Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa
File:                     f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa (raw, json)
Hash identifier:          OfNhe8xrixBqcOKnjq8QXFYEcQncKeltW8geP516CR8=
Subject key identifier:   44:B3:5C:1F:8E:CF:34:26:1E:BF:B7:5B:F7:B4:A9:D6:A4:82:60:00
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F43285845F2D2F61269B8E2133141FE40
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa
Signing time:             Tue 21 May 2024 17:16:45 +0000
ROA not before:           Tue 21 May 2024 17:16:45 +0000
ROA not after:            Mon 19 Aug 2024 17:16:45 +0000
asID:                     36008
IP address blocks:        104.192.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:d2:f6:12:69:b8:e2:13:31:41:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: May 21 17:16:45 2024 GMT
            Not After : Aug 19 17:16:45 2024 GMT
        Subject: CN=306db233-34b1-44b8-a588-6c10386eefeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:3a:08:60:2f:0e:26:c7:9a:da:c8:9f:1e:
                    32:b2:04:97:1d:08:f9:f5:5f:15:6d:c2:88:c2:60:
                    6a:5d:77:41:6b:e1:e3:49:0f:38:dc:2d:bf:88:32:
                    8e:f2:70:84:b6:8b:46:de:26:57:6d:48:58:0a:87:
                    b4:f9:4e:f9:e5:b8:eb:4c:85:7d:29:41:69:7b:8e:
                    a9:56:50:17:72:da:db:71:35:15:25:92:05:61:42:
                    8d:6a:d5:a0:32:e9:c0:73:d3:85:01:b6:0d:7f:7c:
                    16:74:2e:dd:14:38:70:b3:94:8b:05:e3:55:68:f0:
                    46:24:48:35:85:f0:e0:fa:bd:d4:7f:7d:88:81:c3:
                    31:07:77:7a:43:e8:af:48:56:f1:b1:b0:62:37:25:
                    2a:81:f0:79:3b:8f:d1:2b:5c:9a:0a:ef:0b:78:b7:
                    ca:96:d9:6f:48:18:bb:f8:3e:94:35:f9:f3:36:1c:
                    79:1b:69:13:8b:65:f2:7d:83:3c:79:74:87:de:8c:
                    39:2e:c0:78:f6:ff:fa:2e:05:c3:c7:5b:1e:3b:92:
                    68:54:22:02:c3:07:97:6f:6a:b9:8d:72:4a:46:87:
                    2c:18:a5:f1:5e:8f:83:04:2f:51:44:48:4d:39:94:
                    a3:ca:27:1e:5c:25:c3:19:7a:d0:4d:18:15:a4:c6:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B3:5C:1F:8E:CF:34:26:1E:BF:B7:5B:F7:B4:A9:D6:A4:82:60:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:db:dd:b6:70:e6:9c:cd:25:1d:43:90:69:c1:b5:f0:1e:
         7a:67:c9:3a:a7:39:da:93:fe:43:91:da:61:a9:db:63:0e:b2:
         69:05:4e:a8:62:36:27:59:5a:59:7a:00:8e:5b:cc:76:1b:1e:
         b7:21:be:e6:eb:09:a4:89:c4:38:45:ef:ec:f4:c9:50:6b:72:
         d8:85:bd:87:50:fd:de:a0:c3:5c:4f:f0:73:33:81:4d:ba:a1:
         1d:3a:26:b6:8f:fe:8e:90:33:ba:b9:4e:17:bc:ad:7b:25:b0:
         c4:9a:07:8f:c5:79:57:84:92:51:8c:8c:cf:14:3c:1d:4e:57:
         48:01:11:56:61:6a:a5:22:53:4b:5d:86:19:da:74:a2:16:d1:
         3a:38:e4:32:2d:ab:e3:26:12:02:9c:51:59:9e:7b:8e:c5:9c:
         7c:69:d7:55:f7:6d:a0:8d:ce:fe:ab:08:17:20:2b:dd:2a:72:
         23:d4:e0:3a:da:cc:6a:85:c4:79:8e:06:33:10:4a:6d:72:cd:
         94:64:a0:06:d2:e5:2b:95:a1:63:32:64:73:1a:63:86:db:3a:
         d6:55:41:82:7b:17:75:50:03:03:fc:bd:f6:8c:28:f7:b3:1c:
         f1:55:be:80:f1:00:4f:ec:3e:8f:e6:b0:54:28:ec:ae:bd:b9:
         55:e3:5d:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXy0vYSabjiEzFB/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk
YjlkMB4XDTI0MDUyMTE3MTY0NVoXDTI0MDgxOTE3MTY0NVowLzEtMCsGA1UEAxMk
MzA2ZGIyMzMtMzRiMS00NGI4LWE1ODgtNmMxMDM4NmVlZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZI6CGAvDibHmtrInx4ysgSXHQj59V8VbcKI
wmBqXXdBa+HjSQ843C2/iDKO8nCEtotG3iZXbUhYCoe0+U755bjrTIV9KUFpe46p
VlAXctrbcTUVJZIFYUKNatWgMunAc9OFAbYNf3wWdC7dFDhws5SLBeNVaPBGJEg1
hfDg+r3Uf32IgcMxB3d6Q+ivSFbxsbBiNyUqgfB5O4/RK1yaCu8LeLfKltlvSBi7
+D6UNfnzNhx5G2kTi2XyfYM8eXSH3ow5LsB49v/6LgXDx1seO5JoVCICwweXb2q5
jXJKRocsGKXxXo+DBC9RREhNOZSjyiceXCXDGXrQTRgVpMbANQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESzXB+OzzQmHr+3W/e0qdakgmAAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj
NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvZjEzNTZlM2MtNGQ4YS0z
OGUxLTkwYjEtYmUxZDdjNzlhODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx
MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3
ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk
ZjJkN2RiOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXk2922cOaczSUdQ5BpwbXwHnpnyTqnOdqT/kOR2mGp22MOsmkFTqhi
NidZWll6AI5bzHYbHrchvubrCaSJxDhF7+z0yVBrctiFvYdQ/d6gw1xP8HMzgU26
oR06JraP/o6QM7q5The8rXslsMSaB4/FeVeEklGMjM8UPB1OV0gBEVZhaqUiU0td
hhnadKIW0To45DItq+MmEgKcUVmee47FnHxp11X3baCNzv6rCBcgK90qciPU4Dra
zGqFxHmOBjMQSm1yzZRkoAbS5SuVoWMyZHMaY4bbOtZVQYJ7F3VQAwP8vfaMKPez
HPFVvoDxAE/sPo/msFQo7K69uVXjXZY=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:03 2024 by rpki-client on console-ams.rpki-client.org