Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
File:                     e0cdd86f-bef6-3429-846c-e793c0db3717.roa (raw, json)
Hash identifier:          q0G9qqyUfervoE67JlAUBXe63O+3Wk4edZ+dYiLSnVQ=
Subject key identifier:   35:4E:89:F1:03:C6:57:75:28:56:BB:A0:64:F8:BF:1A:26:98:1E:93
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584E736821441AF6754DB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
Signing time:             Thu 14 Mar 2024 21:51:42 +0000
ROA not before:           Thu 14 Mar 2024 21:51:42 +0000
ROA not after:            Wed 12 Jun 2024 21:51:42 +0000
asID:                     15169
IP address blocks:        104.134.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:e7:36:82:14:41:af:67:54:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:42 2024 GMT
            Not After : Jun 12 21:51:42 2024 GMT
        Subject: CN=72b40a81-9c9b-4d9b-b953-82e8b323edf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:a5:76:6e:5b:fb:2a:dc:c9:90:e4:32:17:
                    ce:a2:56:27:f5:84:c2:c6:a8:91:54:ed:8f:94:ad:
                    c3:8e:33:9b:89:de:c4:2d:00:a2:06:89:f1:97:ae:
                    cb:ba:99:b0:17:3f:fc:f7:79:14:39:86:1b:d7:84:
                    fb:97:8b:15:41:de:81:18:b6:7c:49:b5:ab:74:2c:
                    fa:e2:c5:4a:5a:29:50:fd:23:95:4d:97:3e:0c:eb:
                    2e:6b:d3:e7:12:02:32:7d:cf:71:34:ea:46:35:d1:
                    b5:54:16:5b:b8:74:c3:48:ed:1e:53:61:85:5e:f2:
                    9d:ec:83:ea:9e:c6:42:33:8b:54:a8:3f:b3:d8:b0:
                    e0:2f:4a:7e:06:46:61:c8:30:35:92:d3:7e:0d:5c:
                    ce:25:f4:42:5f:30:f9:dc:41:a7:ce:70:49:c2:32:
                    ca:b7:fd:55:72:a2:f3:58:67:cf:7f:e2:e4:65:11:
                    f4:b0:73:d3:1e:50:7e:71:1a:cf:a8:71:b7:59:af:
                    b4:b2:96:bf:8a:3d:2f:36:e5:f6:63:00:68:43:a5:
                    c3:04:66:c5:65:69:e6:3a:f8:cf:62:dc:04:68:ec:
                    01:8c:47:df:23:fd:f7:9c:0c:f0:8f:e0:f5:37:64:
                    ba:91:57:78:1d:44:d0:7b:fe:1c:9b:24:8c:96:b0:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:89:F1:03:C6:57:75:28:56:BB:A0:64:F8:BF:1A:26:98:1E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:47:0e:a3:99:b8:67:52:6d:49:4a:f6:17:55:ef:7e:1f:7b:
         10:64:f9:38:b6:fe:b6:8a:6f:25:cb:38:e5:d7:69:2b:10:16:
         f7:3c:6e:31:e8:2f:d8:58:19:63:b2:64:92:63:5a:28:86:0b:
         22:8f:08:22:87:dd:ce:ad:49:9f:20:c4:d2:0b:77:70:f2:8b:
         95:81:84:8c:37:45:cb:2b:4d:61:ca:49:2d:59:c8:39:be:43:
         11:cb:1d:dc:30:cf:e6:87:c6:01:28:2c:c2:b7:2f:77:5a:9d:
         96:ea:47:fd:b0:35:9c:f7:81:ff:82:a8:c5:71:91:cd:67:2d:
         68:86:c8:e4:aa:32:07:e5:e1:d8:51:6c:0c:6a:9b:fa:d4:67:
         84:83:b9:88:c4:ed:2b:73:17:dd:19:80:aa:36:52:31:bf:dc:
         a7:e7:6d:61:2e:d2:cb:25:66:1b:2b:e8:81:84:fb:e2:3e:58:
         ea:cc:fd:20:f2:45:0f:2c:0c:88:23:88:04:28:31:ce:f8:17:
         16:72:2c:e8:eb:15:e4:5e:a1:42:52:cd:73:19:21:1a:ca:fb:
         ba:e9:76:00:56:bb:1f:d9:76:6a:e5:35:d2:cc:38:28:f8:d3:
         63:d4:06:e9:72:89:9c:87:2d:39:4b:d4:76:b2:d6:7d:d0:68:
         c3:b5:86:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hOc2ghRBr2dU24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTE0MloXDTI0MDYxMjIxNTE0MlowLzEtMCsGA1UEAxMk
NzJiNDBhODEtOWM5Yi00ZDliLWI5NTMtODJlOGIzMjNlZGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDildm5b+yrcyZDkMhfOolYn9YTCxqiRVO2P
lK3DjjObid7ELQCiBonxl67LupmwFz/893kUOYYb14T7l4sVQd6BGLZ8SbWrdCz6
4sVKWilQ/SOVTZc+DOsua9PnEgIyfc9xNOpGNdG1VBZbuHTDSO0eU2GFXvKd7IPq
nsZCM4tUqD+z2LDgL0p+BkZhyDA1ktN+DVzOJfRCXzD53EGnznBJwjLKt/1VcqLz
WGfPf+LkZRH0sHPTHlB+cRrPqHG3Wa+0spa/ij0vNuX2YwBoQ6XDBGbFZWnmOvjP
YtwEaOwBjEffI/33nAzwj+D1N2S6kVd4HUTQe/4cmySMlrCoCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVOifEDxld1KFa7oGT4vxommB6TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTBjZGQ4NmYtYmVmNi0z
NDI5LTg0NmMtZTc5M2MwZGIzNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdHDqOZuGdSbUlK9hdV734fexBk+Ti2/raKbyXLOOXXaSsQFvc8bjHo
L9hYGWOyZJJjWiiGCyKPCCKH3c6tSZ8gxNILd3Dyi5WBhIw3RcsrTWHKSS1ZyDm+
QxHLHdwwz+aHxgEoLMK3L3danZbqR/2wNZz3gf+CqMVxkc1nLWiGyOSqMgfl4dhR
bAxqm/rUZ4SDuYjE7StzF90ZgKo2UjG/3KfnbWEu0sslZhsr6IGE++I+WOrM/SDy
RQ8sDIgjiAQoMc74FxZyLOjrFeReoUJSzXMZIRrK+7rpdgBWux/ZdmrlNdLMOCj4
02PUBulyiZyHLTlL1Hay1n3QaMO1hu8=
-----END CERTIFICATE-----
Generated at Sat May 11 15:31:08 2024 by rpki-client on console-fra.rpki-client.org