Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa
File:                     cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa (raw, json)
Hash identifier:          Jn9wr7NmnzCl2otOrfHG+YvtHaZVoRLRrJsYB1qZqOE=
Subject key identifier:   16:3C:CD:B1:DC:E5:12:3C:9B:2F:62:2D:72:74:0F:A8:03:6A:BE:B9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F656CCA411B927BD713700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.133.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:56:cc:a4:11:b9:27:bd:71:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=d065a6b3-d66c-4cad-b8c0-791c3a23813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:ad:2e:6e:fa:7d:a7:19:1d:47:f1:df:99:
                    ee:f8:55:98:b5:e0:51:88:30:f2:f3:a4:37:3a:0b:
                    e7:99:b2:0a:2d:07:6a:04:87:20:d9:2f:86:49:d1:
                    49:e3:6a:80:16:23:90:25:7e:4f:4f:ec:80:b8:cb:
                    9f:c7:5a:12:30:b1:ff:20:c0:06:5f:44:2f:07:3f:
                    b7:c5:b0:03:fc:1b:e7:22:cf:ae:c5:2e:f9:34:ad:
                    6d:03:a9:60:8b:ce:da:b9:18:65:45:c6:c1:77:a7:
                    cc:23:1a:e7:d1:15:b5:d5:d2:61:31:21:6a:c6:f0:
                    52:09:23:99:9e:b8:57:4f:7e:ec:37:83:f8:90:e7:
                    94:f3:55:71:6d:64:19:57:f0:db:cd:44:68:b4:aa:
                    9f:88:8c:b6:9f:bd:2d:d0:5b:d7:ac:4f:64:20:4f:
                    ee:db:00:b3:83:99:64:f1:cf:42:99:1b:5e:86:96:
                    c4:18:d5:b3:97:25:61:31:6e:63:7f:57:ea:3d:c1:
                    08:0f:e5:78:71:a6:6e:4b:10:49:c3:bf:6e:94:08:
                    7d:bc:bc:7c:68:28:ce:5b:7d:55:0d:6e:92:29:79:
                    b6:af:f0:42:fb:f0:ab:9f:20:b8:87:aa:17:89:3f:
                    fd:1f:54:09:4f:d4:bc:a1:58:3c:75:30:c9:6f:c7:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3C:CD:B1:DC:E5:12:3C:9B:2F:62:2D:72:74:0F:A8:03:6A:BE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:b8:e3:e9:80:a5:05:0b:e0:3c:48:89:72:97:d6:1f:4f:
         99:23:bf:c4:09:6f:65:25:d6:40:51:07:bc:78:e6:19:f6:9f:
         01:a4:8a:01:11:17:b9:0b:e7:7e:32:8e:97:59:bc:20:28:68:
         f4:0c:be:10:57:2c:4e:f5:24:d0:b0:e1:11:4b:7a:5a:db:6b:
         ca:25:d0:86:e1:01:9a:53:50:b3:af:0d:56:89:25:e2:ee:6c:
         00:1e:ae:dc:e7:5a:ae:be:44:cd:bb:05:ee:12:60:60:59:39:
         5e:fc:1d:e5:72:1b:95:15:f2:90:db:1a:0f:dd:97:57:01:6b:
         55:c4:9e:dd:de:59:a3:9e:7f:92:bd:17:03:a7:30:56:35:c0:
         ce:a6:80:7a:12:d7:5c:44:b7:2e:bf:1d:20:d9:7b:c1:a5:4b:
         f9:49:1b:80:f7:bd:ea:b4:5a:15:2f:b3:bb:e5:4b:50:85:0d:
         57:fe:fe:40:2e:75:31:ec:6e:d9:55:f9:9f:6b:67:85:b5:e6:
         a5:50:92:aa:f4:eb:a0:aa:26:4c:9c:a1:52:d5:1d:81:58:aa:
         b0:19:a3:42:a0:24:ca:8f:ff:bf:20:0b:7d:21:39:50:5e:6d:
         bd:74:de:db:1b:87:33:7c:db:ee:79:b3:7c:f4:a4:69:68:e1:
         c4:f7:71:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lbMpBG5J71xNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZDA2NWE2YjMtZDY2Yy00Y2FkLWI4YzAtNzkxYzNhMjM4MTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5mtLm76facZHUfx35nu+FWYteBRiDDy86Q3
OgvnmbIKLQdqBIcg2S+GSdFJ42qAFiOQJX5PT+yAuMufx1oSMLH/IMAGX0QvBz+3
xbAD/BvnIs+uxS75NK1tA6lgi87auRhlRcbBd6fMIxrn0RW11dJhMSFqxvBSCSOZ
nrhXT37sN4P4kOeU81VxbWQZV/DbzURotKqfiIy2n70t0FvXrE9kIE/u2wCzg5lk
8c9CmRtehpbEGNWzlyVhMW5jf1fqPcEID+V4caZuSxBJw79ulAh9vLx8aCjOW31V
DW6SKXm2r/BC+/CrnyC4h6oXiT/9H1QJT9S8oVg8dTDJb8c6PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBY8zbHc5RI8my9iLXJ0D6gDar65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2RhYjRlNTMtMWQzNy0z
OWM0LTk2ZTgtNTg0OGVhZjQ2YjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL3uOPpgKUFC+A8SIlyl9YfT5kjv8QJb2Ul1kBRB7x45hn2nwGkigER
F7kL534yjpdZvCAoaPQMvhBXLE71JNCw4RFLelrba8ol0IbhAZpTULOvDVaJJeLu
bAAertznWq6+RM27Be4SYGBZOV78HeVyG5UV8pDbGg/dl1cBa1XEnt3eWaOef5K9
FwOnMFY1wM6mgHoS11xEty6/HSDZe8GlS/lJG4D3veq0WhUvs7vlS1CFDVf+/kAu
dTHsbtlV+Z9rZ4W15qVQkqr066CqJkycoVLVHYFYqrAZo0KgJMqP/78gC30hOVBe
bb103tsbhzN82+55s3z0pGlo4cT3cdE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:44 2025 by rpki-client