Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb7b441-8e82-3562-b15d-2c1878a1a1fd.roa
File:                     5cb7b441-8e82-3562-b15d-2c1878a1a1fd.roa (raw, json)
Hash identifier:          inRI4a1itoq6au8uhoeEc2+iSD8W+JKZbxxuV+Ayhsg=
Subject key identifier:   32:25:71:B6:EB:52:91:C2:39:BE:A2:0A:53:A8:AB:C7:93:5C:EF:62
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453284D1DA51A28400B9959580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb7b441-8e82-3562-b15d-2c1878a1a1fd.roa
Signing time:             Wed 13 Mar 2024 20:04:06 +0000
ROA not before:           Wed 13 Mar 2024 20:04:06 +0000
ROA not after:            Tue 11 Jun 2024 20:04:06 +0000
asID:                     41264
IP address blocks:        104.132.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:d1:da:51:a2:84:00:b9:95:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:04:06 2024 GMT
            Not After : Jun 11 20:04:06 2024 GMT
        Subject: CN=d7ca9b4a-b661-4030-9811-c5120ea5c365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:ed:56:be:65:55:9a:fc:dd:86:f4:dd:bd:
                    d9:3e:55:61:ce:57:8e:09:8c:e9:96:18:5b:bb:ba:
                    40:d8:0a:ad:83:5d:49:1a:05:f6:1c:9c:8c:26:38:
                    5b:24:b8:80:00:d2:1e:35:e0:5c:33:73:a4:46:60:
                    1c:62:59:c4:ba:23:06:79:c5:31:64:07:33:ad:2a:
                    da:c2:60:80:68:9c:9a:94:e9:26:11:c8:d4:14:07:
                    43:2b:34:57:2c:d6:b6:b9:ab:90:25:5f:cc:80:13:
                    50:03:ad:9e:05:8b:dc:55:75:4a:48:4b:c6:a3:20:
                    d0:9d:34:d4:f0:f4:94:c2:f2:f3:10:aa:e8:06:7c:
                    d5:4d:dc:d0:d5:4c:28:af:56:e4:4d:39:04:4f:46:
                    18:8e:86:44:be:1f:95:3d:25:88:23:f6:4b:36:f9:
                    df:23:c9:f0:4b:f8:9d:cc:d4:cb:12:af:32:e4:20:
                    cb:94:b9:8c:a7:d2:50:30:2a:94:26:c8:0f:61:69:
                    b2:c4:7a:ba:aa:dd:d7:0c:a4:d6:76:df:1e:be:7d:
                    1c:61:56:13:2e:7e:8a:af:77:68:6f:c2:4c:cc:79:
                    87:57:ad:a2:54:52:e9:e6:52:51:c8:0a:da:32:73:
                    fb:68:35:8b:5d:1d:b2:2c:5f:74:3e:85:75:69:ad:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:71:B6:EB:52:91:C2:39:BE:A2:0A:53:A8:AB:C7:93:5C:EF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb7b441-8e82-3562-b15d-2c1878a1a1fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:d1:53:29:1d:91:d1:23:fa:e7:51:84:d9:78:65:ba:d0:
         49:a9:18:31:74:01:e6:f1:f5:d3:c9:f8:65:09:a5:66:f3:ed:
         36:06:6e:8a:f8:8d:08:6f:07:c0:a6:fe:a6:bc:9e:6b:aa:77:
         06:a3:c8:27:e3:17:d3:c9:05:c3:e0:39:47:c4:cc:8a:7e:bb:
         61:ea:ba:f0:4f:68:c3:df:78:32:c4:b9:a4:c7:72:2a:ed:21:
         e4:e3:d4:90:85:80:ce:17:a0:0c:3d:30:d3:7f:60:24:d0:58:
         d8:34:bc:fc:6a:8d:62:33:19:77:e0:5e:d3:ff:26:d5:8a:05:
         59:58:a5:15:7f:af:26:9b:63:39:ac:dc:55:24:f5:42:43:e0:
         cb:59:18:2a:9a:d1:0c:74:b9:d4:df:9a:19:7a:04:3d:b7:52:
         48:fc:1f:5b:59:77:2b:c0:43:36:89:a0:a8:6c:68:52:d0:05:
         b4:13:d9:c1:11:77:45:2c:96:86:56:c8:d4:05:14:7a:39:4b:
         fc:ea:b4:a0:99:e5:69:75:d3:a4:12:cb:b1:04:2e:c8:4d:e4:
         d6:72:64:01:fd:62:30:c1:da:c4:f3:6d:83:6d:69:3f:d0:ba:
         fc:dc:9e:34:6d:a8:3c:66:b2:37:97:95:a7:48:49:5a:df:d8:
         48:eb:f9:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUyhNHaUaKEALmVlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxMzIwMDQwNloXDTI0MDYxMTIwMDQwNlowLzEtMCsGA1UEAxMk
ZDdjYTliNGEtYjY2MS00MDMwLTk4MTEtYzUxMjBlYTVjMzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBztVr5lVZr83Yb03b3ZPlVhzleOCYzplhhb
u7pA2Aqtg11JGgX2HJyMJjhbJLiAANIeNeBcM3OkRmAcYlnEuiMGecUxZAczrSra
wmCAaJyalOkmEcjUFAdDKzRXLNa2uauQJV/MgBNQA62eBYvcVXVKSEvGoyDQnTTU
8PSUwvLzEKroBnzVTdzQ1Uwor1bkTTkET0YYjoZEvh+VPSWII/ZLNvnfI8nwS/id
zNTLEq8y5CDLlLmMp9JQMCqUJsgPYWmyxHq6qt3XDKTWdt8evn0cYVYTLn6Kr3do
b8JMzHmHV62iVFLp5lJRyAraMnP7aDWLXR2yLF90PoV1aa1/SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIlcbbrUpHCOb6iClOoq8eTXO9iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWNiN2I0NDEtOGU4Mi0z
NTYyLWIxNWQtMmMxODc4YTFhMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERu0VMpHZHRI/rnUYTZeGW60EmpGDF0Aebx9dPJ+GUJpWbz7TYGbor4
jQhvB8Cm/qa8nmuqdwajyCfjF9PJBcPgOUfEzIp+u2HquvBPaMPfeDLEuaTHcirt
IeTj1JCFgM4XoAw9MNN/YCTQWNg0vPxqjWIzGXfgXtP/JtWKBVlYpRV/ryabYzms
3FUk9UJD4MtZGCqa0Qx0udTfmhl6BD23Ukj8H1tZdyvAQzaJoKhsaFLQBbQT2cER
d0UsloZWyNQFFHo5S/zqtKCZ5Wl106QSy7EELshN5NZyZAH9YjDB2sTzbYNtaT/Q
uvzcnjRtqDxmsjeXladISVrf2Ejr+S0=
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:31 2024 by rpki-client on console-ams.rpki-client.org