Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa
File:                     b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json)
Hash identifier:          fZS8OScHWSjZDMgPfWazzjtmrQQ97HzcI3X78/bsXLQ=
Subject key identifier:   C2:83:89:7A:E0:05:66:8A:25:D9:2B:6D:7B:46:5B:FE:50:A2:A8:C4
Certificate issuer:       /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322
Certificate serial:       010D0C9F4328584741F248451B838D57508638C0
Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa
Signing time:             Wed 18 Sep 2024 18:15:40 +0000
ROA not before:           Wed 18 Sep 2024 18:15:40 +0000
ROA not after:            Tue 17 Dec 2024 19:15:40 +0000
asID:                     16676
IP address blocks:        104.243.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:41:f2:48:45:1b:83:8d:57:50:86:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322
        Validity
            Not Before: Sep 18 18:15:40 2024 GMT
            Not After : Dec 17 19:15:40 2024 GMT
        Subject: CN=67f9949b-b95e-4d2d-a07f-d02cfb2dee14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:45:0c:4f:86:09:ae:a9:61:2a:ad:68:60:
                    d4:13:bf:87:33:a5:d6:b0:1c:51:81:4f:5b:4a:b8:
                    9e:82:ca:f7:51:07:75:03:b6:19:da:a9:03:d5:c2:
                    f7:70:e9:13:e6:93:d1:de:97:09:fb:10:f2:9c:1f:
                    20:26:81:de:92:81:fa:35:58:a3:4f:9f:24:1a:d6:
                    26:ac:21:ad:31:a5:28:05:5e:4e:68:d1:e4:65:9e:
                    34:dd:f7:6d:1b:45:98:cf:36:50:5c:f8:99:1a:0e:
                    a3:dd:ee:fb:ed:e4:1f:b1:cc:34:6e:df:7d:bc:02:
                    69:4e:b2:c1:60:31:20:51:7d:49:98:4a:82:c6:f1:
                    82:5a:ae:65:46:9b:42:19:6f:15:f6:c2:80:ee:ac:
                    45:09:d7:f7:b3:c0:0b:b8:63:1b:b6:eb:bb:1e:71:
                    a2:ac:f8:85:a7:d4:c8:74:a0:3f:bb:d4:11:a8:34:
                    86:1e:d3:d6:91:19:91:55:d8:ea:ae:47:72:87:a0:
                    f3:ff:97:79:89:50:5c:f6:f0:a7:05:d2:a5:49:35:
                    4a:6f:8c:65:0b:e6:bd:a2:1e:2c:2d:3d:20:9c:77:
                    ab:3b:b4:8b:d3:1e:8b:b9:0b:55:6b:55:5d:45:75:
                    21:96:68:b5:b7:6f:7d:a8:b3:ec:40:ef:fa:2d:c2:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:83:89:7A:E0:05:66:8A:25:D9:2B:6D:7B:46:5B:FE:50:A2:A8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl

            X509v3 Authority Key Identifier:
                keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:c0:5e:34:0e:a5:d2:79:40:c7:69:46:5f:8f:7a:b7:13:
         c0:a1:9c:ec:95:92:55:64:64:51:6b:05:7e:4b:01:3a:3b:90:
         0e:f9:22:cd:71:eb:d7:67:b7:38:5f:6a:a0:3e:1c:c2:33:f8:
         cc:19:f9:7e:cb:d3:95:e6:25:d3:0e:95:c1:9f:c4:72:bd:9d:
         61:d3:38:79:83:4f:ec:ba:c3:b8:68:f6:4a:69:37:3a:79:7d:
         0a:ad:7d:bb:02:25:9d:0e:64:46:7c:09:3f:51:cf:cc:82:7d:
         cf:e0:fa:d7:44:cc:1f:ac:0e:bc:2f:61:70:da:66:7a:b5:6f:
         58:e3:1e:db:8a:3c:7f:12:b6:83:73:73:98:1a:5a:1d:ed:76:
         22:ae:98:23:d1:e1:ef:10:31:76:cd:b9:15:7b:bd:9c:2c:85:
         f2:2b:96:e4:b5:0a:2b:d2:2b:9c:36:ee:ae:43:ff:11:fd:d5:
         3f:43:b1:fe:c5:5e:8f:58:aa:cc:98:82:f1:78:2e:b8:78:55:
         3c:ac:42:cc:ae:b1:46:e5:12:7e:3a:51:06:f6:9e:28:b5:12:
         31:3c:e8:8b:40:6c:8c:6f:1e:1a:ff:9b:54:f9:fe:97:2a:c4:
         a7:63:5c:84:f6:ed:01:a5:c9:aa:c4:f2:eb:11:b5:d2:fa:ed:
         c7:58:e8:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdB8khFG4ONV1CGOMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew
MzIyMB4XDTI0MDkxODE4MTU0MFoXDTI0MTIxNzE5MTU0MFowLzEtMCsGA1UEAxMk
NjdmOTk0OWItYjk1ZS00ZDJkLWEwN2YtZDAyY2ZiMmRlZTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNhFDE+GCa6pYSqtaGDUE7+HM6XWsBxRgU9b
Sriegsr3UQd1A7YZ2qkD1cL3cOkT5pPR3pcJ+xDynB8gJoHekoH6NVijT58kGtYm
rCGtMaUoBV5OaNHkZZ403fdtG0WYzzZQXPiZGg6j3e777eQfscw0bt99vAJpTrLB
YDEgUX1JmEqCxvGCWq5lRptCGW8V9sKA7qxFCdf3s8ALuGMbtuu7HnGirPiFp9TI
dKA/u9QRqDSGHtPWkRmRVdjqrkdyh6Dz/5d5iVBc9vCnBdKlSTVKb4xlC+a9oh4s
LT0gnHerO7SL0x6LuQtVa1VdRXUhlmi1t299qLPsQO/6LcLI3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKDiXrgBWaKJdkrbXtGW/5QoqjEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi
NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z
Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj
ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh
MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj
OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbrwF40DqXSeUDHaUZfj3q3E8ChnOyVklVkZFFrBX5LATo7kA75Is1x
69dntzhfaqA+HMIz+MwZ+X7L05XmJdMOlcGfxHK9nWHTOHmDT+y6w7ho9kppNzp5
fQqtfbsCJZ0OZEZ8CT9Rz8yCfc/g+tdEzB+sDrwvYXDaZnq1b1jjHtuKPH8StoNz
c5gaWh3tdiKumCPR4e8QMXbNuRV7vZwshfIrluS1CivSK5w27q5D/xH91T9Dsf7F
Xo9YqsyYgvF4Lrh4VTysQsyusUblEn46UQb2nii1EjE86ItAbIxvHhr/m1T5/pcq
xKdjXIT27QGlyarE8usRtdL67cdY6Jw=
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org