Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6a49a591-62c4-32da-b51e-eebb670137c2.roa
File:                     6a49a591-62c4-32da-b51e-eebb670137c2.roa (raw, json)
Hash identifier:          CT8lYgaNSTLrEsYNFUGtfu/6B8BWAT/Kp+1JjcMX3Oo=
Subject key identifier:   A8:E9:E5:DA:92:FD:70:0E:DA:22:FA:49:10:90:8F:3E:28:48:87:C7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858452FF9AF3BF8B0DF85BF217C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6a49a591-62c4-32da-b51e-eebb670137c2.roa
Signing time:             Tue 12 Mar 2024 22:12:09 +0000
ROA not before:           Tue 12 Mar 2024 22:12:09 +0000
ROA not after:            Mon 10 Jun 2024 22:12:09 +0000
asID:                     41264
IP address blocks:        104.132.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:f9:af:3b:f8:b0:df:85:bf:21:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 12 22:12:09 2024 GMT
            Not After : Jun 10 22:12:09 2024 GMT
        Subject: CN=6e18178d-b2bd-4402-93ea-d40a211a51a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:78:4f:72:fd:01:0d:0e:97:6b:40:cb:f8:
                    a0:0a:d5:9c:d9:b2:4c:90:ca:75:ff:0e:9a:96:b4:
                    6f:8f:93:de:66:39:75:1f:40:44:fd:bc:a2:32:29:
                    9e:a6:ea:a5:21:1f:ee:17:5f:8d:bd:2d:aa:f9:c9:
                    b4:9d:7b:1d:dc:90:3e:53:90:9e:a7:54:15:47:e7:
                    b9:9c:f3:87:15:f0:e2:1e:46:ab:21:16:17:7c:89:
                    7d:e6:06:88:eb:d8:01:75:54:22:9f:28:bc:66:62:
                    93:2e:30:fe:37:4d:9c:50:c4:61:b5:b6:da:70:a7:
                    8b:17:55:fc:a8:99:4d:49:dd:be:44:43:84:4c:c4:
                    88:0e:07:64:1f:01:a2:29:b2:54:6c:f3:5d:9d:ae:
                    8c:6c:50:cf:80:b3:ef:6b:a4:e1:dc:f9:1c:b4:0e:
                    1e:c3:14:4a:c7:ea:13:f0:0a:76:89:d5:9e:f1:90:
                    a1:38:94:e0:12:52:eb:63:90:dc:55:9f:b1:0e:72:
                    58:6c:81:88:db:0c:d1:22:70:f7:d5:b3:c5:00:99:
                    22:b2:3a:76:7c:db:3b:ef:37:3c:08:95:67:db:05:
                    59:74:99:51:37:3d:c8:2f:03:e0:05:52:ed:35:23:
                    2e:fe:17:61:45:aa:d8:bc:cd:3d:98:54:ae:26:6e:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:E5:DA:92:FD:70:0E:DA:22:FA:49:10:90:8F:3E:28:48:87:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6a49a591-62c4-32da-b51e-eebb670137c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:88:c5:74:f7:c9:f1:ad:fb:1d:46:44:0c:92:30:d7:49:09:
         34:5a:be:07:36:f6:d9:71:67:e9:e0:b8:8e:31:28:39:4b:59:
         8c:7c:bd:9a:08:16:f8:e1:1a:f8:ce:3c:87:93:35:8a:86:71:
         2c:1f:3d:fa:43:5e:0b:52:be:53:74:0e:ee:7c:31:a8:da:d4:
         63:08:11:ca:0c:bf:79:d7:54:32:83:d9:8c:4a:b0:e7:1c:b3:
         0d:60:d0:a3:de:b6:36:4b:67:14:7b:e4:51:22:bf:38:60:9c:
         3c:d7:03:09:d6:af:4e:f1:94:19:2c:ba:54:b2:b7:05:88:70:
         df:96:a8:7b:7f:00:8f:78:b9:e5:02:b8:23:f4:f4:04:36:4b:
         9e:db:c0:c5:4e:c5:70:7d:51:67:d1:c8:25:22:23:ff:86:5c:
         8e:6a:f5:ff:97:0c:b0:cf:f6:70:90:9d:78:d7:6c:01:c3:cf:
         25:dd:f9:27:c1:73:17:ef:e4:a3:e3:7a:70:ce:7f:89:e8:97:
         8e:eb:87:7c:57:cc:35:a3:48:dc:92:d0:ba:f8:2f:7a:a4:58:
         56:bc:a6:37:1a:34:ba:f1:16:18:68:58:62:c5:7d:fd:cf:4a:
         fb:6a:81:8c:c8:48:12:6e:4f:aa:b6:c7:65:75:fe:0f:0d:fc:
         bb:5c:65:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUv+a87+LDfhb8hfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxMjIyMTIwOVoXDTI0MDYxMDIyMTIwOVowLzEtMCsGA1UEAxMk
NmUxODE3OGQtYjJiZC00NDAyLTkzZWEtZDQwYTIxMWE1MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuN4T3L9AQ0Ol2tAy/igCtWc2bJMkMp1/w6a
lrRvj5PeZjl1H0BE/byiMimepuqlIR/uF1+NvS2q+cm0nXsd3JA+U5Cep1QVR+e5
nPOHFfDiHkarIRYXfIl95gaI69gBdVQinyi8ZmKTLjD+N02cUMRhtbbacKeLF1X8
qJlNSd2+REOETMSIDgdkHwGiKbJUbPNdna6MbFDPgLPva6Th3PkctA4ewxRKx+oT
8Ap2idWe8ZChOJTgElLrY5DcVZ+xDnJYbIGI2wzRInD31bPFAJkisjp2fNs77zc8
CJVn2wVZdJlRNz3ILwPgBVLtNSMu/hdhRarYvM09mFSuJm7JfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjp5dqS/XAO2iL6SRCQjz4oSIfHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmE0OWE1OTEtNjJjNC0z
MmRhLWI1MWUtZWViYjY3MDEzN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOIxXT3yfGt+x1GRAySMNdJCTRavgc29tlxZ+nguI4xKDlLWYx8vZoI
FvjhGvjOPIeTNYqGcSwfPfpDXgtSvlN0Du58Maja1GMIEcoMv3nXVDKD2YxKsOcc
sw1g0KPetjZLZxR75FEivzhgnDzXAwnWr07xlBksulSytwWIcN+WqHt/AI94ueUC
uCP09AQ2S57bwMVOxXB9UWfRyCUiI/+GXI5q9f+XDLDP9nCQnXjXbAHDzyXd+SfB
cxfv5KPjenDOf4nol47rh3xXzDWjSNyS0Lr4L3qkWFa8pjcaNLrxFhhoWGLFff3P
SvtqgYzISBJuT6q2x2V1/g8N/LtcZao=
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:33 2024 by rpki-client on console-ams.rpki-client.org