Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/e19bde00-4df7-3fdc-ac14-fac20f9df7ad.roa
File:                     e19bde00-4df7-3fdc-ac14-fac20f9df7ad.roa (raw, json)
Hash identifier:          5JyzouJY94Al3+VUBmpnEA3UWcxaAX+DIPnE8UkBeeQ=
Subject key identifier:   BE:47:5C:3D:AD:7E:2A:8D:BB:A2:87:B1:7F:43:0B:17:66:08:90:2C
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F432858473A5B9263970C9DF58473886A
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/e19bde00-4df7-3fdc-ac14-fac20f9df7ad.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     22438
IP address blocks:        104.245.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:92:63:97:0c:9d:f5:84:73:88:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=13c9f4d7-fe73-4efd-934b-5a39a450de20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:22:ec:be:a5:4d:39:10:61:fe:b6:79:b6:
                    52:14:0d:43:e4:57:7d:c9:b7:46:f8:3f:1a:8c:f6:
                    cd:fc:49:f9:ed:5e:a1:14:ce:ca:d0:cb:29:ca:29:
                    17:ef:f3:f0:9b:c6:a8:f3:ed:87:f0:4d:01:7e:66:
                    29:ea:63:9c:45:55:d2:2c:de:f8:e8:dd:9c:9d:6a:
                    87:1c:54:1a:a0:09:21:97:36:b1:92:c8:87:e8:54:
                    3a:01:a0:fe:98:70:bf:22:fb:49:6d:49:6d:4c:3d:
                    c0:4b:27:cf:7f:c1:47:54:2c:87:ea:f7:e9:6e:65:
                    2a:92:0a:5a:b5:aa:3c:1a:a0:09:c5:23:e2:94:f6:
                    1b:0d:e0:e7:49:ab:31:44:3b:01:11:56:71:9f:f3:
                    75:8d:13:46:6c:8a:87:c3:dd:67:9f:e3:39:76:3c:
                    b9:34:fe:a5:cc:88:1b:24:d2:a6:ac:09:77:a4:7c:
                    11:23:8a:8e:91:f6:fe:de:b6:6a:8e:11:b7:ab:0a:
                    20:ea:9a:18:b3:ce:e6:d0:cc:8b:9e:61:5f:00:b4:
                    ef:8c:b7:af:93:dd:06:b9:de:d8:ae:30:ea:31:07:
                    62:a5:11:68:82:c6:5c:33:3b:16:55:ca:da:05:39:
                    2d:3c:0c:23:42:80:a2:cd:76:76:d5:a0:6d:4b:2c:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:5C:3D:AD:7E:2A:8D:BB:A2:87:B1:7F:43:0B:17:66:08:90:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/e19bde00-4df7-3fdc-ac14-fac20f9df7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:aa:18:fa:2b:0b:e7:82:97:81:af:4c:75:81:7a:0c:f6:
         34:5a:a5:dc:8c:59:8e:93:3d:81:79:0f:38:55:72:61:19:18:
         30:b1:6a:88:8b:4e:fb:3a:fc:e3:07:40:f2:e5:f9:bf:fb:3a:
         a2:d7:56:af:60:d5:65:84:42:7f:9f:c8:03:18:ec:7d:8a:e7:
         87:a4:66:8f:08:ce:29:c1:e7:96:55:af:41:e5:39:de:5e:9f:
         86:52:c7:db:cc:0c:5a:f4:f2:b6:8a:65:eb:36:bb:2d:d7:15:
         3d:8c:a1:85:e4:6d:57:d5:70:34:ff:ed:d7:cf:70:17:7e:0f:
         75:2f:3c:56:82:f0:9e:66:67:2b:97:27:68:fc:21:7b:b0:b5:
         26:93:0e:a7:c7:44:66:24:ff:56:55:62:fc:dc:65:2c:8c:24:
         e0:64:57:b9:7b:22:36:0e:92:a3:94:47:6d:e3:ff:b1:4c:87:
         1e:31:1e:8e:bf:16:5a:97:26:ad:b8:12:39:5e:11:69:bb:55:
         57:05:0b:fc:b3:db:f5:39:b6:58:7b:50:0a:15:5b:e6:3c:81:
         6f:e4:d7:d7:d7:fd:a7:16:ae:c8:d1:82:ef:b3:0b:10:13:de:
         95:4f:16:36:48:98:ed:7d:b2:db:81:25:6c:c7:94:f8:45:55:
         a2:10:81:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5Jjlwyd9YRziGowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1
NDdjMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MTNjOWY0ZDctZmU3My00ZWZkLTkzNGItNWEzOWE0NTBkZTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQi7L6lTTkQYf62ebZSFA1D5Fd9ybdG+D8a
jPbN/En57V6hFM7K0MspyikX7/Pwm8ao8+2H8E0BfmYp6mOcRVXSLN746N2cnWqH
HFQaoAkhlzaxksiH6FQ6AaD+mHC/IvtJbUltTD3ASyfPf8FHVCyH6vfpbmUqkgpa
tao8GqAJxSPilPYbDeDnSasxRDsBEVZxn/N1jRNGbIqHw91nn+M5djy5NP6lzIgb
JNKmrAl3pHwRI4qOkfb+3rZqjhG3qwog6poYs87m0MyLnmFfALTvjLevk90Gud7Y
rjDqMQdipRFogsZcMzsWVcraBTktPAwjQoCizXZ21aBtSyx+ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5HXD2tfiqNu6KHsX9DCxdmCJAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5
MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvZTE5YmRlMDAtNGRmNy0z
ZmRjLWFjMTQtZmFjMjBmOWRmN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4
YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy
NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy
YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPVUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxDqhj6KwvngpeBr0x1gXoM9jRapdyMWY6TPYF5DzhVcmEZGDCxaoiL
Tvs6/OMHQPLl+b/7OqLXVq9g1WWEQn+fyAMY7H2K54ekZo8IzinB55ZVr0HlOd5e
n4ZSx9vMDFr08raKZes2uy3XFT2MoYXkbVfVcDT/7dfPcBd+D3UvPFaC8J5mZyuX
J2j8IXuwtSaTDqfHRGYk/1ZVYvzcZSyMJOBkV7l7IjYOkqOUR23j/7FMhx4xHo6/
FlqXJq24EjleEWm7VVcFC/yz2/U5tlh7UAoVW+Y8gW/k19fX/acWrsjRgu+zCxAT
3pVPFjZImO19stuBJWzHlPhFVaIQgYU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org