Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/980a73e4-4d30-360a-9843-dadbf255970a.roa
File:                     980a73e4-4d30-360a-9843-dadbf255970a.roa (raw, json)
Hash identifier:          ROFiU510JlO+BsZKPUU/8VgvOCyjPfKpl6GVOD399OY=
Subject key identifier:   C6:9F:B0:E3:7A:23:26:FB:DE:3A:B1:33:A8:22:A5:EE:D8:CD:75:4D
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285845B4E8CF9C4EC860B68F1A1C80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/980a73e4-4d30-360a-9843-dadbf255970a.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     33601
IP address blocks:        104.156.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cf:9c:4e:c8:60:b6:8f:1a:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=821df8fd-693c-4a92-ac21-fe55f6826991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:8d:fe:b0:71:50:d3:3c:25:ce:d7:6c:7d:
                    42:81:08:62:1d:69:cc:39:28:a5:47:4b:21:01:e2:
                    90:34:c3:07:a8:fa:8d:15:09:a8:f9:e7:f8:33:ba:
                    12:ea:38:cd:f5:9b:10:32:00:37:bc:41:b6:14:b0:
                    57:11:6c:30:2d:32:9f:12:1e:21:7d:f0:df:d0:1b:
                    11:44:43:4a:78:b9:70:0a:a0:07:35:bc:01:b7:6b:
                    f4:73:74:ec:69:e8:b2:9b:34:75:dc:b8:62:9e:0f:
                    8d:a0:b2:92:5f:b8:47:6b:66:83:d5:e0:02:b8:58:
                    08:0b:ed:69:0a:3a:47:06:e2:75:df:b9:8e:24:82:
                    54:bd:07:8e:26:52:5e:d4:f8:6e:c7:37:1c:cf:29:
                    d0:5f:30:33:df:57:45:07:22:e2:72:e4:ab:76:9a:
                    43:ba:0b:9e:1c:50:b6:b0:cf:f5:49:f6:f5:3f:91:
                    7c:88:0b:dc:1d:29:71:aa:d5:51:81:a7:34:8d:79:
                    6a:a7:0e:da:17:7f:00:59:e3:57:b7:41:c7:0e:10:
                    cf:1c:18:f5:cb:1d:27:cb:80:2a:dc:20:f2:06:99:
                    3d:1a:1f:d1:b9:cd:1f:b2:5c:4f:08:98:44:33:18:
                    4d:b4:1a:61:73:73:45:78:12:66:94:4d:40:e0:b3:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9F:B0:E3:7A:23:26:FB:DE:3A:B1:33:A8:22:A5:EE:D8:CD:75:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/980a73e4-4d30-360a-9843-dadbf255970a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:56:1b:a4:7d:14:62:65:fb:4f:56:39:b9:07:4d:67:2b:88:
         97:06:90:0a:b2:75:7d:a7:fa:82:69:84:39:3d:dc:49:44:b8:
         c8:5b:a9:dc:9e:9b:2e:da:21:68:8b:14:c2:d6:be:2f:f5:21:
         a6:d6:50:8a:9c:8b:3d:5b:88:d1:bc:2a:80:58:6a:3e:ba:21:
         87:3e:30:c0:35:f6:77:9b:40:c0:30:3a:3a:2f:41:32:56:29:
         69:dd:e3:a2:ec:5b:b9:d8:e9:33:7d:05:03:e2:0d:86:2f:62:
         33:23:d3:be:5b:d3:36:81:e1:62:6b:06:d4:f4:51:e4:cc:c1:
         f9:bd:43:83:74:db:48:a9:e4:04:2c:3d:66:13:1d:74:fc:4d:
         3e:a1:24:11:df:cd:e8:6a:45:65:fe:9d:5e:c9:ba:36:d6:41:
         97:c5:e7:43:fd:2b:d6:d2:a1:37:41:61:e0:3b:93:73:85:0d:
         52:33:fb:7d:d5:b4:12:cc:08:cf:f9:fd:fa:a2:e5:96:5a:eb:
         7f:6a:b9:f7:24:e8:6f:fa:c4:17:69:01:d3:10:71:66:f7:ed:
         4a:f3:0f:aa:cd:4b:8b:7b:c2:94:04:c1:91:a4:93:2c:a3:bf:
         87:4f:87:34:1c:d9:4f:fb:a4:ef:e3:c9:fb:24:a2:f1:da:e5:
         06:f0:08:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06M+cTshgto8aHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ODIxZGY4ZmQtNjkzYy00YTkyLWFjMjEtZmU1NWY2ODI2OTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXWN/rBxUNM8Jc7XbH1CgQhiHWnMOSilR0sh
AeKQNMMHqPqNFQmo+ef4M7oS6jjN9ZsQMgA3vEG2FLBXEWwwLTKfEh4hffDf0BsR
RENKeLlwCqAHNbwBt2v0c3TsaeiymzR13Lhing+NoLKSX7hHa2aD1eACuFgIC+1p
CjpHBuJ137mOJIJUvQeOJlJe1PhuxzcczynQXzAz31dFByLicuSrdppDugueHFC2
sM/1Sfb1P5F8iAvcHSlxqtVRgac0jXlqpw7aF38AWeNXt0HHDhDPHBj1yx0ny4Aq
3CDyBpk9Gh/Ruc0fslxPCJhEMxhNtBphc3NFeBJmlE1A4LNN0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMafsON6Iyb73jqxM6gipe7YzXVNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvOTgwYTczZTQtNGQzMC0z
NjBhLTk4NDMtZGFkYmYyNTU5NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhWG6R9FGJl+09WObkHTWcriJcGkAqydX2n+oJphDk93ElEuMhbqdye
my7aIWiLFMLWvi/1IabWUIqciz1biNG8KoBYaj66IYc+MMA19nebQMAwOjovQTJW
KWnd46LsW7nY6TN9BQPiDYYvYjMj075b0zaB4WJrBtT0UeTMwfm9Q4N020ip5AQs
PWYTHXT8TT6hJBHfzehqRWX+nV7JujbWQZfF50P9K9bSoTdBYeA7k3OFDVIz+33V
tBLMCM/5/fqi5ZZa639qufck6G/6xBdpAdMQcWb37UrzD6rNS4t7wpQEwZGkkyyj
v4dPhzQc2U/7pO/jyfskovHa5QbwCM0=
-----END CERTIFICATE-----
Generated at Fri May 3 05:32:43 2024 by rpki-client on console-ams.rpki-client.org