:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=3ed897d7-c8ed-409d-a941-27a7f6557736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:09:3e:80:e0:72:e5:52:18:3d:2f:ce:9e:
                    d1:0c:47:e5:a7:95:a4:7c:08:7b:bf:4a:fe:dc:31:
                    b6:e0:19:da:fd:4f:4a:db:d9:51:e6:e8:2b:e2:08:
                    0a:1f:80:95:04:e3:8c:32:b4:5e:f1:9d:4b:30:d2:
                    b4:69:07:9b:f6:a5:11:78:f8:be:e8:5c:ef:9c:88:
                    3f:ba:ad:69:b0:4a:0e:31:81:7a:fd:97:2b:29:a4:
                    0b:34:ad:13:5a:b5:9c:de:66:d6:77:9b:51:8b:8f:
                    3f:85:28:a7:a7:11:b5:dd:2d:15:79:37:8a:26:ea:
                    53:e0:1a:02:52:df:84:bb:87:1d:23:03:78:67:b3:
                    19:9a:54:70:ae:19:fd:2c:05:6e:ba:8d:bc:60:17:
                    42:a9:3c:e7:ae:d5:75:1b:4d:a2:af:5f:33:bf:8b:
                    83:90:e5:22:69:9a:4c:02:a9:b9:df:7a:06:be:3b:
                    33:05:76:1f:3d:8c:7d:c8:fe:fc:ec:b9:6a:d2:9e:
                    a1:e8:79:78:8c:05:6c:d7:83:48:79:80:07:46:5c:
                    58:ff:45:25:c1:aa:30:b6:d6:e7:04:b1:57:f7:59:
                    5a:7b:0f:e9:aa:ce:aa:76:5e:e0:83:77:81:de:4a:
                    82:ff:d4:ec:8b:f0:88:0c:ea:13:20:bc:0c:34:0f:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:0D:A5:C8:B7:6D:E4:F9:72:CA:EF:BB:64:19:1E:0C:FB:1D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/99a37fb0-5c3f-3d5b-9842-49c168dd8ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ea:f0:60:1c:b7:2e:d2:b3:c9:14:04:c9:38:96:fd:66:0c:
         1f:b7:66:13:33:6b:20:72:1b:c5:5e:69:22:b9:7a:5e:f1:a0:
         48:91:06:2e:c4:ce:63:73:3f:74:93:13:05:64:4b:05:a2:f9:
         d4:c5:33:63:f5:60:3f:eb:6e:51:6b:37:12:a7:14:ef:63:af:
         f6:1b:3e:e7:73:b6:0f:7b:a8:d2:77:19:aa:19:50:34:f8:61:
         32:05:fc:a5:ad:07:08:bf:8b:55:10:f4:cd:51:19:e2:fc:e8:
         36:07:54:f5:81:92:80:f7:a1:2a:d1:d9:b5:50:ba:3f:d4:e9:
         f7:1a:67:9f:27:dd:57:36:18:ff:cf:bd:f4:52:a4:0c:de:d2:
         69:8f:86:90:97:a6:9f:3f:6c:3f:81:72:e3:c2:71:9b:bd:24:
         a0:8d:13:8f:95:29:51:80:ee:bf:bc:82:69:5e:90:9d:da:7f:
         4e:43:07:6c:ac:11:43:97:45:5b:7f:39:b0:9a:4c:7f:ac:eb:
         66:ce:c6:8b:4f:e9:fe:c4:5c:54:07:19:1f:c4:e3:05:9f:c5:
         49:ab:72:24:63:35:f3:72:c4:2f:41:c9:e0:d7:3d:54:a0:2f:
         3f:27:43:39:2a:47:4f:fe:c6:ab:d5:6e:65:be:d0:63:2e:6e:
         78:ff:ef:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN+Wbm2VuAHVe8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
M2VkODk3ZDctYzhlZC00MDlkLWE5NDEtMjdhN2Y2NTU3NzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFgJPoDgcuVSGD0vzp7RDEflp5WkfAh7v0r+
3DG24Bna/U9K29lR5ugr4ggKH4CVBOOMMrRe8Z1LMNK0aQeb9qURePi+6FzvnIg/
uq1psEoOMYF6/ZcrKaQLNK0TWrWc3mbWd5tRi48/hSinpxG13S0VeTeKJupT4BoC
Ut+Eu4cdIwN4Z7MZmlRwrhn9LAVuuo28YBdCqTznrtV1G02ir18zv4uDkOUiaZpM
Aqm533oGvjszBXYfPYx9yP787Llq0p6h6Hl4jAVs14NIeYAHRlxY/0Ulwaowttbn
BLFX91laew/pqs6qdl7gg3eB3kqC/9Tsi/CIDOoTILwMNA9hhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXmDaXIt23k+XLK77tkGR4M+x3/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTlhMzdmYjAtNWMzZi0z
ZDViLTk4NDItNDljMTY4ZGQ4Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALnq8GActy7Ss8kUBMk4lv1mDB+3ZhMzayByG8VeaSK5el7xoEiRBi7E
zmNzP3STEwVkSwWi+dTFM2P1YD/rblFrNxKnFO9jr/YbPudztg97qNJ3GaoZUDT4
YTIF/KWtBwi/i1UQ9M1RGeL86DYHVPWBkoD3oSrR2bVQuj/U6fcaZ58n3Vc2GP/P
vfRSpAze0mmPhpCXpp8/bD+BcuPCcZu9JKCNE4+VKVGA7r+8gmlekJ3af05DB2ys
EUOXRVt/ObCaTH+s62bOxotP6f7EXFQHGR/E4wWfxUmrciRjNfNyxC9ByeDXPVSg
Lz8nQzkqR0/+xqvVbmW+0GMubnj/76I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:31 2025 by rpki-client