Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa
File:                     cf1a0411-affa-31be-a610-7a5e46691069.roa (raw, json)
Hash identifier:          D+hA2amcDaMl1T0FqBb4tyHbEw6o7P0HoptNFWeQEHw=
Subject key identifier:   15:60:5A:AE:55:E6:31:86:F7:69:4F:78:9E:D8:47:98:A3:D5:39:B1
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845A9BE1DB566D0DE202FCD8F48
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     174
IP address blocks:        104.218.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1d:b5:66:d0:de:20:2f:cd:8f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=962439d9-3bc0-4b6b-ad2d-e4c635439d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:a4:f2:df:d3:da:35:af:47:3e:d3:a6:d3:
                    26:bb:d9:97:4a:ca:79:c4:0e:77:f8:bf:d4:8b:34:
                    9b:b2:bf:5c:d2:85:32:16:3a:db:0a:d6:ad:48:4b:
                    c9:20:50:a6:6c:c8:b6:ec:75:12:b6:78:fd:14:3a:
                    26:6b:46:6d:3d:86:ea:d0:1d:fa:40:80:30:8c:3d:
                    ae:78:2c:56:d3:de:11:17:2b:39:2a:c5:18:5c:96:
                    b6:9c:b2:a1:65:ec:0f:08:54:c3:7a:26:8b:de:7c:
                    39:12:f1:77:e4:46:06:d5:1e:24:bb:fa:37:a4:1d:
                    1c:0e:43:ab:07:c2:50:25:ad:9f:5c:76:43:15:d7:
                    7f:e2:d6:85:bc:18:0b:7e:6d:52:e7:e5:15:5e:5d:
                    18:07:40:06:42:e1:91:da:71:44:4c:6d:7b:83:73:
                    34:87:3c:82:72:e3:3a:e2:31:ff:e6:8b:0c:fb:5c:
                    e9:6c:be:74:71:c4:2e:9f:12:a1:06:35:4a:0e:56:
                    e0:6e:e3:5c:92:2c:da:8e:90:28:b6:49:a5:fb:5e:
                    52:b0:6d:c0:df:f2:f1:50:72:1a:51:e6:b2:f4:cd:
                    8e:07:3a:57:d1:80:4e:ff:85:42:09:a9:be:7a:a8:
                    30:f8:3b:7c:00:e5:ed:35:f5:55:a0:5e:db:6d:f4:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:60:5A:AE:55:E6:31:86:F7:69:4F:78:9E:D8:47:98:A3:D5:39:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:20:1a:56:e0:64:97:4a:32:84:67:9e:6d:c2:0f:b5:7d:
         91:4f:9f:f9:33:1a:1d:13:08:97:23:4e:cb:bf:3b:69:bc:0f:
         5a:e2:36:96:a6:8d:2f:3e:0f:7a:55:93:b9:ce:71:8d:3c:f6:
         35:9b:cd:54:d9:9f:6c:ed:b7:77:a8:bf:62:bd:07:52:12:25:
         eb:dd:56:e3:91:93:58:bb:61:14:56:70:5b:92:99:cb:5f:a8:
         aa:0e:c1:d7:1b:9d:fb:49:2f:44:ba:c1:17:4c:30:79:58:44:
         4b:74:e0:ea:e6:93:3a:4c:a0:2b:57:7b:00:b5:d1:90:bf:99:
         6f:78:d6:ca:77:90:ed:2b:52:f8:f3:0d:c7:92:2f:66:49:ba:
         c6:59:06:c6:6c:35:03:fa:93:ad:59:ec:09:85:bf:81:7c:5c:
         d4:2b:40:f6:29:2a:cc:a8:b7:bf:44:2d:f7:fa:ff:17:eb:d0:
         71:6e:9a:6c:be:8c:2e:c0:ca:d2:bf:2f:d4:b2:33:94:26:78:
         3c:29:c6:e7:5b:a7:af:d3:e6:6c:9d:e5:21:4d:3e:d0:b4:ef:
         af:10:f3:e5:b2:d8:63:e4:61:aa:07:c3:76:50:6a:27:4d:f9:
         33:71:37:bf:96:b1:a1:12:b9:60:c6:e2:95:36:fe:53:98:ae:
         d5:21:45:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvh21ZtDeIC/Nj0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
OTYyNDM5ZDktM2JjMC00YjZiLWFkMmQtZTRjNjM1NDM5ZDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG+k8t/T2jWvRz7TptMmu9mXSsp5xA53+L/U
izSbsr9c0oUyFjrbCtatSEvJIFCmbMi27HUStnj9FDoma0ZtPYbq0B36QIAwjD2u
eCxW094RFys5KsUYXJa2nLKhZewPCFTDeiaL3nw5EvF35EYG1R4ku/o3pB0cDkOr
B8JQJa2fXHZDFdd/4taFvBgLfm1S5+UVXl0YB0AGQuGR2nFETG17g3M0hzyCcuM6
4jH/5osM+1zpbL50ccQunxKhBjVKDlbgbuNckizajpAotkml+15SsG3A3/LxUHIa
Ueay9M2OBzpX0YBO/4VCCam+eqgw+Dt8AOXtNfVVoF7bbfQEtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVgWq5V5jGG92lPeJ7YR5ij1TmxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2YxYTA0MTEtYWZmYS0z
MWJlLWE2MTAtN2E1ZTQ2NjkxMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxMIBpW4GSXSjKEZ55twg+1fZFPn/kzGh0TCJcjTsu/O2m8D1riNpam
jS8+D3pVk7nOcY089jWbzVTZn2ztt3eov2K9B1ISJevdVuORk1i7YRRWcFuSmctf
qKoOwdcbnftJL0S6wRdMMHlYREt04OrmkzpMoCtXewC10ZC/mW941sp3kO0rUvjz
DceSL2ZJusZZBsZsNQP6k61Z7AmFv4F8XNQrQPYpKsyot79ELff6/xfr0HFummy+
jC7AytK/L9SyM5QmeDwpxudbp6/T5myd5SFNPtC0768Q8+Wy2GPkYaoHw3ZQaidN
+TNxN7+WsaESuWDG4pU2/lOYrtUhRSM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 12:24:22 2024 by rpki-client on console-ams.rpki-client.org