Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
File:                     bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa (raw, json)
Hash identifier:          f/21LdsvTvdCWxpwDj4dDvJBhkC+Pm0EkIvjLBcW3Ts=
Subject key identifier:   ED:7A:3E:ED:6E:C3:90:54:58:52:4E:6F:F2:A8:DC:AD:35:DD:19:21
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285845D39E51D004F2E27B3F3B26C0
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     22333
IP address blocks:        45.43.7.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:51:d0:04:f2:e2:7b:3f:3b:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=8fb11b0a-af9e-412c-b151-42c4a22874d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:81:25:6a:29:f6:cf:a0:69:b4:eb:35:7c:
                    d2:f3:6a:c9:1f:20:b5:7a:18:ff:fa:e6:e2:96:5b:
                    0b:33:f1:3b:bc:aa:66:a9:bd:39:40:95:96:a6:3e:
                    38:57:3e:26:e2:ad:bc:26:2a:06:86:74:e8:d9:27:
                    e8:f2:60:26:14:c0:36:d1:51:38:ef:7e:b7:3d:ec:
                    c2:36:e4:ba:f5:c0:a3:e8:ab:38:1a:ee:c0:09:0f:
                    35:d6:ad:29:81:09:af:27:ed:9d:86:c2:47:b0:b6:
                    d1:b6:26:7f:90:09:c1:59:11:59:ae:64:ae:69:19:
                    ae:2e:cd:99:1a:96:d7:40:5c:e9:a7:24:4f:39:c9:
                    63:dd:7a:98:ac:4a:04:ba:14:fe:35:44:78:50:43:
                    a1:93:1e:99:c7:56:0c:45:e3:aa:9b:56:fa:44:59:
                    8b:8e:29:16:02:9e:51:47:b7:0e:5b:13:a3:9b:2d:
                    49:5c:21:cf:5f:29:bd:6b:cc:a4:3f:24:19:dc:30:
                    d6:11:5b:28:b4:6c:33:32:0e:16:9f:42:f9:b2:bc:
                    02:66:08:16:8e:37:17:86:ce:59:16:b1:1f:cc:e3:
                    da:37:49:6b:36:76:15:8a:81:45:03:cd:ab:06:ee:
                    2f:f0:93:b1:57:92:f1:f2:dd:99:84:49:a7:e2:6b:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7A:3E:ED:6E:C3:90:54:58:52:4E:6F:F2:A8:DC:AD:35:DD:19:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:88:0c:cc:94:f2:59:d6:53:35:e8:be:a4:6b:f2:77:80:83:
         c2:dc:88:10:10:c9:42:47:78:e1:90:13:19:97:9b:72:24:3b:
         41:d2:a0:eb:e6:5f:f6:15:cf:0d:b8:01:1b:f6:3a:bd:7a:5b:
         b5:31:ab:79:fb:03:e4:62:a4:15:ac:71:ba:65:d4:b7:66:c9:
         e9:86:34:ba:2b:af:aa:c4:6a:92:fa:dc:ec:16:8e:7a:f9:11:
         42:44:88:af:c6:07:40:46:a0:c9:8e:7d:5c:57:11:6e:f1:8b:
         10:cb:51:5f:f1:a9:e8:6f:0b:eb:b8:9c:da:17:70:02:e1:88:
         93:a4:57:f4:af:a6:33:28:ec:38:53:39:bd:2a:39:34:c7:44:
         7b:a2:c4:5f:b4:f8:ee:b3:d3:12:1b:17:52:a9:67:77:96:5b:
         32:e3:0c:d5:d6:12:b8:83:4b:40:95:ac:00:7c:f4:b4:ce:99:
         56:ba:31:20:60:84:95:2c:b1:17:8a:73:60:a9:58:ef:14:f6:
         0c:b4:a7:95:a8:d3:69:df:d0:88:ed:74:de:2b:79:55:a5:65:
         65:be:8f:37:e5:ef:58:27:1c:08:89:19:6b:85:e9:7a:38:b1:
         f7:c7:3b:43:22:83:38:98:e3:05:8f:3c:b3:bf:29:58:08:d7:
         72:b7:40:8a
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEXTnlHQBPLiez87JsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
OGZiMTFiMGEtYWY5ZS00MTJjLWIxNTEtNDJjNGEyMjg3NGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/SBJWop9s+gabTrNXzS82rJHyC1ehj/+ubi
llsLM/E7vKpmqb05QJWWpj44Vz4m4q28JioGhnTo2Sfo8mAmFMA20VE47363PezC
NuS69cCj6Ks4Gu7ACQ811q0pgQmvJ+2dhsJHsLbRtiZ/kAnBWRFZrmSuaRmuLs2Z
GpbXQFzppyRPOclj3XqYrEoEuhT+NUR4UEOhkx6Zx1YMReOqm1b6RFmLjikWAp5R
R7cOWxOjmy1JXCHPXym9a8ykPyQZ3DDWEVsotGwzMg4Wn0L5srwCZggWjjcXhs5Z
FrEfzOPaN0lrNnYVioFFA82rBu4v8JOxV5Lx8t2ZhEmn4mtllwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFO16Pu1uw5BUWFJOb/Ko3K013RkhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvYmVkNjFhNDktZTBkYi0z
ODY0LWE2OTctZDhlMWUwYjFkY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtKwcD
BAAtKwgDBABCC30DBABowGcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEogMzJTyWdZTNei+pGvyd4CDwtyI
EBDJQkd44ZATGZebciQ7QdKg6+Zf9hXPDbgBG/Y6vXpbtTGrefsD5GKkFaxxumXU
t2bJ6YY0uiuvqsRqkvrc7BaOevkRQkSIr8YHQEagyY59XFcRbvGLEMtRX/Gp6G8L
67ic2hdwAuGIk6RX9K+mMyjsOFM5vSo5NMdEe6LEX7T47rPTEhsXUqlnd5ZbMuMM
1dYSuINLQJWsAHz0tM6ZVroxIGCElSyxF4pzYKlY7xT2DLSnlajTad/QiO103it5
VaVlZb6PN+XvWCccCIkZa4Xpejix98c7QyKDOJjjBY88s78pWAjXcrdAig==
-----END CERTIFICATE-----
Generated at Wed May 22 10:17:09 2024 by rpki-client on console-ams.rpki-client.org