Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
File:                     a980c0a9-4716-35b0-a698-3c9141bde590.roa (raw, json)
Hash identifier:          dQuY7kWSgtJdeUVsihcDdWLf5XRz+Pcy3h5JVW6s35M=
Subject key identifier:   18:65:B9:FD:0B:59:10:17:B1:C9:B7:7C:A9:E8:1F:94:74:76:16:59
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540B61914CAED13B86C9D99C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
Signing time:             Mon 18 Mar 2024 22:04:43 +0000
ROA not before:           Mon 18 Mar 2024 22:04:43 +0000
ROA not after:            Sun 16 Jun 2024 22:04:43 +0000
asID:                     395973
IP address blocks:        104.134.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:19:14:ca:ed:13:b8:6c:9d:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:04:43 2024 GMT
            Not After : Jun 16 22:04:43 2024 GMT
        Subject: CN=08f92650-b47b-4522-b953-998fb2ab99c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:04:4e:8b:db:91:04:30:66:66:a0:d0:da:
                    dc:5a:19:9c:7e:9c:9e:47:b1:02:41:6f:59:1c:b6:
                    4f:16:f6:64:b0:e6:e2:4f:ad:ef:a4:37:e3:23:c9:
                    36:3d:23:99:f0:67:38:12:0e:2c:3d:47:7a:cf:1c:
                    2f:fd:ad:5e:3b:55:10:10:27:e4:3e:b2:56:8a:39:
                    0d:7a:01:a8:06:53:79:99:1c:b9:7b:d3:c6:15:8d:
                    10:3f:25:ad:97:e0:03:ae:37:00:a1:d8:ae:fe:a9:
                    07:fe:57:cf:0b:0f:2c:14:f4:16:b3:73:32:7d:57:
                    01:1d:9e:75:6a:06:89:7c:31:60:bb:09:da:56:92:
                    80:4b:6b:95:06:d1:6a:2b:8d:b5:75:f5:c2:80:20:
                    06:c6:07:dc:b8:5b:77:97:66:96:56:1d:b4:c0:79:
                    1b:1c:5d:e8:2f:ee:d0:a5:dc:8b:e7:3a:a5:60:55:
                    ad:b0:ae:a6:6e:48:56:21:7e:9a:2e:8f:ea:14:e0:
                    f2:7c:8e:2f:7d:14:50:e5:5d:6e:66:59:93:17:93:
                    37:b8:f7:17:f1:c9:2e:ff:e4:ae:41:4d:2e:1e:13:
                    22:4e:ed:a9:3e:c2:26:71:f3:b5:e6:ff:a2:a7:c7:
                    22:66:8c:3a:75:71:43:85:80:dd:0e:9d:0f:f0:c3:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:B9:FD:0B:59:10:17:B1:C9:B7:7C:A9:E8:1F:94:74:76:16:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:03:b1:71:d8:ed:a3:19:74:0e:09:28:e2:40:1f:2d:84:48:
         f3:b8:c4:15:24:7b:bd:09:86:ba:45:57:be:93:78:93:12:5a:
         d9:63:34:34:34:d1:95:ee:f3:ef:6b:94:04:75:52:dd:12:c4:
         ce:bd:f0:5d:b2:85:88:ce:f5:04:16:63:8c:21:1b:23:9c:34:
         a6:d8:90:ef:b6:2d:b9:37:a9:ec:72:2a:99:e4:61:30:56:2b:
         7c:3c:be:a8:92:92:9a:fd:7a:fe:43:93:ab:e6:59:6e:6a:31:
         4f:12:1b:78:21:d5:98:9a:ed:53:95:a1:ad:52:41:8d:57:da:
         62:9a:4f:8b:bd:81:bc:ad:61:78:98:35:7f:ff:1d:31:e1:31:
         e8:61:8d:e9:d6:6d:f5:da:a1:bd:16:7f:87:49:05:0b:d5:86:
         f6:cc:10:9d:7a:cd:86:cf:d0:e4:d5:ea:e0:cc:4a:f3:10:47:
         25:07:d6:9e:cd:65:06:7d:47:02:f2:2a:97:63:eb:c5:01:93:
         64:b1:01:47:42:c7:78:0b:ac:ea:b8:1b:a4:56:00:01:f2:3b:
         b5:a3:14:39:87:49:30:f6:ec:d2:d4:23:61:2a:65:dc:26:ea:
         69:d4:0e:50:b2:9f:a9:dd:24:a5:7a:ff:2d:18:5a:e6:d4:1d:
         19:77:31:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAthkUyu0TuGydmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxODIyMDQ0M1oXDTI0MDYxNjIyMDQ0M1owLzEtMCsGA1UEAxMk
MDhmOTI2NTAtYjQ3Yi00NTIyLWI5NTMtOTk4ZmIyYWI5OWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljcETovbkQQwZmag0NrcWhmcfpyeR7ECQW9Z
HLZPFvZksObiT63vpDfjI8k2PSOZ8Gc4Eg4sPUd6zxwv/a1eO1UQECfkPrJWijkN
egGoBlN5mRy5e9PGFY0QPyWtl+ADrjcAodiu/qkH/lfPCw8sFPQWs3MyfVcBHZ51
agaJfDFguwnaVpKAS2uVBtFqK421dfXCgCAGxgfcuFt3l2aWVh20wHkbHF3oL+7Q
pdyL5zqlYFWtsK6mbkhWIX6aLo/qFODyfI4vfRRQ5V1uZlmTF5M3uPcX8cku/+Su
QU0uHhMiTu2pPsImcfO15v+ip8ciZow6dXFDhYDdDp0P8MNz1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhluf0LWRAXscm3fKnoH5R0dhZZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTk4MGMwYTktNDcxNi0z
NWIwLWE2OTgtM2M5MTQxYmRlNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEDsXHY7aMZdA4JKOJAHy2ESPO4xBUke70JhrpFV76TeJMSWtljNDQ0
0ZXu8+9rlAR1Ut0SxM698F2yhYjO9QQWY4whGyOcNKbYkO+2Lbk3qexyKpnkYTBW
K3w8vqiSkpr9ev5Dk6vmWW5qMU8SG3gh1Zia7VOVoa1SQY1X2mKaT4u9gbytYXiY
NX//HTHhMehhjenWbfXaob0Wf4dJBQvVhvbMEJ16zYbP0OTV6uDMSvMQRyUH1p7N
ZQZ9RwLyKpdj68UBk2SxAUdCx3gLrOq4G6RWAAHyO7WjFDmHSTD27NLUI2EqZdwm
6mnUDlCyn6ndJKV6/y0YWubUHRl3MeA=
-----END CERTIFICATE-----
Generated at Wed May 8 15:28:25 2024 by rpki-client on console-fra.rpki-client.org