Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa
File:                     e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa (raw, json)
Hash identifier:          QnsNvhF2C8djRkVbjGdf24tJ5RWMkAuZeMeWgG6AJKY=
Subject key identifier:   FE:BA:03:C5:2D:1A:78:8B:FA:01:99:44:1C:E6:E3:27:FF:C5:20:4C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094EF5AD5F221F2DD88C300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ef:5a:d5:f2:21:f2:dd:88:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=90abee14-297c-4e80-9ac3-84810012c652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:c8:e1:c6:5b:99:be:3a:c8:5e:df:8b:90:
                    98:4f:78:41:4a:01:b1:d2:a2:42:60:f3:6e:aa:f0:
                    3f:12:72:d5:fc:aa:c0:71:e5:0f:f4:af:a6:bd:b1:
                    c5:35:a5:8a:c9:46:29:fb:4b:15:1c:d5:de:c7:2a:
                    5b:a2:0b:8b:88:fd:b4:91:a2:0f:2f:aa:ed:a2:c5:
                    b1:c1:64:e0:26:2e:2b:ff:e7:41:96:36:a1:43:f1:
                    8c:a4:ab:c4:99:20:54:30:1e:19:ca:42:52:20:88:
                    80:9d:66:6c:a0:b1:47:95:a0:a5:b0:9c:52:8f:dc:
                    ea:40:4b:08:11:ee:f5:92:ba:52:49:75:7a:43:f9:
                    e7:7e:dc:4f:6e:a3:3c:08:e6:cb:33:76:2f:2f:d6:
                    2d:7a:07:52:c1:bf:85:24:b5:eb:e9:70:4c:ea:f4:
                    65:0b:de:e1:10:4c:38:81:13:a3:86:db:1f:12:0b:
                    16:d5:d4:64:df:06:e8:28:a6:86:9d:98:03:ff:eb:
                    c4:06:9e:f1:93:60:c6:bd:fe:56:df:ab:f9:36:3b:
                    6f:99:e1:3b:e6:5d:62:a5:a7:1f:cd:b9:c4:07:9f:
                    cf:96:97:01:64:54:cb:b0:13:f0:c2:82:48:d2:19:
                    75:51:c9:2a:77:3e:3f:5e:b2:ee:b2:ff:48:2a:be:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BA:03:C5:2D:1A:78:8B:FA:01:99:44:1C:E6:E3:27:FF:C5:20:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e9:fc:99:52:bb:7c:54:82:0b:f2:68:dc:b7:d4:3f:30:27:
         ef:4f:92:d1:93:5d:7b:69:09:29:c3:3f:fb:e7:d4:5f:55:d7:
         54:7e:63:d6:56:02:3f:32:b8:5e:19:11:01:a8:66:7c:ad:6a:
         6a:21:8f:57:47:b3:e3:b1:39:68:d7:94:33:cc:4d:ea:d6:46:
         26:eb:11:72:26:d5:45:a9:a2:bd:d2:bc:55:72:f5:26:e7:ce:
         19:84:7f:ed:46:cf:0a:20:0f:e3:93:71:ba:9c:19:ee:3d:bc:
         6d:86:f5:24:77:80:2b:7c:97:29:e5:4e:25:1c:c1:25:7d:78:
         68:0b:51:e0:31:94:7e:22:4e:0d:dc:01:6c:69:1a:52:e4:bb:
         9f:d9:1d:83:19:93:ff:39:e9:4c:0d:50:c0:58:1e:e2:9b:87:
         4b:11:33:3e:39:0a:13:49:7c:a4:24:55:0e:36:d5:c7:f8:a1:
         09:3c:4d:15:98:66:20:e1:f1:af:b1:b8:c7:1f:9e:c2:9b:42:
         39:28:3f:a4:9c:b0:81:77:3d:df:96:e5:85:14:cc:7c:ed:ef:
         8b:29:74:f2:c3:9e:85:3b:0f:17:2c:9c:83:ff:a5:92:38:7c:
         43:9f:a3:bd:85:b6:91:6f:15:d7:b1:ab:d6:c1:6d:13:bb:a3:
         92:cf:93:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglO9a1fIh8t2IwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
OTBhYmVlMTQtMjk3Yy00ZTgwLTlhYzMtODQ4MTAwMTJjNjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsszI4cZbmb46yF7fi5CYT3hBSgGx0qJCYPNu
qvA/EnLV/KrAceUP9K+mvbHFNaWKyUYp+0sVHNXexypboguLiP20kaIPL6rtosWx
wWTgJi4r/+dBljahQ/GMpKvEmSBUMB4ZykJSIIiAnWZsoLFHlaClsJxSj9zqQEsI
Ee71krpSSXV6Q/nnftxPbqM8CObLM3YvL9YtegdSwb+FJLXr6XBM6vRlC97hEEw4
gROjhtsfEgsW1dRk3wboKKaGnZgD/+vEBp7xk2DGvf5W36v5NjtvmeE75l1ipacf
zbnEB5/PlpcBZFTLsBPwwoJI0hl1Uckqdz4/XrLusv9IKr6a1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP66A8UtGniL+gGZRBzm4yf/xSBMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTg4NmFkN2ItMmVmOS0z
YTA5LTk5YTAtMWJiNDVkOWRjNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXp/JlSu3xUggvyaNy31D8wJ+9PktGTXXtpCSnDP/vn1F9V11R+Y9ZW
Aj8yuF4ZEQGoZnytamohj1dHs+OxOWjXlDPMTerWRibrEXIm1UWpor3SvFVy9Sbn
zhmEf+1GzwogD+OTcbqcGe49vG2G9SR3gCt8lynlTiUcwSV9eGgLUeAxlH4iTg3c
AWxpGlLku5/ZHYMZk/856UwNUMBYHuKbh0sRMz45ChNJfKQkVQ421cf4oQk8TRWY
ZiDh8a+xuMcfnsKbQjkoP6ScsIF3Pd+W5YUUzHzt74spdPLDnoU7DxcsnIP/pZI4
fEOfo72FtpFvFdexq9bBbRO7o5LPk3o=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:19 2024 by rpki-client on console-fra.rpki-client.org