Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/64f594e7-dfeb-39d2-bc3e-bb0ccba43c9b.roa
File:                     64f594e7-dfeb-39d2-bc3e-bb0ccba43c9b.roa (raw, json)
Hash identifier:          y5FHfwEtuSlcFjgkaaTrx0xLHx9zOG7PdbyIjrtzNws=
Subject key identifier:   9F:4E:4A:0E:92:B6:58:06:6A:A8:EE:5F:2A:D5:11:09:A1:71:9A:0F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453283E4B942BD4D683C26BAD0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/64f594e7-dfeb-39d2-bc3e-bb0ccba43c9b.roa
Signing time:             Wed 13 Mar 2024 20:02:14 +0000
ROA not before:           Wed 13 Mar 2024 20:02:14 +0000
ROA not after:            Tue 11 Jun 2024 20:02:14 +0000
asID:                     41264
IP address blocks:        104.132.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:e4:b9:42:bd:4d:68:3c:26:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:02:14 2024 GMT
            Not After : Jun 11 20:02:14 2024 GMT
        Subject: CN=26b1f8a3-6dc2-4c37-8e92-a7cf1f2f21e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:4d:e1:2c:d7:16:2e:4e:99:79:c1:12:b3:
                    c3:82:25:b0:5e:24:c2:bf:57:ed:6e:d6:31:d5:d2:
                    60:02:ed:3d:91:38:1f:e2:eb:46:cc:89:ac:21:f8:
                    3d:96:c3:d0:5a:d5:e6:1f:a0:13:86:7c:da:bf:6c:
                    5f:a6:91:3c:93:74:2a:ee:0f:99:20:b2:f7:65:44:
                    71:64:95:1a:11:c7:fe:9d:03:c2:e5:72:7a:ab:fd:
                    15:01:0b:a1:30:26:5a:9e:38:9e:c6:26:fd:6b:9c:
                    02:03:26:b2:9c:5b:ce:12:aa:38:67:85:b1:1f:e5:
                    9c:0b:0e:46:cf:d4:6a:cf:69:96:76:23:da:5e:66:
                    6a:86:6c:d7:ca:ae:67:a1:ec:28:c5:66:d0:66:4e:
                    13:b5:0a:0d:99:f1:03:b0:b6:08:45:4a:5a:89:ea:
                    8e:e5:f3:16:d0:a9:84:de:15:c5:f1:4d:b6:72:70:
                    2e:38:57:d8:34:43:03:40:05:53:1d:d5:70:50:71:
                    e1:51:59:0b:49:c3:e2:ce:90:d6:1c:37:f3:ee:62:
                    5e:51:41:fe:60:d2:7d:94:7a:ff:c2:ad:54:3b:ef:
                    42:7f:54:27:c4:9a:e1:03:a4:40:50:4b:72:65:4c:
                    bd:e6:1e:52:e3:e6:8c:6a:e1:e7:0f:e9:52:bd:96:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:4A:0E:92:B6:58:06:6A:A8:EE:5F:2A:D5:11:09:A1:71:9A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/64f594e7-dfeb-39d2-bc3e-bb0ccba43c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:61:0f:bb:58:3c:eb:27:ae:e8:bf:76:45:13:e1:22:76:
         12:4e:99:70:6f:07:37:a8:19:88:62:f2:8b:f3:ab:6d:c2:b1:
         f9:6c:f3:54:d8:72:d6:8d:97:4a:fb:31:2d:5c:30:35:40:af:
         02:dc:1d:47:70:a4:c2:b4:48:71:e4:ae:cb:82:33:16:6b:43:
         7b:9b:8d:20:f1:47:c5:6a:e7:3c:3d:37:89:d8:30:07:ec:0a:
         25:e0:61:f8:80:86:fe:2c:93:2b:40:06:58:d4:64:fe:0d:9e:
         14:ae:0b:d2:ce:58:e4:6e:a5:da:1c:7e:c9:e8:1f:72:e6:fe:
         ce:28:d6:f3:7b:86:55:57:42:e7:cd:e3:7e:1e:a0:84:5d:04:
         56:2e:ff:53:90:98:e8:32:b4:03:0d:dd:16:1b:30:94:ae:c3:
         0e:43:38:b0:e5:37:63:f0:26:e3:2e:6b:0e:93:1f:56:77:2d:
         5c:99:ec:47:56:2d:40:ea:cd:bf:e1:0b:7a:3a:02:2b:45:ae:
         82:eb:16:73:d0:43:19:f7:df:96:72:13:03:45:ad:a7:89:19:
         c7:82:05:98:35:25:47:55:41:df:87:cb:f2:36:67:6c:3e:75:
         fc:51:43:c3:e8:73:b8:9f:75:ea:38:7e:b1:f2:9a:c8:00:30:
         d9:9c:43:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUyg+S5Qr1NaDwmutAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxMzIwMDIxNFoXDTI0MDYxMTIwMDIxNFowLzEtMCsGA1UEAxMk
MjZiMWY4YTMtNmRjMi00YzM3LThlOTItYTdjZjFmMmYyMWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxRN4SzXFi5OmXnBErPDgiWwXiTCv1ftbtYx
1dJgAu09kTgf4utGzImsIfg9lsPQWtXmH6AThnzav2xfppE8k3Qq7g+ZILL3ZURx
ZJUaEcf+nQPC5XJ6q/0VAQuhMCZanjiexib9a5wCAyaynFvOEqo4Z4WxH+WcCw5G
z9Rqz2mWdiPaXmZqhmzXyq5noewoxWbQZk4TtQoNmfEDsLYIRUpaieqO5fMW0KmE
3hXF8U22cnAuOFfYNEMDQAVTHdVwUHHhUVkLScPizpDWHDfz7mJeUUH+YNJ9lHr/
wq1UO+9Cf1QnxJrhA6RAUEtyZUy95h5S4+aMauHnD+lSvZZ+iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9OSg6StlgGaqjuXyrVEQmhcZoPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjRmNTk0ZTctZGZlYi0z
OWQyLWJjM2UtYmIwY2NiYTQzYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIu3YQ+7WDzrJ67ov3ZFE+EidhJOmXBvBzeoGYhi8ovzq23Csfls81TY
ctaNl0r7MS1cMDVArwLcHUdwpMK0SHHkrsuCMxZrQ3ubjSDxR8Vq5zw9N4nYMAfs
CiXgYfiAhv4skytABljUZP4NnhSuC9LOWORupdocfsnoH3Lm/s4o1vN7hlVXQufN
434eoIRdBFYu/1OQmOgytAMN3RYbMJSuww5DOLDlN2PwJuMuaw6TH1Z3LVyZ7EdW
LUDqzb/hC3o6AitFroLrFnPQQxn335ZyEwNFraeJGceCBZg1JUdVQd+Hy/I2Z2w+
dfxRQ8Poc7ifdeo4frHymsgAMNmcQ4Y=
-----END CERTIFICATE-----
Generated at Sat May 11 09:50:06 2024 by rpki-client on console-fra.rpki-client.org