Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/470351d0-078b-3f4c-9b85-28f4b877c8dd.roa
File:                     470351d0-078b-3f4c-9b85-28f4b877c8dd.roa (raw, json)
Hash identifier:          SpX3wIHtsbrQOe+8GO2xE/HorNNiqzqbXRFzQ+hSFGA=
Subject key identifier:   D9:47:36:2B:F2:CD:F3:EC:36:B8:9E:AD:05:FD:69:85:8E:1B:B7:FE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583E07575E6613E16C362A9D4F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/470351d0-078b-3f4c-9b85-28f4b877c8dd.roa
Signing time:             Wed 25 May 2022 12:00:00 +0000
ROA not before:           Wed 25 May 2022 12:00:00 +0000
ROA not after:            Sat 03 Jun 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        104.29.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:07:57:5e:66:13:e1:6c:36:2a:9d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 12:00:00 2022 GMT
            Not After : Jun  3 04:00:00 2028 GMT
        Subject: CN=451e812a-e5a5-4724-a944-3ba4d4a8ba85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:61:28:f5:36:de:d1:11:f1:d9:9e:b4:ab:
                    c7:57:2e:c7:ee:7f:43:86:c1:ec:c5:bb:90:4e:5e:
                    2c:87:4a:03:d2:86:fd:9a:2f:d7:2b:af:99:90:5a:
                    17:e9:b9:a6:72:70:90:b4:06:56:fe:f4:e0:d6:c5:
                    f3:f5:3d:d8:98:14:60:95:72:08:ff:9b:f6:82:0f:
                    f8:86:20:33:91:69:78:9d:a4:b5:90:bb:0f:c1:f5:
                    0d:61:25:e5:a1:93:bc:87:c1:03:2b:51:a5:01:ec:
                    91:f7:98:3a:54:ca:75:38:88:a8:ca:4d:7b:55:33:
                    39:9b:b2:d3:df:41:d5:3a:18:e6:8a:73:b3:20:b8:
                    34:cc:17:7a:31:b8:74:2e:89:e7:50:a8:df:d7:62:
                    ec:9f:3e:82:97:6c:aa:47:e5:4a:52:17:aa:4f:a3:
                    81:d2:28:e1:80:c6:f7:eb:84:8e:75:9a:53:9b:01:
                    ac:d4:2c:18:34:16:ed:44:0b:6c:ed:62:87:8f:d8:
                    99:9c:c2:3d:46:af:2e:93:86:9b:f2:f9:28:52:bd:
                    6e:1e:7c:19:02:ef:b4:f8:45:e0:8e:de:7d:b2:e9:
                    71:85:3f:a9:f2:58:8e:0a:98:af:4a:e5:08:a9:0e:
                    0c:5b:b7:44:02:df:6f:88:bb:3c:18:e6:94:1d:2c:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:47:36:2B:F2:CD:F3:EC:36:B8:9E:AD:05:FD:69:85:8E:1B:B7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/470351d0-078b-3f4c-9b85-28f4b877c8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:0f:88:5f:97:0d:52:df:f3:27:6f:ae:2d:58:7c:f2:cd:
         b3:6c:db:ce:1c:a7:a6:9e:d2:2e:f4:60:bd:d2:9b:14:1f:2f:
         92:47:1c:58:4f:55:4d:ba:68:82:5b:84:0e:4d:71:e7:50:66:
         75:1f:78:e8:4e:29:4d:a6:14:41:a4:a8:36:4b:7c:e6:74:b3:
         d2:a1:02:ea:cf:bd:79:8b:9b:2f:1b:dd:37:b0:56:f2:43:6d:
         a0:4f:68:e2:79:ea:f5:83:80:06:29:8d:be:02:f4:3c:24:e8:
         10:49:a0:c7:5e:3d:ab:63:b6:92:bc:b9:41:4d:f6:3b:0d:18:
         b3:ab:bc:ca:20:ba:c7:4b:20:bd:3d:de:fe:0e:68:0e:31:df:
         64:3c:ce:a0:63:58:c2:ba:32:5f:17:3c:2b:79:f1:03:bc:21:
         15:64:08:3d:43:59:95:4e:6e:23:f0:bb:fc:cb:94:31:5f:ba:
         34:47:38:a8:e8:cc:d5:31:04:8a:6e:86:5f:f8:1a:09:6e:a4:
         4a:20:c7:cc:dd:48:c4:e9:cf:ac:af:99:12:05:88:67:ab:5c:
         c4:22:19:3f:bf:93:c0:d8:a2:55:f8:56:a2:e5:01:6c:81:c1:
         70:4d:cc:11:b2:a7:bf:90:4b:a0:33:a1:66:d1:4a:91:58:35:
         6d:f8:cf:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4HV15mE+FsNiqdTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIyMDUyNTEyMDAwMFoXDTI4MDYwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NDUxZTgxMmEtZTVhNS00NzI0LWE5NDQtM2JhNGQ0YThiYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh1hKPU23tER8dmetKvHVy7H7n9DhsHsxbuQ
Tl4sh0oD0ob9mi/XK6+ZkFoX6bmmcnCQtAZW/vTg1sXz9T3YmBRglXII/5v2gg/4
hiAzkWl4naS1kLsPwfUNYSXloZO8h8EDK1GlAeyR95g6VMp1OIioyk17VTM5m7LT
30HVOhjminOzILg0zBd6Mbh0LonnUKjf12Lsnz6Cl2yqR+VKUheqT6OB0ijhgMb3
64SOdZpTmwGs1CwYNBbtRAts7WKHj9iZnMI9Rq8uk4ab8vkoUr1uHnwZAu+0+EXg
jt59sulxhT+p8liOCpivSuUIqQ4MW7dEAt9viLs8GOaUHSzn/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlHNivyzfPsNrierQX9aYWOG7f+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMzUxZDAtMDc4Yi0z
ZjRjLTliODUtMjhmNGI4NzdjOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALs+D4hflw1S3/Mnb64tWHzyzbNs284cp6ae0i70YL3SmxQfL5JHHFhP
VU26aIJbhA5NcedQZnUfeOhOKU2mFEGkqDZLfOZ0s9KhAurPvXmLmy8b3TewVvJD
baBPaOJ56vWDgAYpjb4C9Dwk6BBJoMdePatjtpK8uUFN9jsNGLOrvMogusdLIL09
3v4OaA4x32Q8zqBjWMK6Ml8XPCt58QO8IRVkCD1DWZVObiPwu/zLlDFfujRHOKjo
zNUxBIpuhl/4GglupEogx8zdSMTpz6yvmRIFiGerXMQiGT+/k8DYolX4VqLlAWyB
wXBNzBGyp7+QS6AzoWbRSpFYNW34z5w=
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:05 2024 by rpki-client on console-fra.rpki-client.org