Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa
File:                     e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa (raw, json)
Hash identifier:          TZJ1nZa4lR1G/Hn/LIqjA6bZO7xIoij0UOHIQx4Qfw8=
Subject key identifier:   F9:C1:6D:03:A1:1A:E5:A3:9A:00:32:D9:3A:0F:65:23:56:8B:C5:16
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453584FC66C7B66A39C57BB900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa
Signing time:             Thu 14 Mar 2024 21:51:52 +0000
ROA not before:           Thu 14 Mar 2024 21:51:52 +0000
ROA not after:            Wed 12 Jun 2024 21:51:52 +0000
asID:                     41264
IP address blocks:        104.133.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:84:fc:66:c7:b6:6a:39:c5:7b:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:51:52 2024 GMT
            Not After : Jun 12 21:51:52 2024 GMT
        Subject: CN=0f429ae6-38cc-4ddf-9391-0fc7385d2dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:71:bd:5a:44:48:08:94:e0:03:f1:cc:44:
                    b6:35:87:5b:0b:6c:21:16:13:b2:2f:d3:e0:7c:4e:
                    2d:0a:28:b0:ba:8f:db:6b:b2:c4:8c:17:fe:84:45:
                    c1:ae:66:ae:94:59:e7:73:de:c3:78:24:b0:86:c5:
                    9e:3f:0f:13:b7:41:ed:db:b2:07:07:a3:dc:67:14:
                    94:b5:f3:97:38:6f:ec:4c:6b:27:da:5f:3a:22:14:
                    0a:64:38:f7:83:02:87:a1:b0:66:41:e7:a1:ec:ad:
                    47:51:78:f2:cf:7d:88:14:0f:86:61:2a:d2:11:84:
                    9c:51:0d:82:0f:ce:5a:2e:52:f7:85:4d:c1:25:7e:
                    7d:83:5f:fc:16:80:19:4d:5c:5a:52:7a:23:97:07:
                    54:50:be:62:9b:69:0d:b4:61:bd:97:f0:07:60:74:
                    c1:d8:59:77:cd:49:61:b3:d4:92:47:6d:1a:f7:96:
                    64:c9:7e:63:4a:1a:ab:7d:1b:10:06:fa:16:4e:c5:
                    ea:8e:9d:d7:89:c4:1c:64:4d:95:98:de:24:53:48:
                    0e:28:b9:65:ab:c9:18:7f:eb:98:d8:3c:47:91:ce:
                    db:a9:11:60:9a:9b:94:3a:af:f0:a7:bb:bf:0c:e1:
                    47:94:f8:3f:a2:11:9a:94:b3:09:00:96:7b:db:c2:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:6D:03:A1:1A:E5:A3:9A:00:32:D9:3A:0F:65:23:56:8B:C5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:27:d5:f9:37:18:d8:7b:93:b2:73:eb:b8:73:2b:4c:e9:f6:
         44:c8:21:39:b4:8e:6e:45:34:d9:11:78:3a:16:e1:4a:1e:6a:
         63:99:23:0a:13:f8:27:1c:1f:be:ae:2a:9d:dd:d9:33:1b:c5:
         52:14:d5:b6:1a:94:c8:87:a6:0a:0e:02:a1:6a:5a:19:1d:47:
         5d:3c:f6:de:e6:6f:fd:ad:df:dd:fa:60:bf:32:f5:a0:d5:2e:
         69:64:9f:50:17:63:ee:7e:d0:a5:16:60:ee:e6:0f:75:c9:e1:
         ef:f7:09:d5:c4:83:42:08:d5:84:d5:84:9b:88:2e:43:70:56:
         bd:26:bc:5c:5d:3c:05:b4:e6:62:fc:73:ab:1f:5f:a6:c1:d4:
         36:a5:25:55:32:1e:34:b6:97:3e:f9:07:a2:16:50:74:7e:1e:
         2a:bb:92:14:ef:c1:25:60:ac:19:5c:aa:a9:0f:77:da:2b:59:
         43:60:5e:c0:1f:31:0c:24:6b:e5:fd:b5:de:c0:0d:b0:5f:c0:
         51:f8:84:77:4c:14:05:e0:e0:65:47:1d:26:72:90:0f:70:f7:
         6a:39:a7:d6:8d:e4:12:8c:7f:dd:33:f5:82:3c:a1:45:2e:c2:
         41:5f:e0:23:e1:c5:0e:d7:b2:49:c9:93:9e:9d:b5:dc:8d:11:
         38:99:1b:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hPxmx7ZqOcV7uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTE1MloXDTI0MDYxMjIxNTE1MlowLzEtMCsGA1UEAxMk
MGY0MjlhZTYtMzhjYy00ZGRmLTkzOTEtMGZjNzM4NWQyZGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjdxvVpESAiU4APxzES2NYdbC2whFhOyL9Pg
fE4tCiiwuo/ba7LEjBf+hEXBrmaulFnnc97DeCSwhsWePw8Tt0Ht27IHB6PcZxSU
tfOXOG/sTGsn2l86IhQKZDj3gwKHobBmQeeh7K1HUXjyz32IFA+GYSrSEYScUQ2C
D85aLlL3hU3BJX59g1/8FoAZTVxaUnojlwdUUL5im2kNtGG9l/AHYHTB2Fl3zUlh
s9SSR20a95ZkyX5jShqrfRsQBvoWTsXqjp3XicQcZE2VmN4kU0gOKLllq8kYf+uY
2DxHkc7bqRFgmpuUOq/wp7u/DOFHlPg/ohGalLMJAJZ728J8mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnBbQOhGuWjmgAy2ToPZSNWi8UWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTI0YjY4YmUtZjYwYy0z
MGUzLTljMWMtYzgxYzBmYWYyZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUn1fk3GNh7k7Jz67hzK0zp9kTIITm0jm5FNNkReDoW4UoeamOZIwoT
+CccH76uKp3d2TMbxVIU1bYalMiHpgoOAqFqWhkdR1089t7mb/2t3936YL8y9aDV
Lmlkn1AXY+5+0KUWYO7mD3XJ4e/3CdXEg0II1YTVhJuILkNwVr0mvFxdPAW05mL8
c6sfX6bB1DalJVUyHjS2lz75B6IWUHR+Hiq7khTvwSVgrBlcqqkPd9orWUNgXsAf
MQwka+X9td7ADbBfwFH4hHdMFAXg4GVHHSZykA9w92o5p9aN5BKMf90z9YI8oUUu
wkFf4CPhxQ7XsknJk56dtdyNETiZGxE=
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:41 2024 by rpki-client on console-ams.rpki-client.org