Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
File:                     7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa (raw, json)
Hash identifier:          mOroBZJB6l5Gpja6AlNImgl0Hg5ExeVHz/c9M+9fblk=
Subject key identifier:   DD:50:01:02:6A:3E:12:78:48:82:89:0B:DE:81:FA:AE:8D:A7:01:CE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858452FF95CA695182CA2F6D2D680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
Signing time:             Tue 12 Mar 2024 22:11:30 +0000
ROA not before:           Tue 12 Mar 2024 22:11:30 +0000
ROA not after:            Mon 10 Jun 2024 22:11:30 +0000
asID:                     41264
IP address blocks:        104.132.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2f:f9:5c:a6:95:18:2c:a2:f6:d2:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 12 22:11:30 2024 GMT
            Not After : Jun 10 22:11:30 2024 GMT
        Subject: CN=0f231562-3c8b-4ff8-a63f-354a312287ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:3a:c0:ea:cc:70:bf:9c:58:8b:c8:a5:39:
                    52:45:7a:2a:3e:53:6c:d3:25:f9:3e:fe:47:36:77:
                    c1:69:07:28:7f:26:5e:59:20:a0:11:ae:52:0c:53:
                    7f:f6:88:67:fe:61:e5:49:9a:f3:91:5b:e7:9b:11:
                    72:a8:68:e2:61:77:d2:aa:bc:0d:cc:28:8b:dc:5f:
                    c7:fd:75:cc:c3:af:15:a6:5e:bf:6f:da:4b:47:77:
                    eb:c5:5d:7a:73:91:8e:95:eb:ed:d9:09:a1:e1:68:
                    cc:8b:9f:b6:11:ed:36:1b:50:a7:3f:23:6e:c2:bc:
                    e4:67:ab:6b:36:33:ed:a7:b9:e7:86:5e:c9:38:eb:
                    a8:f7:9e:1b:1c:14:5c:ea:be:72:63:3d:5a:b8:52:
                    60:73:56:03:bf:04:2a:ed:e8:13:6b:5b:87:17:9c:
                    80:f2:0d:e6:8c:a3:09:61:a9:54:6c:75:14:b3:54:
                    23:1f:f4:cb:76:fd:ed:ab:bc:c4:62:ea:2f:ec:2c:
                    27:b0:86:bf:bc:ce:b3:23:0a:43:fb:62:c7:05:1d:
                    49:ab:c0:80:73:6d:65:76:96:39:8d:b2:29:0b:32:
                    98:a8:ba:a7:07:6e:2d:3c:61:65:71:f6:e6:e0:8b:
                    75:a7:37:4c:79:86:59:7d:7d:8b:ee:78:37:94:6f:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:01:02:6A:3E:12:78:48:82:89:0B:DE:81:FA:AE:8D:A7:01:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:38:cb:6b:d1:60:74:bc:87:85:93:73:f2:dc:7c:17:1c:
         62:51:24:d3:39:8f:07:cb:c4:cb:02:a3:a8:10:0b:f5:b8:7b:
         a2:6b:90:2a:20:47:81:f3:79:27:1c:e3:08:d6:46:19:6c:6c:
         d6:16:6a:16:96:fe:d2:50:dd:80:59:f5:9f:c5:5f:44:31:df:
         33:f6:6c:20:83:db:6e:be:02:73:d2:09:8d:85:3e:df:e0:e6:
         5e:d4:1f:79:1e:35:80:04:b5:6a:cd:a2:50:34:c1:bf:67:93:
         ca:de:81:be:9f:b9:ed:73:bb:75:12:42:ef:6b:77:4e:4d:f2:
         39:51:dc:43:1e:96:e7:24:2f:6a:e7:ae:0a:ad:f8:82:76:4e:
         ac:1a:ea:d9:62:54:07:0e:26:29:e8:4c:0f:33:70:90:4f:db:
         5e:43:85:40:1f:53:c6:64:bd:ed:30:c0:68:93:97:74:10:7c:
         40:fb:ef:22:0e:3e:74:46:e1:d7:70:d5:f1:0f:22:a4:44:c9:
         e2:41:da:63:24:03:25:65:f8:d7:93:82:be:06:aa:64:57:4a:
         8d:b2:58:3c:fa:b1:c4:e3:dc:f4:06:c1:f0:2a:89:59:67:fa:
         c8:b3:6a:7d:5c:8b:97:35:fb:33:24:85:4a:30:f7:ed:42:44:
         ac:4d:48:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUv+VymlRgsovbS1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxMjIyMTEzMFoXDTI0MDYxMDIyMTEzMFowLzEtMCsGA1UEAxMk
MGYyMzE1NjItM2M4Yi00ZmY4LWE2M2YtMzU0YTMxMjI4N2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPo6wOrMcL+cWIvIpTlSRXoqPlNs0yX5Pv5H
NnfBaQcofyZeWSCgEa5SDFN/9ohn/mHlSZrzkVvnmxFyqGjiYXfSqrwNzCiL3F/H
/XXMw68Vpl6/b9pLR3frxV16c5GOlevt2Qmh4WjMi5+2Ee02G1CnPyNuwrzkZ6tr
NjPtp7nnhl7JOOuo954bHBRc6r5yYz1auFJgc1YDvwQq7egTa1uHF5yA8g3mjKMJ
YalUbHUUs1QjH/TLdv3tq7zEYuov7CwnsIa/vM6zIwpD+2LHBR1Jq8CAc21ldpY5
jbIpCzKYqLqnB24tPGFlcfbm4It1pzdMeYZZfX2L7ng3lG+F9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1QAQJqPhJ4SIKJC96B+q6NpwHOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzA0MWQ3ZjEtMDZhMS0z
NTg3LWJhMmMtZTA1YWQ5MmVlZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIS5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSLOMtr0WB0vIeFk3Py3HwXHGJRJNM5jwfLxMsCo6gQC/W4e6JrkCog
R4HzeScc4wjWRhlsbNYWahaW/tJQ3YBZ9Z/FX0Qx3zP2bCCD226+AnPSCY2FPt/g
5l7UH3keNYAEtWrNolA0wb9nk8regb6fue1zu3USQu9rd05N8jlR3EMeluckL2rn
rgqt+IJ2Tqwa6tliVAcOJinoTA8zcJBP215DhUAfU8Zkve0wwGiTl3QQfED77yIO
PnRG4ddw1fEPIqREyeJB2mMkAyVl+NeTgr4GqmRXSo2yWDz6scTj3PQGwfAqiVln
+sizan1ci5c1+zMkhUow9+1CRKxNSCk=
-----END CERTIFICATE-----
Generated at Sun May 12 01:32:24 2024 by rpki-client on console-fra.rpki-client.org