Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa
File:                     3468e988-70e4-3dfd-a14d-360d7a837fb0.roa (raw, json)
Hash identifier:          CzfUI9xUg5THxUo+ctTJKZz4cxmnWC/k2G1N59Zocbw=
Subject key identifier:   57:CE:E2:B4:A1:3E:11:87:34:CA:87:73:8E:48:A2:E2:13:20:CD:F0
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285845F51E8F0353E65D504C6E7DC0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     393336
IP address blocks:        104.193.226.0/24 maxlen: 24
                          162.250.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:8f:03:53:e6:5d:50:4c:6e:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=269e5e51-2e9b-4107-b483-7a68543f2919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:94:c8:c2:48:4d:43:2a:01:7f:a6:65:01:
                    1b:1f:db:03:f8:0f:86:3b:d2:3e:83:ac:ce:59:af:
                    cb:79:2e:1a:ef:f3:29:0a:ec:c7:84:82:c3:c2:8d:
                    bf:d0:02:ca:2e:9f:54:ad:1a:ee:8a:b0:bf:94:d9:
                    9d:3d:53:a1:f0:e6:f2:23:b1:49:3a:f0:bb:6b:d6:
                    e2:33:a2:6a:50:06:1f:85:86:fb:f3:d6:32:79:b2:
                    fe:b8:ae:b9:c2:34:67:9a:a1:d0:33:c5:6a:55:e8:
                    47:0e:d4:05:fc:cf:b2:a0:ec:f2:d8:32:0a:bb:d5:
                    1d:3e:92:14:89:37:4e:86:94:67:31:28:51:54:a9:
                    66:26:f8:dc:52:fd:ce:0a:16:00:5d:ca:8b:f1:5a:
                    cb:4c:cb:09:00:a5:ac:5c:02:2a:99:e3:3c:e6:a9:
                    c0:8c:e9:f9:fc:62:76:83:e1:75:e0:7d:2c:4d:f3:
                    d5:c6:da:7f:43:44:af:c7:96:0c:c2:f0:4b:64:16:
                    b5:21:f5:33:e2:b8:bc:49:7b:a4:a8:2f:5b:d8:50:
                    5a:80:b7:2a:9a:84:7c:cc:d8:c8:26:29:9f:4c:0d:
                    98:ad:aa:9b:b2:2c:ad:78:f2:66:01:ad:e8:2d:28:
                    0e:5c:af:30:d2:dc:20:e5:e0:25:e0:fa:11:f9:dd:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CE:E2:B4:A1:3E:11:87:34:CA:87:73:8E:48:A2:E2:13:20:CD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.226.0/24
                  162.250.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:eb:bf:2f:d8:de:3d:25:e8:77:01:51:2e:a7:6f:3a:48:
         03:82:fc:ec:e9:f7:83:26:d3:be:9c:55:c1:d4:77:df:b5:83:
         40:8d:6a:41:3c:2c:56:6c:fc:a6:fc:0f:55:a7:41:90:7b:c8:
         3e:6a:9b:80:a3:a9:c9:dd:8a:67:15:94:05:4a:61:ba:10:99:
         d3:6f:81:07:28:c3:f4:50:28:e2:20:f4:2c:08:1e:bd:fe:15:
         c2:f3:8c:e4:e7:f6:8c:bd:48:99:1b:12:3b:61:9b:a0:e0:50:
         b1:ba:75:f8:37:03:fc:36:4f:54:bb:77:dd:23:62:54:b2:21:
         b6:ed:43:61:e3:c3:4e:59:e0:13:cc:4c:31:96:3b:71:27:f2:
         68:30:0c:2a:f2:bc:af:f2:6e:1f:5e:5f:40:01:eb:33:89:f3:
         48:34:c9:70:12:cd:db:62:ed:ae:39:0f:28:02:33:2b:17:20:
         c7:92:ca:3f:d0:b9:99:55:8b:a4:3c:ca:b8:00:86:f4:80:4f:
         06:3d:ba:2b:40:b9:d1:ba:46:7c:19:f8:ba:55:21:d8:69:ad:
         19:d3:ee:1b:48:b9:22:0e:6f:47:b8:8a:ae:f7:16:b7:61:22:
         dd:03:c2:a4:b1:ae:0b:0b:83:c9:1b:95:bf:cf:7c:9d:0a:28:
         54:ae:dc:3c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEX1Ho8DU+ZdUExufcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
MjY5ZTVlNTEtMmU5Yi00MTA3LWI0ODMtN2E2ODU0M2YyOTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoSUyMJITUMqAX+mZQEbH9sD+A+GO9I+g6zO
Wa/LeS4a7/MpCuzHhILDwo2/0ALKLp9UrRruirC/lNmdPVOh8ObyI7FJOvC7a9bi
M6JqUAYfhYb789YyebL+uK65wjRnmqHQM8VqVehHDtQF/M+yoOzy2DIKu9UdPpIU
iTdOhpRnMShRVKlmJvjcUv3OChYAXcqL8VrLTMsJAKWsXAIqmeM85qnAjOn5/GJ2
g+F14H0sTfPVxtp/Q0Svx5YMwvBLZBa1IfUz4ri8SXukqC9b2FBagLcqmoR8zNjI
JimfTA2YraqbsiytePJmAa3oLSgOXK8w0twg5eAl4PoR+d01DwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFfO4rShPhGHNMqHc45IouITIM3wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvMzQ2OGU5ODgtNzBlNC0z
ZGZkLWExNGQtMzYwZDdhODM3ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMHiAwQA
ovrrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGT1678v2N49Jeh3AVEup286SAOC/Ozp94Mm076cVcHUd9+1
g0CNakE8LFZs/Kb8D1WnQZB7yD5qm4CjqcndimcVlAVKYboQmdNvgQcow/RQKOIg
9CwIHr3+FcLzjOTn9oy9SJkbEjthm6DgULG6dfg3A/w2T1S7d90jYlSyIbbtQ2Hj
w05Z4BPMTDGWO3En8mgwDCryvK/ybh9eX0AB6zOJ80g0yXASzdti7a45DygCMysX
IMeSyj/QuZlVi6Q8yrgAhvSATwY9uitAudG6RnwZ+LpVIdhprRnT7htIuSIOb0e4
iq73FrdhIt0DwqSxrgsLg8kblb/PfJ0KKFSu3Dw=
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:34:30 2024 by rpki-client on console-fra.rpki-client.org