Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa
File:                     a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa (raw, json)
Hash identifier:          9Fq984x11fACgMATCkLady3JXsP8gyfWkgzDI4dPvuw=
Subject key identifier:   DB:B1:4B:C2:99:F5:F4:5F:E9:6D:26:88:AC:45:9E:41:6E:50:94:0A
Certificate issuer:       /CN=4d929512-7541-4207-be46-8af4cc4a4800
Certificate serial:       010D0C9F43285846E1C8B13A325E0456220B9E14
Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa
Signing time:             Thu 15 Aug 2024 07:34:16 +0000
ROA not before:           Thu 15 Aug 2024 07:34:16 +0000
ROA not after:            Wed 13 Nov 2024 08:34:16 +0000
asID:                     26658
IP address blocks:        104.232.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e1:c8:b1:3a:32:5e:04:56:22:0b:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800
        Validity
            Not Before: Aug 15 07:34:16 2024 GMT
            Not After : Nov 13 08:34:16 2024 GMT
        Subject: CN=cd4db588-0517-40a9-90ab-1a8e9f7a9d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:a5:03:7d:a0:9a:c5:8f:09:d8:5a:5c:d9:
                    62:a2:84:e9:69:e5:8c:d6:4e:5d:a6:80:59:c8:46:
                    68:56:93:8d:19:d1:49:a5:02:1d:f2:2d:19:9b:82:
                    15:b7:d7:64:72:4a:07:f3:18:a9:ca:1b:b0:dc:13:
                    d6:70:28:ad:10:0e:5b:30:43:2f:08:15:1e:aa:9d:
                    4c:88:ac:c4:51:97:f2:81:a6:23:1b:58:36:ef:81:
                    be:b0:26:e7:c9:21:6b:45:08:3f:21:08:64:85:54:
                    bd:d0:b2:0e:12:47:d8:30:f5:d0:47:f9:8b:f3:ac:
                    a8:4a:48:f9:d3:85:d3:6e:b3:31:ed:3c:7f:61:42:
                    38:c4:e8:56:2b:4c:49:7a:4a:66:ab:d7:cd:4b:96:
                    30:d5:8d:14:4e:9b:cd:58:9d:e5:26:df:31:1f:75:
                    60:a7:da:9f:d6:98:2a:8d:10:62:3f:e9:58:64:48:
                    57:4f:8a:23:39:8d:bc:2f:04:76:e9:ae:2a:15:52:
                    48:6a:aa:81:40:9b:5f:b0:d4:96:7f:be:a3:71:31:
                    fa:38:53:a3:bf:1b:2c:9f:95:2f:54:1c:bd:98:be:
                    ac:bc:63:e6:bd:b5:db:2e:b3:aa:16:93:c0:12:5f:
                    fa:10:d0:7e:5f:e4:60:dc:29:c3:04:58:65:6e:cc:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B1:4B:C2:99:F5:F4:5F:E9:6D:26:88:AC:45:9E:41:6E:50:94:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/a1a2060a-6881-3ef5-aa7c-1c39f839b05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl

            X509v3 Authority Key Identifier:
                keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:02:a2:83:4a:a7:74:c6:f2:00:47:1a:59:a3:23:9d:d3:c9:
         56:6e:be:1f:a2:8d:95:a4:70:b1:23:7d:e6:de:33:e7:87:38:
         12:b8:71:94:5f:24:7f:a2:dc:0a:be:e2:03:c8:e9:bc:a1:fe:
         ea:89:ad:c4:15:eb:5a:ae:01:41:02:02:23:8f:8b:f6:99:1a:
         16:0e:98:cf:6a:d7:3d:27:1d:34:2e:28:18:5c:c8:ff:06:be:
         b3:a7:fb:92:a1:b6:b6:a7:67:67:17:d0:58:3a:84:3c:65:25:
         46:7d:ef:6b:2c:5a:d8:21:8f:ea:4d:6b:51:08:17:c0:f1:78:
         98:78:a2:d9:4a:25:56:e5:3c:02:28:ca:15:e3:13:28:e9:c0:
         b5:78:29:c0:6e:f3:64:75:9e:fe:49:4e:1a:f6:d1:f2:51:6c:
         c9:c9:cf:95:5a:fa:cf:44:2a:f1:bd:c2:ff:a2:c9:22:bb:87:
         1e:b6:a3:66:4f:12:5d:9e:b5:6d:0c:9b:23:2e:0f:e6:ac:fc:
         3b:94:3c:95:cd:a4:1a:79:a2:c5:62:ce:56:a7:10:d3:4e:ce:
         8d:6d:fd:fa:0c:4c:32:0b:7a:63:06:5f:b6:18:5a:1e:b9:46:
         5f:41:e0:79:65:23:31:e7:ff:fe:7e:bf:37:68:dd:ac:d1:b0:
         9f:f3:b0:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbhyLE6Ml4EViILnhQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ5Mjk1MTItNzU0MS00MjA3LWJlNDYtOGFmNGNjNGE0
ODAwMB4XDTI0MDgxNTA3MzQxNloXDTI0MTExMzA4MzQxNlowLzEtMCsGA1UEAxMk
Y2Q0ZGI1ODgtMDUxNy00MGE5LTkwYWItMWE4ZTlmN2E5ZDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJKlA32gmsWPCdhaXNliooTpaeWM1k5dpoBZ
yEZoVpONGdFJpQId8i0Zm4IVt9dkckoH8xipyhuw3BPWcCitEA5bMEMvCBUeqp1M
iKzEUZfygaYjG1g274G+sCbnySFrRQg/IQhkhVS90LIOEkfYMPXQR/mL86yoSkj5
04XTbrMx7Tx/YUI4xOhWK0xJekpmq9fNS5Yw1Y0UTpvNWJ3lJt8xH3Vgp9qf1pgq
jRBiP+lYZEhXT4ojOY28LwR26a4qFVJIaqqBQJtfsNSWf76jcTH6OFOjvxssn5Uv
VBy9mL6svGPmvbXbLrOqFpPAEl/6ENB+X+Rg3CnDBFhlbsydJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuxS8KZ9fRf6W0miKxFnkFuUJQKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZDky
OTUxMi03NTQxLTQyMDctYmU0Ni04YWY0Y2M0YTQ4MDAvYTFhMjA2MGEtNjg4MS0z
ZWY1LWFhN2MtMWMzOWY4MzliMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGQ5Mjk1MTItNzU0MS00MjA3LWJl
NDYtOGFmNGNjNGE0ODAwLzRkOTI5NTEyLTc1NDEtNDIwNy1iZTQ2LThhZjRjYzRh
NDgwMC5jcmwwHwYDVR0jBBgwFoAUUHbGsA5Pv93rRfzEAudPVstdNTgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZDkyOTUxMi03NTQxLTQyMDctYmU0Ni04YWY0
Y2M0YTQ4MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEECooNKp3TG8gBHGlmjI53TyVZuvh+ijZWkcLEjfebeM+eHOBK4cZRf
JH+i3Aq+4gPI6byh/uqJrcQV61quAUECAiOPi/aZGhYOmM9q1z0nHTQuKBhcyP8G
vrOn+5KhtranZ2cX0Fg6hDxlJUZ972ssWtghj+pNa1EIF8DxeJh4otlKJVblPAIo
yhXjEyjpwLV4KcBu82R1nv5JThr20fJRbMnJz5Va+s9EKvG9wv+iySK7hx62o2ZP
El2etW0MmyMuD+as/DuUPJXNpBp5osVizlanENNOzo1t/foMTDILemMGX7YYWh65
Rl9B4HllIzHn//5+vzdo3azRsJ/zsMg=
-----END CERTIFICATE-----
Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org