Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa
File:                     c0e51fd8-4af4-3173-9d20-0258717a076b.roa (raw, json)
Hash identifier:          /KZOAynqM3QaYeeXL0Ze/Jw9Xp82NILJJcUEAXgI49E=
Subject key identifier:   83:88:09:4F:A8:5A:72:97:EA:94:89:84:2F:F7:37:72:E9:94:EF:BF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453283F16871AA0660996DE070
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa
Signing time:             Wed 13 Mar 2024 20:02:20 +0000
ROA not before:           Wed 13 Mar 2024 20:02:20 +0000
ROA not after:            Tue 11 Jun 2024 20:02:20 +0000
asID:                     41264
IP address blocks:        104.132.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:83:f1:68:71:aa:06:60:99:6d:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:02:20 2024 GMT
            Not After : Jun 11 20:02:20 2024 GMT
        Subject: CN=a6e1f9c4-0e4f-4435-ad52-a348e31e61c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:fc:ec:23:cf:2c:91:15:c0:b6:3a:81:0d:
                    0b:f8:0a:ec:91:fa:57:70:c9:3a:30:9f:de:6a:d0:
                    0e:19:d2:c2:cb:8e:0c:c3:b0:3f:ea:56:47:53:77:
                    fe:b9:46:50:8f:70:a2:4c:e9:a2:35:34:d3:a4:07:
                    15:5c:50:02:1d:15:19:2b:35:28:31:be:ba:62:de:
                    2d:cd:85:69:39:dc:44:f9:02:2b:78:af:c9:af:da:
                    3a:84:d3:ca:44:90:bc:55:73:1f:01:e0:3a:a7:9a:
                    c6:9c:49:cc:45:ab:d4:3c:ee:de:2f:8e:ad:7b:5d:
                    b1:2b:10:97:a7:39:5a:d9:e1:16:57:f0:68:23:be:
                    06:86:00:6a:34:06:48:a6:1e:41:87:92:16:ef:34:
                    92:09:6a:77:4a:51:ae:9e:80:db:2e:d9:c4:fc:15:
                    27:0d:2f:5e:0f:fb:3e:43:ea:0d:62:b5:ed:96:62:
                    0a:f1:56:28:82:67:33:27:f6:26:a4:34:a2:6a:64:
                    57:f9:7f:4f:e5:f9:05:d0:60:88:61:b9:12:96:04:
                    a9:81:46:cf:84:2b:6e:54:97:6a:84:54:0f:a4:1e:
                    42:c4:a8:b4:06:46:eb:26:5e:23:3b:71:1a:9d:07:
                    67:84:fb:76:af:f9:da:bb:36:28:c9:41:1c:7a:d6:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:09:4F:A8:5A:72:97:EA:94:89:84:2F:F7:37:72:E9:94:EF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:e8:82:d7:ed:e0:1b:d3:53:ed:98:1b:e4:e8:b1:6d:f0:
         6f:09:6e:83:2e:89:02:77:fd:2d:94:33:66:f3:ed:f8:62:66:
         50:19:11:a4:62:53:cb:48:d0:48:4b:13:ee:7c:6f:ef:b6:ad:
         f8:15:76:23:f8:68:f3:8b:ff:14:63:ab:cc:cc:93:b4:3e:ab:
         dd:45:1f:67:60:e0:7b:ef:80:4d:e0:c4:31:40:da:fb:90:4a:
         77:d5:2a:50:52:8e:2a:9e:19:a3:d9:95:af:91:86:93:b7:e6:
         ab:e2:2a:1c:12:3a:e4:4d:32:36:ac:c0:5f:ad:17:36:7a:da:
         57:79:03:8d:64:9a:2a:60:5d:ba:d2:d2:22:d0:a0:6f:37:f8:
         1d:95:4e:bd:3c:ff:8d:f3:33:21:10:ac:90:bd:40:86:42:c9:
         34:49:7c:24:38:5d:3e:f7:c7:49:2a:cf:74:ef:b9:9a:2b:f2:
         e2:2f:0f:17:50:47:1c:db:c6:45:cb:a0:11:79:30:bb:bb:ea:
         95:11:99:56:66:3e:3f:62:2c:7c:96:d0:0d:66:1d:11:11:22:
         61:06:b3:25:c1:23:58:db:b7:2f:b9:04:b2:ed:30:39:2d:22:
         5b:78:e2:e9:7e:19:a0:a2:19:32:98:3f:86:0e:ca:86:cb:61:
         8f:05:19:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUyg/FocaoGYJlt4HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxMzIwMDIyMFoXDTI0MDYxMTIwMDIyMFowLzEtMCsGA1UEAxMk
YTZlMWY5YzQtMGU0Zi00NDM1LWFkNTItYTM0OGUzMWU2MWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol787CPPLJEVwLY6gQ0L+ArskfpXcMk6MJ/e
atAOGdLCy44Mw7A/6lZHU3f+uUZQj3CiTOmiNTTTpAcVXFACHRUZKzUoMb66Yt4t
zYVpOdxE+QIreK/Jr9o6hNPKRJC8VXMfAeA6p5rGnEnMRavUPO7eL46te12xKxCX
pzla2eEWV/BoI74GhgBqNAZIph5Bh5IW7zSSCWp3SlGunoDbLtnE/BUnDS9eD/s+
Q+oNYrXtlmIK8VYogmczJ/YmpDSiamRX+X9P5fkF0GCIYbkSlgSpgUbPhCtuVJdq
hFQPpB5CxKi0BkbrJl4jO3EanQdnhPt2r/nauzYoyUEcetZDjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOICU+oWnKX6pSJhC/3N3LplO+/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzBlNTFmZDgtNGFmNC0z
MTczLTlkMjAtMDI1ODcxN2EwNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9f6ILX7eAb01PtmBvk6LFt8G8JboMuiQJ3/S2UM2bz7fhiZlAZEaRi
U8tI0EhLE+58b++2rfgVdiP4aPOL/xRjq8zMk7Q+q91FH2dg4HvvgE3gxDFA2vuQ
SnfVKlBSjiqeGaPZla+RhpO35qviKhwSOuRNMjaswF+tFzZ62ld5A41kmipgXbrS
0iLQoG83+B2VTr08/43zMyEQrJC9QIZCyTRJfCQ4XT73x0kqz3TvuZor8uIvDxdQ
RxzbxkXLoBF5MLu76pURmVZmPj9iLHyW0A1mHRERImEGsyXBI1jbty+5BLLtMDkt
Ilt44ul+GaCiGTKYP4YOyobLYY8FGRc=
-----END CERTIFICATE-----
Generated at Sun May 12 10:23:44 2024 by rpki-client on console-ams.rpki-client.org