Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8402ff9f-d61e-31b5-a426-03c04e4ffbf0.roa
File:                     8402ff9f-d61e-31b5-a426-03c04e4ffbf0.roa (raw, json)
Hash identifier:          BYUtHbb5kY/h84ZqpNSrCACqruNZ5x001iCRfsJZdPE=
Subject key identifier:   6E:E4:03:00:F9:10:45:A5:8B:1D:B9:99:23:62:CB:56:E0:DF:1F:21
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285846F7ACA8C57869A1230E35A880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8402ff9f-d61e-31b5-a426-03c04e4ffbf0.roa
Signing time:             Thu 22 Aug 2024 12:00:00 +0000
ROA not before:           Thu 22 Aug 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        104.29.122.0/24 maxlen: 24
                          162.159.83.0/24 maxlen: 24
                          172.69.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f7:ac:a8:c5:78:69:a1:23:0e:35:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=e8764442-013a-4cf5-a1df-252dd4915ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:14:79:ba:c8:7d:d9:a6:28:ed:86:7c:9e:
                    12:cc:77:1d:2c:d7:71:bb:66:48:bf:34:a0:99:60:
                    81:82:c2:f4:95:9f:36:5d:3b:0f:a2:da:5e:10:5a:
                    eb:11:3c:80:26:2e:5c:be:87:25:ed:fd:5b:9d:97:
                    fa:26:07:06:86:6d:be:3d:99:ed:12:f5:02:43:d3:
                    45:25:f4:a2:ec:1e:d1:d4:9e:b9:4b:e7:21:a4:81:
                    14:90:bf:6c:28:e0:28:0b:5b:84:99:70:30:63:87:
                    7e:31:2a:ca:38:fc:30:f4:c2:0c:e8:ff:33:25:5d:
                    25:7f:36:0b:88:73:15:8d:d9:18:48:ff:e5:a1:27:
                    54:05:00:1e:55:18:e3:99:3f:0f:75:17:39:cc:93:
                    60:7b:07:9a:de:54:e3:8d:7c:84:ec:db:3e:e2:c6:
                    ee:1d:08:c1:ec:48:ac:11:9c:ed:ca:69:f0:16:07:
                    20:a6:3a:c2:e6:65:2f:66:e5:95:5c:32:72:90:56:
                    b6:11:d7:75:d4:a1:92:58:97:c4:bc:9e:e7:38:02:
                    6f:2b:29:c7:d1:45:37:20:5b:42:9c:bb:79:60:8a:
                    7d:35:6b:85:d9:ee:93:36:85:08:9f:eb:e8:11:c1:
                    f8:7e:31:0d:b9:33:76:e2:84:88:64:c0:2d:23:bf:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E4:03:00:F9:10:45:A5:8B:1D:B9:99:23:62:CB:56:E0:DF:1F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8402ff9f-d61e-31b5-a426-03c04e4ffbf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.122.0/24
                  162.159.83.0/24
                  172.69.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:34:2b:d6:07:e0:14:5d:e6:06:70:15:11:0e:ce:dd:b8:09:
         1d:a0:8b:ac:97:11:7c:42:ad:02:84:76:d6:76:7b:e9:94:6d:
         9a:c5:d9:8f:89:51:23:64:52:67:75:31:03:11:08:ec:49:f4:
         89:e3:1e:0a:32:cb:36:91:a5:8b:c5:a5:d2:f1:ef:a6:bc:e9:
         8a:50:b5:6c:6e:d9:ff:47:2f:9d:7f:27:90:c2:b4:c0:90:d5:
         34:8c:b3:1f:51:b2:42:eb:4e:bd:d9:22:6e:33:0b:8b:bb:24:
         6d:c1:c8:db:bc:69:f0:cb:19:03:97:8f:13:b6:2c:05:71:95:
         49:2d:d8:90:5e:a2:64:e2:8c:bc:bf:2c:e6:07:06:aa:df:17:
         af:89:bd:42:06:e8:36:40:9a:47:33:a5:ee:ba:4b:06:2a:16:
         38:e0:ac:cd:e7:59:a8:b9:72:21:1b:9a:fe:1d:92:af:59:91:
         82:cc:62:ed:52:8e:a7:5b:e8:f2:2e:e7:9f:8d:cb:67:6d:ed:
         96:23:be:4f:e3:94:3f:5c:7f:bf:9d:d3:c9:fd:1c:7d:76:22:
         7a:71:5d:89:d4:97:30:c3:7d:2a:c3:94:7c:1e:64:19:c2:64:
         eb:bf:8e:08:40:b5:78:24:c9:d8:6d:2d:5a:2d:a5:4d:37:cd:
         14:5b:e1:ba
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEb3rKjFeGmhIw41qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDgyMjEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTg3NjQ0NDItMDEzYS00Y2Y1LWExZGYtMjUyZGQ0OTE1ZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lwUebrIfdmmKO2GfJ4SzHcdLNdxu2ZIvzSg
mWCBgsL0lZ82XTsPotpeEFrrETyAJi5cvocl7f1bnZf6JgcGhm2+PZntEvUCQ9NF
JfSi7B7R1J65S+chpIEUkL9sKOAoC1uEmXAwY4d+MSrKOPww9MIM6P8zJV0lfzYL
iHMVjdkYSP/loSdUBQAeVRjjmT8PdRc5zJNgewea3lTjjXyE7Ns+4sbuHQjB7Eis
EZztymnwFgcgpjrC5mUvZuWVXDJykFa2Edd11KGSWJfEvJ7nOAJvKynH0UU3IFtC
nLt5YIp9NWuF2e6TNoUIn+voEcH4fjENuTN24oSIZMAtI7/NRwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFG7kAwD5EEWlix25mSNiy1bg3x8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODQwMmZmOWYtZDYxZS0z
MWI1LWE0MjYtMDNjMDRlNGZmYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaB16AwQA
op9TAwQArEWOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAK80K9YH4BRd5gZwFREOzt24CR2gi6yXEXxCrQKE
dtZ2e+mUbZrF2Y+JUSNkUmd1MQMRCOxJ9InjHgoyyzaRpYvFpdLx76a86YpQtWxu
2f9HL51/J5DCtMCQ1TSMsx9RskLrTr3ZIm4zC4u7JG3ByNu8afDLGQOXjxO2LAVx
lUkt2JBeomTijLy/LOYHBqrfF6+JvUIG6DZAmkczpe66SwYqFjjgrM3nWai5ciEb
mv4dkq9ZkYLMYu1Sjqdb6PIu55+Ny2dt7ZYjvk/jlD9cf7+d08n9HH12InpxXYnU
lzDDfSrDlHweZBnCZOu/jghAtXgkydhtLVotpU03zRRb4bo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:19 2024 by rpki-client on console-fra.rpki-client.org