Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa
File:                     ebc89f47-058f-303c-ba73-dd10592f859d.roa (raw, json)
Hash identifier:          WbHHatvJCqFvdkizl6ADtt+qIL1UC3vfBW225UFNAaw=
Subject key identifier:   D6:25:0D:3D:D0:DB:1F:59:57:47:C4:E7:E9:62:AB:6D:B9:F6:09:E8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845358572FA4370BF0396C2E440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa
Signing time:             Thu 14 Mar 2024 21:52:48 +0000
ROA not before:           Thu 14 Mar 2024 21:52:48 +0000
ROA not after:            Wed 12 Jun 2024 21:52:48 +0000
asID:                     41264
IP address blocks:        104.133.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:72:fa:43:70:bf:03:96:c2:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:52:48 2024 GMT
            Not After : Jun 12 21:52:48 2024 GMT
        Subject: CN=4ff6fcdc-d4b1-4868-ac20-21eaec3226eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:91:fa:72:c2:ae:aa:f7:7c:91:64:fc:2e:
                    3b:e4:d6:70:fe:2c:b5:26:5c:87:3d:ae:21:9d:ac:
                    e8:6f:56:36:03:23:fb:1d:5d:9b:2e:91:00:36:9d:
                    a6:04:1a:14:ca:ea:ba:19:d6:34:08:f2:bd:c0:d3:
                    2e:20:11:78:6c:9f:01:45:01:5f:9c:2e:7b:c1:36:
                    d4:ce:24:79:2d:da:25:59:48:0c:8b:bf:91:a3:50:
                    59:28:da:0f:70:ea:99:32:a5:4b:d2:a3:4a:52:8e:
                    45:0d:63:7c:18:74:c1:16:c0:36:a0:77:b9:2d:a0:
                    81:79:40:46:d6:fe:74:87:fc:19:f3:6b:96:5e:65:
                    a7:b0:bc:39:0a:0d:45:5b:d6:24:23:f3:45:ac:9b:
                    c1:af:fe:80:e0:15:6d:56:a4:f3:9b:5f:41:39:ea:
                    05:34:1a:d5:35:b5:cc:6e:e9:0d:08:e2:1e:92:e1:
                    04:ba:eb:99:12:9c:2e:76:a9:db:66:e7:fa:83:83:
                    29:e7:3e:53:99:ad:2e:ba:15:dc:05:0a:11:59:8d:
                    da:d0:48:a7:64:42:6b:19:9a:25:27:9d:2b:01:f6:
                    8f:82:b8:5c:42:81:7a:5a:6c:9b:c4:8a:26:90:b4:
                    c3:f9:9e:50:c7:8c:a5:1f:da:24:37:15:90:c7:1b:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:0D:3D:D0:DB:1F:59:57:47:C4:E7:E9:62:AB:6D:B9:F6:09:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:fc:39:7d:ff:74:65:21:12:b7:eb:4a:90:a0:79:b5:e7:
         ae:32:ee:85:d1:d4:ef:fb:3e:18:44:24:21:15:34:be:11:c2:
         23:9c:1b:e0:ff:7c:d6:e8:f6:c4:fe:d0:b1:94:2a:f9:19:8d:
         a2:a0:b8:d2:fb:fe:85:b4:04:56:fd:5f:0d:5a:a5:41:1a:6e:
         49:e2:d4:05:2c:a9:b8:bc:5b:8a:8d:4a:63:49:c2:a7:69:07:
         c3:c9:a8:6f:64:7a:e5:9c:0f:81:52:5d:1a:7a:de:eb:ba:82:
         e7:5b:47:a1:23:c9:6b:30:59:bd:b5:a2:02:84:4a:f4:29:6f:
         e0:87:65:63:55:64:1f:d1:1b:fe:d9:86:92:ae:57:c2:f7:f3:
         d4:36:db:f3:02:0a:c6:3a:91:20:fa:6b:29:2b:93:40:c8:c3:
         0d:e5:4f:31:c2:f0:bc:fa:3e:94:35:8e:36:9e:d5:5b:b9:a4:
         dc:1c:3c:e1:18:ef:c3:b4:bd:76:7c:a4:97:a9:48:8f:2f:fe:
         40:22:c4:f2:cd:ce:7e:c8:12:7d:de:41:77:61:3d:eb:1c:61:
         e2:4d:2b:57:2f:0c:fc:cf:58:2f:e2:b2:f7:8b:ab:e8:ef:bf:
         16:70:bc:3a:19:f8:ef:00:4c:9b:50:89:54:0c:61:68:f5:78:
         7c:59:29:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hXL6Q3C/A5bC5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxNDIxNTI0OFoXDTI0MDYxMjIxNTI0OFowLzEtMCsGA1UEAxMk
NGZmNmZjZGMtZDRiMS00ODY4LWFjMjAtMjFlYWVjMzIyNmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8WR+nLCrqr3fJFk/C475NZw/iy1JlyHPa4h
nazob1Y2AyP7HV2bLpEANp2mBBoUyuq6GdY0CPK9wNMuIBF4bJ8BRQFfnC57wTbU
ziR5LdolWUgMi7+Ro1BZKNoPcOqZMqVL0qNKUo5FDWN8GHTBFsA2oHe5LaCBeUBG
1v50h/wZ82uWXmWnsLw5Cg1FW9YkI/NFrJvBr/6A4BVtVqTzm19BOeoFNBrVNbXM
bukNCOIekuEEuuuZEpwudqnbZuf6g4Mp5z5Tma0uuhXcBQoRWY3a0EinZEJrGZol
J50rAfaPgrhcQoF6WmybxIomkLTD+Z5Qx4ylH9okNxWQxxusWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYlDT3Q2x9ZV0fE5+liq2259gnoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWJjODlmNDctMDU4Zi0z
MDNjLWJhNzMtZGQxMDU5MmY4NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTD/Dl9/3RlIRK360qQoHm1564y7oXR1O/7PhhEJCEVNL4RwiOcG+D/
fNbo9sT+0LGUKvkZjaKguNL7/oW0BFb9Xw1apUEabkni1AUsqbi8W4qNSmNJwqdp
B8PJqG9keuWcD4FSXRp63uu6gudbR6EjyWswWb21ogKESvQpb+CHZWNVZB/RG/7Z
hpKuV8L389Q22/MCCsY6kSD6aykrk0DIww3lTzHC8Lz6PpQ1jjae1Vu5pNwcPOEY
78O0vXZ8pJepSI8v/kAixPLNzn7IEn3eQXdhPescYeJNK1cvDPzPWC/isveLq+jv
vxZwvDoZ+O8ATJtQiVQMYWj1eHxZKcg=
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:39 2024 by rpki-client on console-fra.rpki-client.org