Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8799374-4454-3a2e-acc5-42746f122687.roa
File:                     b8799374-4454-3a2e-acc5-42746f122687.roa (raw, json)
Hash identifier:          zKr/PAFHkNqjtwSbnf/ub7UfnDZAjcxbnmUeJbM29u4=
Subject key identifier:   D7:31:08:2F:CE:7C:C2:55:FC:A4:F5:BD:01:46:E2:C2:7F:C8:03:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B4D4751A272D3CD34C22E7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8799374-4454-3a2e-acc5-42746f122687.roa
Signing time:             Mon 29 Apr 2024 12:19:39 +0000
ROA not before:           Mon 29 Apr 2024 12:19:39 +0000
ROA not after:            Sun 28 Jul 2024 12:19:39 +0000
asID:                     24319
IP address blocks:        104.77.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:d4:75:1a:27:2d:3c:d3:4c:22:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 12:19:39 2024 GMT
            Not After : Jul 28 12:19:39 2024 GMT
        Subject: CN=f29ac22b-92fc-47cd-ae1c-d9521c112db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:63:f3:26:41:e4:b4:a1:63:6b:0c:90:44:
                    79:8b:d8:76:96:0d:8d:22:b9:b2:5a:6d:32:06:fd:
                    0c:58:82:63:40:40:5a:84:f2:52:69:7f:eb:02:78:
                    e3:68:cc:66:f3:2f:09:a3:fd:fd:1b:b9:72:33:e6:
                    ef:28:af:40:a3:ad:bd:14:e8:06:b2:b6:14:f5:56:
                    f4:fe:b1:09:93:99:3a:f2:4d:25:25:5c:8f:0f:e1:
                    87:c0:1f:41:a9:37:0e:c7:22:69:44:32:50:e5:a6:
                    51:f7:9f:8d:79:ac:15:5f:2b:f0:ef:38:a0:b1:bf:
                    76:30:65:91:52:48:57:15:3a:bc:25:d9:9b:bf:55:
                    81:0a:17:3d:d7:f7:83:7a:24:77:4b:0a:d1:33:a7:
                    fa:ca:42:ec:c8:26:83:9f:c8:95:9e:dd:88:ab:bd:
                    72:12:55:b7:31:c1:bb:6f:e6:73:04:26:08:71:0d:
                    fb:84:ad:58:40:4b:b9:b4:57:03:3f:db:00:44:7c:
                    c5:9f:ce:a8:99:3b:5a:d2:66:8a:5d:31:58:f7:0c:
                    aa:5b:34:d6:53:8a:45:c6:0e:dd:57:6b:73:18:25:
                    25:11:45:b4:06:31:99:4f:53:c2:24:0c:29:b0:16:
                    d2:56:e9:01:21:da:21:3a:1a:f9:a9:8f:a4:bc:f8:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:31:08:2F:CE:7C:C2:55:FC:A4:F5:BD:01:46:E2:C2:7F:C8:03:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8799374-4454-3a2e-acc5-42746f122687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:fa:e4:14:90:f6:07:b3:b9:fe:66:88:eb:22:72:57:7b:
         32:8e:c5:51:5b:a2:c0:d7:b1:76:29:59:ed:3c:7b:3e:34:67:
         46:dc:52:60:53:1d:23:30:b2:a0:c8:37:69:e4:ab:a7:84:4b:
         ce:e8:08:b6:dc:0c:8b:02:64:0a:72:9d:18:2a:c3:8d:64:13:
         1c:b6:72:17:5a:cf:85:71:f7:f0:88:46:44:ab:9c:0e:b3:5c:
         ab:f5:16:04:ef:6b:42:dc:95:91:1c:fc:7a:50:c9:f1:24:a5:
         c5:87:a4:ea:94:b7:2d:2e:60:33:69:da:5d:80:99:d1:ce:1f:
         b0:af:60:75:c2:c7:c3:07:e9:d4:9e:a2:fa:d0:93:99:68:ac:
         3d:d0:1b:b1:15:4f:96:d0:18:3c:37:4d:44:48:8d:f3:11:17:
         65:57:a6:5a:a8:f6:4d:3b:99:52:ac:c8:77:41:62:26:e4:e4:
         1f:80:f9:12:5c:83:cb:98:b3:e1:57:b9:83:91:f4:71:f3:0a:
         03:d3:a9:c0:e9:38:a3:ee:d5:18:c3:d6:2b:2a:4d:e4:8d:eb:
         2e:7c:df:b6:16:7a:9c:11:a2:8b:ce:36:f3:8e:9a:56:2f:bd:
         6d:4b:d5:80:9f:17:7c:e8:a8:9f:fa:ef:3b:84:b3:14:be:a2:
         09:2c:d6:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW01HUaJy0800wi58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQyOTEyMTkzOVoXDTI0MDcyODEyMTkzOVowLzEtMCsGA1UEAxMk
ZjI5YWMyMmItOTJmYy00N2NkLWFlMWMtZDk1MjFjMTEyZGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpdj8yZB5LShY2sMkER5i9h2lg2NIrmyWm0y
Bv0MWIJjQEBahPJSaX/rAnjjaMxm8y8Jo/39G7lyM+bvKK9Ao629FOgGsrYU9Vb0
/rEJk5k68k0lJVyPD+GHwB9BqTcOxyJpRDJQ5aZR95+NeawVXyvw7zigsb92MGWR
UkhXFTq8Jdmbv1WBChc91/eDeiR3SwrRM6f6ykLsyCaDn8iVnt2Iq71yElW3McG7
b+ZzBCYIcQ37hK1YQEu5tFcDP9sARHzFn86omTta0maKXTFY9wyqWzTWU4pFxg7d
V2tzGCUlEUW0BjGZT1PCJAwpsBbSVukBIdohOhr5qY+kvPhq0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcxCC/OfMJV/KT1vQFG4sJ/yANWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg3OTkzNzQtNDQ1NC0z
YTJlLWFjYzUtNDI3NDZmMTIyNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHio+uQUkPYHs7n+ZojrInJXezKOxVFbosDXsXYpWe08ez40Z0bcUmBT
HSMwsqDIN2nkq6eES87oCLbcDIsCZApynRgqw41kExy2chdaz4Vx9/CIRkSrnA6z
XKv1FgTva0LclZEc/HpQyfEkpcWHpOqUty0uYDNp2l2AmdHOH7CvYHXCx8MH6dSe
ovrQk5lorD3QG7EVT5bQGDw3TURIjfMRF2VXplqo9k07mVKsyHdBYibk5B+A+RJc
g8uYs+FXuYOR9HHzCgPTqcDpOKPu1RjD1isqTeSN6y5837YWepwRoovONvOOmlYv
vW1L1YCfF3zoqJ/67zuEsxS+ogks1vM=
-----END CERTIFICATE-----
Generated at Fri May 17 02:15:38 2024 by rpki-client on console-ams.rpki-client.org