Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/593c4057-775f-3b08-8cd6-6b9a89109216.roa
File:                     593c4057-775f-3b08-8cd6-6b9a89109216.roa (raw, json)
Hash identifier:          dAyglmbfMjU11CM3xMdGvR5xCe2CoHY9yccdBXrr0tc=
Subject key identifier:   05:CB:02:67:22:E2:0E:14:DA:32:E5:30:76:C3:41:9A:5D:EC:59:10
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858459E935E8565467991F31615C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/593c4057-775f-3b08-8cd6-6b9a89109216.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     834
IP address blocks:        104.129.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5e:85:65:46:79:91:f3:16:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=10de711c-1b4e-4fa8-9c47-015a9982133b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:82:bd:33:71:ed:29:2a:ec:83:3f:52:3b:
                    45:70:d1:fc:f8:71:c9:dc:ac:a3:30:37:63:f3:ca:
                    2d:f6:29:19:02:de:77:76:ea:f2:4b:62:aa:66:5f:
                    6d:99:fb:15:06:f8:80:cf:3f:23:70:35:e6:7a:23:
                    f9:90:4a:6c:ff:85:7c:d5:e6:c1:e4:73:67:57:26:
                    0e:2a:4f:da:2e:09:bc:5e:db:61:71:d8:83:48:55:
                    ac:da:a0:97:9a:d0:ba:b2:ba:c3:87:31:a6:11:25:
                    1b:25:f9:da:ac:c8:d8:a3:95:cc:85:55:a8:05:11:
                    02:1b:d0:b0:f0:ed:f5:49:26:3c:14:c2:cf:a3:99:
                    39:cf:38:ee:85:fe:92:88:e9:09:32:77:a6:c6:46:
                    fb:39:2a:3e:cf:bc:93:1a:51:b6:6a:5b:ce:7e:60:
                    c3:4c:0f:f6:39:4b:a4:44:70:be:a2:c0:60:9f:8e:
                    90:98:5f:6f:f2:72:a7:b8:a9:f1:1d:7e:90:99:3a:
                    d3:7e:d2:7f:11:af:03:e8:e0:68:fd:18:80:ec:0e:
                    8e:bf:82:79:b8:b5:21:69:7a:45:dc:a6:4e:c4:5c:
                    6b:a7:c9:53:f3:0e:b0:2f:4b:3e:df:c9:f0:25:ad:
                    31:47:63:16:11:12:e1:33:60:fa:90:43:86:8d:26:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:02:67:22:E2:0E:14:DA:32:E5:30:76:C3:41:9A:5D:EC:59:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/593c4057-775f-3b08-8cd6-6b9a89109216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:da:cb:64:7f:2c:fc:06:46:ed:89:ce:15:36:18:11:90:
         0a:1b:32:f3:6e:f6:29:c4:4a:76:4a:9b:76:b2:1d:bc:68:00:
         fc:1f:83:10:de:5c:43:2c:49:49:6c:64:36:b4:22:f2:18:fa:
         4a:17:ba:75:0b:8e:47:54:26:12:a5:2f:de:00:f9:81:69:bd:
         61:fb:1a:de:f6:aa:52:c7:67:b2:4f:16:39:b5:4f:9c:97:f4:
         f2:36:d6:27:2c:45:f0:dd:1e:f4:3b:86:9c:21:28:b9:4f:26:
         8a:ef:5b:17:8f:23:dc:e5:d6:d1:bb:6f:68:e8:b0:15:fe:14:
         e3:3a:1a:e0:50:b6:14:fc:46:46:d0:0a:c2:07:86:25:48:94:
         7c:43:01:19:f2:29:fb:40:82:90:87:22:b0:50:4e:a9:11:6c:
         12:a5:fd:48:d8:d9:e7:b5:30:09:b2:a4:98:4a:ba:ba:a0:e7:
         65:42:95:b1:0f:3e:c2:41:eb:fa:eb:6c:3b:8c:d7:5c:dc:7c:
         05:52:e0:1f:43:79:ee:c9:71:ce:54:26:05:54:16:32:04:8d:
         ba:19:74:7b:98:33:33:39:95:f4:73:05:6e:8b:24:2f:6a:01:
         4b:ef:25:54:da:d9:df:54:16:08:27:db:05:32:cf:c2:48:d5:
         e9:35:fe:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek16FZUZ5kfMWFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
MTBkZTcxMWMtMWI0ZS00ZmE4LTljNDctMDE1YTk5ODIxMzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPeCvTNx7Skq7IM/UjtFcNH8+HHJ3KyjMDdj
88ot9ikZAt53duryS2KqZl9tmfsVBviAzz8jcDXmeiP5kEps/4V81ebB5HNnVyYO
Kk/aLgm8XtthcdiDSFWs2qCXmtC6srrDhzGmESUbJfnarMjYo5XMhVWoBRECG9Cw
8O31SSY8FMLPo5k5zzjuhf6SiOkJMnemxkb7OSo+z7yTGlG2alvOfmDDTA/2OUuk
RHC+osBgn46QmF9v8nKnuKnxHX6QmTrTftJ/Ea8D6OBo/RiA7A6Ov4J5uLUhaXpF
3KZOxFxrp8lT8w6wL0s+38nwJa0xR2MWERLhM2D6kEOGjSYdXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXLAmci4g4U2jLlMHbDQZpd7FkQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTkzYzQwNTctNzc1Zi0z
YjA4LThjZDYtNmI5YTg5MTA5MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIH1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2P2stkfyz8Bkbtic4VNhgRkAobMvNu9inESnZKm3ayHbxoAPwfgxDe
XEMsSUlsZDa0IvIY+koXunULjkdUJhKlL94A+YFpvWH7Gt72qlLHZ7JPFjm1T5yX
9PI21icsRfDdHvQ7hpwhKLlPJorvWxePI9zl1tG7b2josBX+FOM6GuBQthT8RkbQ
CsIHhiVIlHxDARnyKftAgpCHIrBQTqkRbBKl/UjY2ee1MAmypJhKurqg52VClbEP
PsJB6/rrbDuM11zcfAVS4B9Dee7Jcc5UJgVUFjIEjboZdHuYMzM5lfRzBW6LJC9q
AUvvJVTa2d9UFggn2wUyz8JI1ek1/mY=
-----END CERTIFICATE-----
Generated at Thu May 2 04:27:36 2024 by rpki-client on console-fra.rpki-client.org