Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa
File:                     39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa (raw, json)
Hash identifier:          OdZwcl+uAw+zwQt7c9LKWdh7qYxIo+zqPgLiC4R5QgE=
Subject key identifier:   E5:EC:65:B1:0A:DC:1A:0E:68:80:03:BB:2E:CF:05:DB:C8:55:C3:D6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858401A6226C38363598D28D845C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Wed 05 Jan 2028 05:00:00 +0000
asID:                     13335
IP address blocks:        104.29.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:62:26:c3:83:63:59:8d:28:d8:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2028 GMT
        Subject: CN=faabb1e9-fcb4-4569-b75e-912c18a2cf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:80:de:37:30:a6:05:c1:b4:f6:96:6e:ae:
                    d8:e7:b7:88:03:5d:5a:5a:97:c1:fd:e8:67:00:4e:
                    88:71:89:81:e7:58:63:ec:1b:89:01:66:cf:a9:3a:
                    18:b2:34:80:5d:1f:b7:e6:13:04:e0:de:2e:37:1d:
                    4a:c9:7e:83:dc:cf:a3:9d:82:57:6d:59:b3:8e:ce:
                    e2:47:35:b8:cd:d7:9f:c1:b3:81:f9:77:41:f5:c4:
                    ab:17:e7:1d:62:39:b6:44:e7:e4:be:39:76:d9:76:
                    7b:bd:33:98:d1:69:b1:fb:dd:b3:a4:8b:d6:5f:4e:
                    55:65:7a:b9:8c:0d:8e:65:be:42:0d:8f:8e:be:9b:
                    07:84:83:b7:f7:91:88:04:e4:12:81:77:07:61:c8:
                    a3:01:31:b0:74:97:d1:b6:c6:86:48:70:f4:7c:07:
                    d0:49:42:d7:a3:bc:48:c4:ab:97:72:c8:b0:8d:37:
                    89:60:4c:5b:33:12:39:75:4b:19:0f:5f:6e:52:ef:
                    37:d3:32:0c:84:ea:99:04:2e:cc:6b:6d:50:ab:e6:
                    db:3c:2f:52:5f:f5:73:e9:d7:bc:61:5a:7f:1b:87:
                    fa:e1:78:3c:e8:37:4d:1e:81:0b:8f:7c:df:32:53:
                    30:31:07:25:cf:d3:e8:c8:3b:2a:e3:e3:bd:4a:bb:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:65:B1:0A:DC:1A:0E:68:80:03:BB:2E:CF:05:DB:C8:55:C3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39bffe8c-298f-3aac-b8de-b8ecadcaa878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:29:6b:33:bd:77:a8:ad:f8:01:81:89:ac:1f:f7:22:eb:
         d8:28:c4:22:e0:4a:73:fd:97:32:48:cb:bb:d2:1e:ed:02:78:
         d4:7c:8b:ff:98:5d:86:dd:39:bb:7a:6c:d2:67:7b:d8:ff:fe:
         f9:d0:65:29:a5:ec:aa:c1:db:34:d6:e3:f4:e7:c6:b4:66:a6:
         73:d5:55:a0:a5:fe:8d:4e:51:12:ce:ef:7b:66:17:27:7e:87:
         6e:0c:3b:e4:a5:c4:66:d3:f6:5c:4e:9f:50:30:97:ef:c7:a5:
         af:71:9c:f0:12:5c:58:5e:88:cb:af:0e:38:14:c8:86:be:e3:
         93:06:fc:ef:02:b0:0f:19:18:70:48:e8:38:a1:e1:35:f7:20:
         cd:ff:b3:3c:8c:15:f0:f6:02:53:93:aa:4d:6a:4b:90:77:02:
         c8:13:37:61:9d:23:6a:70:1e:1e:a9:5e:76:e8:b7:69:e7:c8:
         f5:79:29:8a:f6:19:1d:97:3e:5b:12:fb:2c:c1:53:6f:fb:98:
         42:33:76:12:3f:5c:1b:d1:14:bc:d8:57:a7:e7:82:79:d9:c8:
         3d:65:87:d7:73:09:1a:1b:a1:f6:06:6a:18:01:3c:c9:26:b6:
         c2:ae:a8:63:0e:21:4e:bb:25:48:ad:8d:23:84:5a:98:08:50:
         09:30:d7:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAaYibDg2NZjSjYRcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIyMTIwMTEyMDAwMFoXDTI4MDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmFhYmIxZTktZmNiNC00NTY5LWI3NWUtOTEyYzE4YTJjZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpuA3jcwpgXBtPaWbq7Y57eIA11aWpfB/ehn
AE6IcYmB51hj7BuJAWbPqToYsjSAXR+35hME4N4uNx1KyX6D3M+jnYJXbVmzjs7i
RzW4zdefwbOB+XdB9cSrF+cdYjm2ROfkvjl22XZ7vTOY0Wmx+92zpIvWX05VZXq5
jA2OZb5CDY+OvpsHhIO395GIBOQSgXcHYcijATGwdJfRtsaGSHD0fAfQSULXo7xI
xKuXcsiwjTeJYExbMxI5dUsZD19uUu830zIMhOqZBC7Ma21Qq+bbPC9SX/Vz6de8
YVp/G4f64Xg86DdNHoELj3zfMlMwMQclz9PoyDsq4+O9SrsN7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXsZbEK3BoOaIADuy7PBdvIVcPWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzliZmZlOGMtMjk4Zi0z
YWFjLWI4ZGUtYjhlY2FkY2FhODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACu7KWszvXeorfgBgYmsH/ci69goxCLgSnP9lzJIy7vSHu0CeNR8i/+Y
XYbdObt6bNJne9j//vnQZSml7KrB2zTW4/TnxrRmpnPVVaCl/o1OURLO73tmFyd+
h24MO+SlxGbT9lxOn1Awl+/Hpa9xnPASXFheiMuvDjgUyIa+45MG/O8CsA8ZGHBI
6Dih4TX3IM3/szyMFfD2AlOTqk1qS5B3AsgTN2GdI2pwHh6pXnbot2nnyPV5KYr2
GR2XPlsS+yzBU2/7mEIzdhI/XBvRFLzYV6fngnnZyD1lh9dzCRobofYGahgBPMkm
tsKuqGMOIU67JUitjSOEWpgIUAkw1+8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:03 2024 by rpki-client on console-ams.rpki-client.org