Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa
File:                     6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa (raw, json)
Hash identifier:          JB/VXSMy3QCeToVgVvTlDDTzQv4XR9iYOXziITrOTKo=
Subject key identifier:   7F:39:28:3F:8C:47:79:16:90:14:B0:87:80:EA:AB:C7:50:89:9A:68
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285846E800316FCFBE8775B78D7E80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa
Signing time:             Sat 17 Aug 2024 13:00:40 +0000
ROA not before:           Sat 17 Aug 2024 13:00:40 +0000
ROA not after:            Fri 15 Nov 2024 14:00:40 +0000
asID:                     0
IP address blocks:        104.167.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Oct 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e8:00:31:6f:cf:be:87:75:b7:8d:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Aug 17 13:00:40 2024 GMT
            Not After : Nov 15 14:00:40 2024 GMT
        Subject: CN=677ddbf5-3db7-4f60-863b-2e2cbd6ae4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:e9:84:38:d3:d2:53:9c:d2:f9:0a:1b:dd:
                    91:51:f9:5d:f5:8c:e7:23:5c:0d:15:1d:72:db:05:
                    c7:4b:8c:52:de:00:ad:b7:8b:f3:17:22:d7:1b:95:
                    08:e0:37:c5:9c:8b:32:a8:f4:f8:1d:4c:92:c2:a9:
                    9f:34:7f:1c:2e:43:21:54:a7:19:7f:d1:a5:75:5c:
                    fd:b4:a0:de:d4:4b:72:9a:9a:0e:e5:b0:c9:0e:5b:
                    91:1e:97:d2:f2:47:4d:0b:04:9f:45:36:cf:ba:10:
                    8d:d0:b7:95:20:e7:ad:d1:92:9d:89:2d:5e:9c:25:
                    9d:db:c3:54:08:8b:8e:8d:ea:77:55:41:de:f7:59:
                    76:42:68:39:53:84:ad:6d:59:48:ab:b2:d5:68:46:
                    d5:f1:c9:87:d3:26:50:02:7b:81:38:36:75:e3:08:
                    80:ae:66:3d:91:99:a8:3e:a9:55:e1:e7:b0:68:d8:
                    03:18:da:f5:9e:a4:20:3a:14:bd:f0:7e:b4:9b:15:
                    76:f7:99:3e:3c:32:72:8e:4a:0a:93:fe:01:44:f6:
                    35:9e:e6:de:9d:0d:75:b3:f6:d7:d7:83:bd:0a:21:
                    d1:c8:3b:e7:f1:ac:7e:c0:0f:bf:e4:09:9c:0e:cc:
                    61:76:f4:ef:55:70:02:8c:9a:e9:6d:98:52:3d:9f:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:39:28:3F:8C:47:79:16:90:14:B0:87:80:EA:AB:C7:50:89:9A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:63:58:44:98:0a:31:2f:79:cb:90:11:08:19:a5:7c:8f:c6:
         91:e0:24:db:78:63:ba:ad:79:77:4c:e8:7b:60:ff:bc:c8:e3:
         2e:c0:6c:0b:be:18:04:51:ec:a8:fe:5f:5f:03:97:8b:9f:24:
         9d:ee:b7:e8:1d:ed:4a:30:80:34:1b:91:21:e4:62:10:25:f4:
         bd:0e:35:6c:85:88:3c:e5:c0:42:9d:b8:df:2c:8f:ed:4d:74:
         03:fd:19:96:1a:85:60:25:de:34:75:b9:a0:a5:6f:59:7d:1f:
         bc:e9:66:a7:82:2e:de:d3:41:8f:df:15:26:11:4b:77:b1:bc:
         ce:f9:bc:c7:7a:34:50:85:3e:c4:22:5e:4e:4e:30:b2:55:93:
         a6:1a:eb:58:7b:db:79:b6:c0:c8:52:86:69:0f:76:31:7d:65:
         84:fb:81:74:bf:2b:22:53:84:7a:a9:b2:1e:68:09:b1:58:9e:
         66:ab:af:bc:d2:84:49:93:31:0b:b6:8f:71:3e:f8:36:fb:f5:
         64:a9:25:76:0d:06:27:8f:91:84:34:af:f4:f7:ac:cf:64:c1:
         07:db:14:dc:0f:8a:7f:de:5a:31:2a:9c:a3:44:f7:47:88:2b:
         c5:03:39:0f:f1:0b:ba:77:a4:5c:69:4f:06:24:f5:a5:42:2d:
         fe:76:f4:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEboADFvz76HdbeNfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI0MDgxNzEzMDA0MFoXDTI0MTExNTE0MDA0MFowLzEtMCsGA1UEAxMk
Njc3ZGRiZjUtM2RiNy00ZjYwLTg2M2ItMmUyY2JkNmFlNGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlbphDjT0lOc0vkKG92RUfld9YznI1wNFR1y
2wXHS4xS3gCtt4vzFyLXG5UI4DfFnIsyqPT4HUySwqmfNH8cLkMhVKcZf9GldVz9
tKDe1EtympoO5bDJDluRHpfS8kdNCwSfRTbPuhCN0LeVIOet0ZKdiS1enCWd28NU
CIuOjep3VUHe91l2Qmg5U4StbVlIq7LVaEbV8cmH0yZQAnuBODZ14wiArmY9kZmo
PqlV4eewaNgDGNr1nqQgOhS98H60mxV295k+PDJyjkoKk/4BRPY1nubenQ11s/bX
14O9CiHRyDvn8ax+wA+/5AmcDsxhdvTvVXACjJrpbZhSPZ+HMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH85KD+MR3kWkBSwh4Dqq8dQiZpoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvNjk2N2QzZmMtZmQyYS0z
NWY5LWIyZDktZGYyZDBjNWM2NmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhjWESYCjEvecuQEQgZpXyPxpHgJNt4Y7qteXdM6Htg/7zI4y7AbAu+
GARR7Kj+X18Dl4ufJJ3ut+gd7UowgDQbkSHkYhAl9L0ONWyFiDzlwEKduN8sj+1N
dAP9GZYahWAl3jR1uaClb1l9H7zpZqeCLt7TQY/fFSYRS3exvM75vMd6NFCFPsQi
Xk5OMLJVk6Ya61h723m2wMhShmkPdjF9ZYT7gXS/KyJThHqpsh5oCbFYnmarr7zS
hEmTMQu2j3E++Db79WSpJXYNBiePkYQ0r/T3rM9kwQfbFNwPin/eWjEqnKNE90eI
K8UDOQ/xC7p3pFxpTwYk9aVCLf529AA=
-----END CERTIFICATE-----
Generated at Fri Oct 25 17:25:17 2024 by rpki-client on console-ams.rpki-client.org