Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa
File:                     573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa (raw, json)
Hash identifier:          O6nmpZHlfEYJp3bMETViTTxY/NG10gVZ1mCBzhXo39I=
Subject key identifier:   ED:12:51:C2:32:8D:D3:89:51:BF:2E:C1:80:90:9C:83:06:AC:CE:EE
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845A9BE0F2E9DB463574CDFFA00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     46261
IP address blocks:        172.98.168.0/24 maxlen: 24
                          104.251.87.0/24 maxlen: 24
                          104.218.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0f:2e:9d:b4:63:57:4c:df:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=4fa545de-cb7d-4b81-b126-b2a4a4835f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:4b:ff:58:89:e3:25:f4:04:8b:79:74:47:
                    5a:08:70:bc:68:ba:98:b3:4c:73:17:21:2f:17:f3:
                    07:f8:84:c8:52:2a:97:2a:99:af:c2:20:7b:f3:89:
                    b0:35:61:66:05:8a:44:7e:b4:d5:6a:54:be:7f:7d:
                    a2:ff:1d:56:3e:f9:9f:e8:94:aa:0c:04:56:99:52:
                    97:80:40:43:54:e6:6c:e5:ed:27:2b:36:9f:96:23:
                    f9:86:15:0d:0b:79:f5:7e:b7:07:08:19:54:6f:9a:
                    e2:11:99:70:ba:36:b8:73:8a:2d:f4:5a:e2:0a:d6:
                    40:06:7e:02:f5:e1:9f:48:db:fa:1e:f2:37:94:23:
                    7c:35:a1:20:0e:5f:44:5a:c0:7a:f1:6d:24:e7:23:
                    8b:46:d8:13:7d:79:f6:b5:89:bd:90:7e:07:7c:63:
                    1b:ae:a5:07:60:b5:c2:1c:97:d2:61:b2:60:d7:e2:
                    58:a8:80:dd:3a:d0:50:17:56:f4:16:13:f9:76:70:
                    bc:f5:6f:80:96:33:13:88:d2:8d:3d:1d:3c:72:fd:
                    91:3c:fa:09:61:37:17:af:f6:9c:b4:01:90:d9:90:
                    6c:fb:07:ca:64:d7:7a:89:6e:86:bd:b0:ba:96:ad:
                    a9:b2:43:fc:f6:06:00:da:b5:83:19:49:63:39:f0:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:51:C2:32:8D:D3:89:51:BF:2E:C1:80:90:9C:83:06:AC:CE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.197.0/24
                  104.251.87.0/24
                  172.98.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c6:52:f5:1a:95:25:4e:1d:df:c0:dc:c1:d0:b7:58:fd:bb:
         27:af:27:ba:60:ea:8e:a4:70:66:e1:35:8c:1c:6a:c7:08:db:
         88:66:50:1d:2d:2f:46:0a:ad:83:6c:00:b1:83:1a:28:59:64:
         ae:40:b9:24:2e:13:a5:48:33:aa:6a:53:9e:d1:8d:08:74:80:
         68:d7:82:e6:77:5c:fa:ea:e7:2f:a0:d9:9c:92:e2:d9:79:17:
         c5:e8:3d:10:fe:e9:b5:bc:23:c6:c0:7e:79:a3:73:f0:12:ce:
         09:1f:3a:d3:c3:e6:22:a0:90:6c:5f:78:85:29:10:47:5d:56:
         b2:98:3c:38:13:3b:82:4b:33:05:14:b0:78:65:d1:b2:9c:cc:
         e7:73:47:ba:ac:6a:27:41:c6:f9:7f:9e:0c:97:27:70:e8:40:
         c1:ea:6e:2a:b3:dc:9d:56:6a:b2:cc:3d:33:85:64:e2:48:28:
         b1:24:6e:11:8a:e3:b5:38:aa:05:6d:d4:53:e4:16:84:36:64:
         30:10:7e:7f:73:5e:7d:aa:89:d6:41:6e:09:11:fc:14:a7:c4:
         17:6d:f5:9d:4c:11:9b:e0:92:71:16:0e:28:0d:87:82:31:c7:
         e2:48:cc:3c:17:3c:7b:ab:53:59:e3:17:01:55:74:53:d4:af:
         b1:27:40:11
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEWpvg8unbRjV0zf+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
NGZhNTQ1ZGUtY2I3ZC00YjgxLWIxMjYtYjJhNGE0ODM1ZjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI9L/1iJ4yX0BIt5dEdaCHC8aLqYs0xzFyEv
F/MH+ITIUiqXKpmvwiB784mwNWFmBYpEfrTValS+f32i/x1WPvmf6JSqDARWmVKX
gEBDVOZs5e0nKzafliP5hhUNC3n1frcHCBlUb5riEZlwuja4c4ot9FriCtZABn4C
9eGfSNv6HvI3lCN8NaEgDl9EWsB68W0k5yOLRtgTfXn2tYm9kH4HfGMbrqUHYLXC
HJfSYbJg1+JYqIDdOtBQF1b0FhP5dnC89W+AljMTiNKNPR08cv2RPPoJYTcXr/ac
tAGQ2ZBs+wfKZNd6iW6GvbC6lq2pskP89gYA2rWDGUljOfBGjwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFO0SUcIyjdOJUb8uwYCQnIMGrM7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTczY2QwMzEtZmY2Yi0z
ZDUzLWI2MmItZGJkNWJjMTc3YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaNrFAwQA
aPtXAwQArGKoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAErGUvUalSVOHd/A3MHQt1j9uyevJ7pg6o6kcGbh
NYwcascI24hmUB0tL0YKrYNsALGDGihZZK5AuSQuE6VIM6pqU57RjQh0gGjXguZ3
XPrq5y+g2ZyS4tl5F8XoPRD+6bW8I8bAfnmjc/ASzgkfOtPD5iKgkGxfeIUpEEdd
VrKYPDgTO4JLMwUUsHhl0bKczOdzR7qsaidBxvl/ngyXJ3DoQMHqbiqz3J1WarLM
PTOFZOJIKLEkbhGK47U4qgVt1FPkFoQ2ZDAQfn9zXn2qidZBbgkR/BSnxBdt9Z1M
EZvgknEWDigNh4Ixx+JIzDwXPHurU1njFwFVdFPUr7EnQBE=
-----END CERTIFICATE-----
Generated at Wed May 1 22:27:09 2024 by rpki-client on console-fra.rpki-client.org