Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d360fe72-7286-3951-9289-33794ad8559d.roa
File:                     d360fe72-7286-3951-9289-33794ad8559d.roa (raw, json)
Hash identifier:          XuL78axMe1En2XfTrHGO8QRGtU15z0Ptbdg64Gd/xH4=
Subject key identifier:   11:FD:D8:BA:E9:4B:D3:C2:94:D2:1C:D9:89:83:96:64:4B:8D:13:A0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0FC2D5908F0CD2E745CC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d360fe72-7286-3951-9289-33794ad8559d.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:fc:2d:59:08:f0:cd:2e:74:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=9271fa55-db2e-4d96-b680-ab4f79123913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:a4:f5:f5:5f:0d:47:62:cb:26:46:27:97:
                    ea:70:62:21:63:0f:ec:9a:59:9e:b5:75:cb:73:08:
                    89:22:16:c9:79:7f:42:31:b3:a1:c5:3e:ef:a3:54:
                    88:07:fc:4e:b7:98:d0:3e:4e:e7:89:31:95:a9:74:
                    31:41:30:99:b5:db:5c:30:e0:24:9e:4d:37:9e:6f:
                    e0:8b:ab:cc:7d:d0:db:e5:56:58:fb:3e:9b:e4:a8:
                    f4:ee:62:a7:2a:7e:c0:6b:09:88:61:13:95:e5:83:
                    91:08:7b:3f:bc:9b:0c:f5:aa:c3:60:10:a8:a5:95:
                    4f:01:82:6b:50:a8:33:4a:59:91:6d:c9:62:53:21:
                    d4:c4:8d:35:07:52:05:23:07:3a:fb:a1:5f:f3:ff:
                    e3:9f:a6:83:85:21:10:e4:8f:da:04:f3:bf:5b:41:
                    60:24:ef:9f:22:fa:e1:e6:e1:ec:60:71:bf:2b:b6:
                    9d:d0:50:41:7a:6d:76:31:a2:e5:bc:77:7c:cb:0d:
                    0f:39:c9:e1:86:29:0c:ee:31:2c:69:22:92:2a:ee:
                    5d:9c:46:0e:be:55:3f:80:93:e8:12:95:f8:c4:f9:
                    8a:99:42:2d:61:bb:3d:d4:17:78:4f:2f:ec:f3:f8:
                    95:52:0d:ab:d1:d8:ec:21:c8:e1:6a:bb:3b:02:01:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FD:D8:BA:E9:4B:D3:C2:94:D2:1C:D9:89:83:96:64:4B:8D:13:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d360fe72-7286-3951-9289-33794ad8559d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:05:78:18:7f:be:82:f9:7f:5f:7c:be:4d:f1:79:3a:b6:
         f7:95:70:8f:5a:14:43:ea:33:6e:6c:b3:a7:a8:62:9f:76:65:
         d9:99:40:53:eb:85:9a:a9:1c:23:5c:2d:71:07:71:40:04:f6:
         4b:99:a0:27:31:7c:b1:7d:6f:75:f2:5c:cf:f2:e9:78:6b:11:
         aa:38:a6:d0:87:27:3e:2a:0d:fe:22:a7:10:31:1f:d8:c0:ee:
         e2:10:7b:23:94:60:52:4e:ab:54:17:06:c8:d0:9f:d5:4c:d5:
         e1:ac:c1:24:73:d1:57:7f:fa:28:0a:3f:0f:b8:fa:61:c9:2b:
         12:49:de:e2:f2:4b:3e:93:2f:05:56:03:44:28:22:31:96:66:
         9b:95:12:fa:eb:74:cd:b4:60:73:8f:ee:77:35:88:3f:cd:4e:
         43:7d:3e:2d:9d:72:1d:8d:13:d7:a1:c0:c0:63:bf:29:b4:80:
         36:42:e9:f9:13:fa:d8:91:d0:a4:f7:b1:9e:97:f5:12:5f:a6:
         a3:57:33:76:54:f5:f7:97:39:31:af:06:fb:b1:f0:44:8c:ab:
         e6:84:64:66:af:8e:e7:86:eb:d0:e2:f9:07:9a:41:de:a0:c6:
         41:43:eb:f8:41:61:13:a7:3f:20:34:3b:ef:aa:a7:d6:b3:02:
         f3:21:f8:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPwtWQjwzS50XMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
OTI3MWZhNTUtZGIyZS00ZDk2LWI2ODAtYWI0Zjc5MTIzOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzmk9fVfDUdiyyZGJ5fqcGIhYw/smlmetXXL
cwiJIhbJeX9CMbOhxT7vo1SIB/xOt5jQPk7niTGVqXQxQTCZtdtcMOAknk03nm/g
i6vMfdDb5VZY+z6b5Kj07mKnKn7AawmIYROV5YORCHs/vJsM9arDYBCopZVPAYJr
UKgzSlmRbcliUyHUxI01B1IFIwc6+6Ff8//jn6aDhSEQ5I/aBPO/W0FgJO+fIvrh
5uHsYHG/K7ad0FBBem12MaLlvHd8yw0POcnhhikM7jEsaSKSKu5dnEYOvlU/gJPo
EpX4xPmKmUItYbs91Bd4Ty/s8/iVUg2r0djsIcjhars7AgHXwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBH92LrpS9PClNIc2YmDlmRLjROgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDM2MGZlNzItNzI4Ni0z
OTUxLTkyODktMzM3OTRhZDg1NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfQBXgYf76C+X9ffL5N8Xk6tveVcI9aFEPqM25ss6eoYp92ZdmZQFPr
hZqpHCNcLXEHcUAE9kuZoCcxfLF9b3XyXM/y6XhrEao4ptCHJz4qDf4ipxAxH9jA
7uIQeyOUYFJOq1QXBsjQn9VM1eGswSRz0Vd/+igKPw+4+mHJKxJJ3uLySz6TLwVW
A0QoIjGWZpuVEvrrdM20YHOP7nc1iD/NTkN9Pi2dch2NE9ehwMBjvym0gDZC6fkT
+tiR0KT3sZ6X9RJfpqNXM3ZU9feXOTGvBvux8ESMq+aEZGavjueG69Di+QeaQd6g
xkFD6/hBYROnPyA0O++qp9azAvMh+D8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:49 2025 by rpki-client