Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa
File:                     caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json)
Hash identifier:          PQCZQAbSBF5dRdI9IMWbr/xVsUzbVdK06Jj/+rzHrxg=
Subject key identifier:   CA:32:91:13:C7:61:88:B2:2C:9A:FA:CB:52:B7:DC:C0:33:25:7B:18
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F432858478F8122228905F1D4582BE080
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     23470
IP address blocks:        104.128.72.0/24 maxlen: 24
                          104.128.73.0/24 maxlen: 24
                          104.128.74.0/24 maxlen: 24
                          104.128.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:22:22:89:05:f1:d4:58:2b:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=4a694f36-0ebb-4364-83c0-c67f090ddef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:b0:d8:ba:ce:1b:60:5e:ed:25:36:71:78:
                    25:9e:9d:bf:91:81:78:7c:57:fc:45:60:aa:fe:7f:
                    79:fd:6e:52:0e:0f:16:04:fd:7f:d2:5c:06:9d:d6:
                    66:94:74:46:50:12:1e:b4:8b:37:ba:11:97:a3:51:
                    8e:da:5d:fc:cf:f5:fe:08:6b:b4:c0:76:9a:e8:bf:
                    f8:b6:d8:09:69:7d:19:24:da:75:28:3f:79:2a:48:
                    44:cc:16:53:8a:fb:5f:c8:2c:7d:56:52:2d:48:c9:
                    9d:be:26:f1:c4:3a:5b:2a:ca:eb:27:c1:c2:82:81:
                    9f:bd:82:34:fd:d4:75:26:92:7e:c3:9e:29:af:8d:
                    51:00:d8:17:f8:8b:24:07:73:41:98:d5:bc:b3:f8:
                    3c:40:9d:80:40:25:bd:b2:4e:18:1e:e8:54:fc:35:
                    31:76:e5:f7:97:1a:82:f7:9b:41:4d:fa:2b:0d:58:
                    8d:43:27:96:d3:05:f4:1b:c0:2e:a0:40:22:81:48:
                    a7:8b:b2:3a:ac:f1:74:98:d9:de:97:71:55:b9:2c:
                    aa:fb:97:b0:3b:9a:ac:f5:c7:51:fe:83:3f:3f:a0:
                    c6:97:93:08:f3:54:65:14:25:48:59:19:10:74:88:
                    32:26:8e:57:74:64:d5:fb:6b:5e:8f:f6:00:74:3b:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:91:13:C7:61:88:B2:2C:9A:FA:CB:52:B7:DC:C0:33:25:7B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:15:ef:0f:5e:64:2d:19:3b:70:6f:38:0d:62:23:b5:99:5f:
         56:9a:2e:c8:8e:88:54:b5:30:ab:19:54:21:49:4c:c0:2f:86:
         60:08:cf:88:9c:2b:6c:5f:88:dc:55:15:8b:b2:38:c9:3b:62:
         7f:fa:5a:77:f6:7f:52:a8:ff:36:2b:d1:dd:b5:e3:f0:a9:9e:
         66:c8:d6:a0:09:89:4b:1a:4a:f3:3d:07:6f:5a:e8:2b:6a:a3:
         64:78:4f:eb:1e:cf:65:40:70:1b:36:2b:61:05:29:42:f8:89:
         ed:64:e6:e3:cb:4e:16:e6:08:51:87:a6:ec:ba:0b:25:50:cf:
         36:7b:1f:e9:88:a7:83:2d:a0:a6:6f:3c:31:cb:de:27:5c:2a:
         45:9f:ed:fc:81:10:7d:bf:a5:22:e5:8b:f2:3a:b1:18:97:a6:
         bd:8a:c0:2e:36:bf:f1:77:91:b1:76:3f:33:03:69:14:c1:2b:
         92:39:5f:b4:d3:d0:05:a7:c4:06:6a:8d:9c:c7:2d:0a:42:76:
         1f:84:2b:47:72:73:d8:dc:53:19:e4:e6:46:ea:17:3b:c2:43:
         cd:8f:92:17:e8:a4:eb:a7:19:48:bf:f4:d7:45:ad:90:35:8d:
         05:75:b6:d2:42:b1:2c:43:08:2b:f7:06:2e:33:90:3b:2e:fc:
         5e:39:73:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgSIiiQXx1Fgr4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy
NTQ0MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk
NGE2OTRmMzYtMGViYi00MzY0LTgzYzAtYzY3ZjA5MGRkZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHKw2LrOG2Be7SU2cXglnp2/kYF4fFf8RWCq
/n95/W5SDg8WBP1/0lwGndZmlHRGUBIetIs3uhGXo1GO2l38z/X+CGu0wHaa6L/4
ttgJaX0ZJNp1KD95KkhEzBZTivtfyCx9VlItSMmdvibxxDpbKsrrJ8HCgoGfvYI0
/dR1JpJ+w54pr41RANgX+IskB3NBmNW8s/g8QJ2AQCW9sk4YHuhU/DUxduX3lxqC
95tBTforDViNQyeW0wX0G8AuoEAigUini7I6rPF0mNnel3FVuSyq+5ewO5qs9cdR
/oM/P6DGl5MI81RlFCVIWRkQdIgyJo5XdGTV+2tej/YAdDtteQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoykRPHYYiyLJr6y1K33MAzJXsYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5
YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvY2FhZmE2OTEtMjllNy0z
YWNkLTliZWMtNjc2OTFhODc2YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2
ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj
MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx
ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIBIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkV7w9eZC0ZO3BvOA1iI7WZX1aaLsiOiFS1MKsZVCFJTMAvhmAIz4ic
K2xfiNxVFYuyOMk7Yn/6Wnf2f1Ko/zYr0d214/CpnmbI1qAJiUsaSvM9B29a6Ctq
o2R4T+sez2VAcBs2K2EFKUL4ie1k5uPLThbmCFGHpuy6CyVQzzZ7H+mIp4MtoKZv
PDHL3idcKkWf7fyBEH2/pSLli/I6sRiXpr2KwC42v/F3kbF2PzMDaRTBK5I5X7TT
0AWnxAZqjZzHLQpCdh+EK0dyc9jcUxnk5kbqFzvCQ82PkhfopOunGUi/9NdFrZA1
jQV1ttJCsSxDCCv3Bi4zkDsu/F45cxQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:40 2024 by rpki-client on console-fra.rpki-client.org