Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa
File:                     30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa (raw, json)
Hash identifier:          AfB6GczMfiyq7CSAUsUty2It26O6tbeu/7xb+A9No7I=
Subject key identifier:   3D:6D:B6:9B:A4:63:95:25:05:3E:BC:C0:7C:C3:6D:C3:C2:98:60:15
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F43285844D5AFD2D3DA5E263A9CA74000
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa
Signing time:             Fri 09 Feb 2024 14:00:30 +0000
ROA not before:           Fri 09 Feb 2024 14:00:30 +0000
ROA not after:            Thu 09 May 2024 13:00:30 +0000
asID:                     400378
IP address blocks:        104.232.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d5:af:d2:d3:da:5e:26:3a:9c:a7:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Feb  9 14:00:30 2024 GMT
            Not After : May  9 13:00:30 2024 GMT
        Subject: CN=53bc65f5-803f-496a-b063-5487ad13697f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:33:d3:2f:70:91:73:3e:31:a1:cd:3d:dd:
                    5f:c2:aa:43:8f:df:bb:5d:25:9f:cd:cd:bb:a0:8e:
                    6e:0c:38:1f:09:08:be:58:79:f6:4e:6d:ae:42:ec:
                    fe:d8:2a:13:c8:cc:eb:5e:e6:73:c7:35:09:47:60:
                    b2:d9:6e:ad:61:e5:d6:9c:3a:5b:01:b3:bf:ca:9e:
                    c9:d8:8e:dc:37:0c:60:0e:02:fa:01:cb:db:d5:6c:
                    66:21:cd:b6:98:47:ea:62:2a:98:e5:26:19:e6:c8:
                    24:1c:d7:f2:d3:f8:a5:34:6e:14:64:51:18:65:29:
                    65:69:d3:63:cd:75:d5:f4:a2:12:e6:f2:0e:10:e4:
                    4f:6b:6a:23:a5:36:56:34:f6:cb:f2:b9:48:08:47:
                    11:c1:8e:39:ed:72:86:0c:3c:85:ae:01:37:d9:26:
                    2e:5c:bc:78:8f:f5:17:fa:e1:17:7c:a0:83:62:41:
                    e7:29:fb:0f:c3:67:7d:05:a5:01:13:37:3c:4c:cd:
                    48:3e:e8:95:59:e3:32:a1:27:f4:b8:18:8f:9c:1b:
                    24:84:59:67:a8:1f:95:5e:33:63:c3:da:10:eb:1b:
                    37:03:e8:89:74:7e:74:f6:a9:06:fe:d1:db:5f:2e:
                    68:0f:e4:49:a1:d9:8f:b2:cb:e8:ac:96:06:d6:df:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6D:B6:9B:A4:63:95:25:05:3E:BC:C0:7C:C3:6D:C3:C2:98:60:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/30772796-9f4b-375b-bac6-1a9ba34a0dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:15:0b:d1:1c:59:cc:d0:53:16:bd:29:95:87:d7:73:ff:
         0e:0d:7c:6b:ef:3d:fd:8f:b2:82:b3:f2:5e:dd:77:e4:11:70:
         24:d2:28:cd:54:a6:07:a2:5a:f3:d4:5e:19:6b:bd:4e:d1:8e:
         56:81:b6:72:ee:7d:af:30:42:3f:de:b9:51:f1:6a:f8:09:0e:
         0f:d2:60:48:74:63:12:87:53:c1:f3:2f:be:cb:46:43:09:b4:
         c6:a8:14:dd:12:5d:d0:f6:f1:59:8f:9f:33:80:d0:9d:14:24:
         04:d4:71:eb:14:cc:47:75:2a:f7:27:aa:3b:f7:84:44:9d:92:
         59:cf:fc:4d:b2:14:16:4d:6f:19:09:0e:f5:4a:67:cf:ad:ea:
         8a:f7:01:5f:02:f5:6a:04:9c:53:4b:cf:6f:82:7b:29:53:99:
         53:42:ef:2a:f1:37:9f:f0:22:87:81:a6:f8:75:53:2e:31:3c:
         cf:88:f0:62:2c:ea:96:6e:e2:ec:3c:6e:c9:a3:fb:3c:aa:f9:
         dd:93:6b:aa:16:cb:34:a2:68:de:a7:11:7e:70:69:9f:6c:66:
         ba:85:da:f8:3f:79:e9:d9:e2:ec:89:56:c3:48:55:1f:0d:05:
         43:3a:10:ff:c5:a4:fb:fc:4d:81:49:3d:c5:3a:7f:b0:0a:f4:
         07:66:58:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETVr9LT2l4mOpynQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1
OTM5MB4XDTI0MDIwOTE0MDAzMFoXDTI0MDUwOTEzMDAzMFowLzEtMCsGA1UEAxMk
NTNiYzY1ZjUtODAzZi00OTZhLWIwNjMtNTQ4N2FkMTM2OTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3wz0y9wkXM+MaHNPd1fwqpDj9+7XSWfzc27
oI5uDDgfCQi+WHn2Tm2uQuz+2CoTyMzrXuZzxzUJR2Cy2W6tYeXWnDpbAbO/yp7J
2I7cNwxgDgL6Acvb1WxmIc22mEfqYiqY5SYZ5sgkHNfy0/ilNG4UZFEYZSlladNj
zXXV9KIS5vIOEORPa2ojpTZWNPbL8rlICEcRwY457XKGDDyFrgE32SYuXLx4j/UX
+uEXfKCDYkHnKfsPw2d9BaUBEzc8TM1IPuiVWeMyoSf0uBiPnBskhFlnqB+VXjNj
w9oQ6xs3A+iJdH509qkG/tHbXy5oD+RJodmPssvorJYG1t9eiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1ttpukY5UlBT68wHzDbcPCmGAVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIy
NjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvMzA3NzI3OTYtOWY0Yi0z
NzViLWJhYzYtMWE5YmEzNGEwZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzliMjYyNmUtYTQwZC00NmZjLWIz
YzMtZmY1YTEyMTk1OTM5LzM5YjI2MjZlLWE0MGQtNDZmYy1iM2MzLWZmNWExMjE5
NTkzOS5jcmwwHwYDVR0jBBgwFoAUFlk2LKpBOBxjTu4FUkfAgNzA2YAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVh
MTIxOTU5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL8PFQvRHFnM0FMWvSmVh9dz/w4NfGvvPf2PsoKz8l7dd+QRcCTSKM1U
pgeiWvPUXhlrvU7RjlaBtnLufa8wQj/euVHxavgJDg/SYEh0YxKHU8HzL77LRkMJ
tMaoFN0SXdD28VmPnzOA0J0UJATUcesUzEd1Kvcnqjv3hESdklnP/E2yFBZNbxkJ
DvVKZ8+t6or3AV8C9WoEnFNLz2+CeylTmVNC7yrxN5/wIoeBpvh1Uy4xPM+I8GIs
6pZu4uw8bsmj+zyq+d2Ta6oWyzSiaN6nEX5waZ9sZrqF2vg/eenZ4uyJVsNIVR8N
BUM6EP/FpPv8TYFJPcU6f7AK9AdmWCw=
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:42:28 2024 by rpki-client on console-ams.rpki-client.org