Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/349683fa-54a5-3b6b-abb7-781ac8ca0624.roa
File:                     349683fa-54a5-3b6b-abb7-781ac8ca0624.roa (raw, json)
Hash identifier:          r1qYl1Y5fsIO3XHskI58rGCfYn6POlBVEYgiYdQn52Q=
Subject key identifier:   22:B4:84:DC:E6:25:D3:1C:75:BC:9C:54:81:EB:44:07:97:AF:D0:A2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847CD09FE849748496789E30100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/349683fa-54a5-3b6b-abb7-781ac8ca0624.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     36383
IP address blocks:        104.135.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:fe:84:97:48:49:67:89:e3:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=0ef6fd50-b953-4bfd-b04f-bb04e79621de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:e2:51:5f:c2:64:2b:3b:8a:01:47:97:4e:
                    64:6e:ee:9b:38:23:89:c8:5d:6d:ab:43:cc:d7:5f:
                    13:91:a1:cb:9f:88:b4:ec:2a:60:f4:cc:34:3a:26:
                    82:bc:9b:c0:7f:9a:23:f9:aa:5b:35:28:28:d8:7c:
                    79:4a:99:1a:27:d1:f0:d7:7f:83:bf:b3:db:a3:0a:
                    44:d9:4c:48:50:63:84:59:a8:15:8b:d0:69:f3:d8:
                    ed:e9:b8:ec:57:7b:c3:b7:54:6c:0d:97:50:81:d8:
                    02:3a:6d:f2:7a:08:fd:5d:af:2e:8b:16:b2:6a:81:
                    d7:aa:a9:dd:5a:bc:5b:73:d9:8d:74:d5:85:ea:5c:
                    42:95:c0:1a:db:8d:24:68:33:85:d5:58:cf:81:fc:
                    48:1d:78:5f:3b:28:97:fd:e1:f3:e4:9a:88:07:1d:
                    5d:06:5a:89:49:9f:9b:79:e0:ed:10:a2:48:b3:90:
                    fa:09:5b:c3:14:e8:96:ea:61:ea:02:81:ac:cf:0f:
                    14:e8:dd:7d:2d:cd:90:f3:88:05:3e:c6:d4:42:37:
                    6a:8e:b2:04:d8:e9:4e:6c:9b:09:30:39:85:e6:41:
                    4f:0f:e6:cf:b1:b1:c2:3e:d3:07:81:a3:9d:86:5b:
                    a5:42:1f:9d:06:bb:e1:da:f8:3e:01:db:d5:8f:12:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:84:DC:E6:25:D3:1C:75:BC:9C:54:81:EB:44:07:97:AF:D0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/349683fa-54a5-3b6b-abb7-781ac8ca0624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:3e:f8:b5:84:1d:23:5b:82:cf:f7:a1:cb:e6:ee:e6:59:
         40:db:df:eb:1c:e1:b8:b4:c7:86:48:e6:ce:06:26:fd:a9:8c:
         bf:b8:d4:27:0f:43:1b:e5:fe:13:04:54:16:11:50:85:6c:c4:
         8e:d6:80:41:fa:c4:54:33:d8:ae:8c:3c:69:d4:84:72:ae:b2:
         19:5b:52:e6:2e:e3:55:e6:65:4a:26:88:f7:72:24:2f:39:9c:
         a4:ef:b8:86:77:ac:8c:42:31:9f:07:84:3e:43:e1:89:1c:db:
         4f:ab:ed:d9:b9:2e:a3:c3:40:3e:85:52:68:09:d8:6f:a4:f0:
         b3:c2:5d:02:5b:91:a0:85:20:03:a3:21:21:a9:40:f0:42:fb:
         dc:58:ee:ee:b0:ec:67:ff:86:17:68:99:59:2f:b7:da:03:50:
         c4:9f:2e:5f:1c:d3:cc:9a:98:7d:16:5e:46:1a:9d:4b:10:49:
         82:76:c0:22:e7:91:cb:00:43:2e:28:5a:3d:df:75:f4:6f:c1:
         24:62:35:19:44:ae:78:23:d0:bf:c2:74:f5:35:b5:ac:85:83:
         9e:8c:31:57:f7:db:39:9c:57:c5:e1:82:29:c9:c8:12:38:06:
         78:84:22:21:b9:f4:bd:af:28:91:a2:e2:f1:1d:d7:1e:23:98:
         f9:77:9e:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfNCf6El0hJZ4njAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTEwNzE0MDAzOVoXDTI1MDIwNTE0MDAzOVowLzEtMCsGA1UEAxMk
MGVmNmZkNTAtYjk1My00YmZkLWIwNGYtYmIwNGU3OTYyMWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/iUV/CZCs7igFHl05kbu6bOCOJyF1tq0PM
118TkaHLn4i07Cpg9Mw0OiaCvJvAf5oj+apbNSgo2Hx5SpkaJ9Hw13+Dv7PbowpE
2UxIUGOEWagVi9Bp89jt6bjsV3vDt1RsDZdQgdgCOm3yegj9Xa8uixayaoHXqqnd
Wrxbc9mNdNWF6lxClcAa240kaDOF1VjPgfxIHXhfOyiX/eHz5JqIBx1dBlqJSZ+b
eeDtEKJIs5D6CVvDFOiW6mHqAoGszw8U6N19Lc2Q84gFPsbUQjdqjrIE2OlObJsJ
MDmF5kFPD+bPsbHCPtMHgaOdhlulQh+dBrvh2vg+AdvVjxJpWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCK0hNzmJdMcdbycVIHrRAeXr9CiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQ5NjgzZmEtNTRhNS0z
YjZiLWFiYjctNzgxYWM4Y2EwNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXUPvi1hB0jW4LP96HL5u7mWUDb3+sc4bi0x4ZI5s4GJv2pjL+41CcP
Qxvl/hMEVBYRUIVsxI7WgEH6xFQz2K6MPGnUhHKushlbUuYu41XmZUomiPdyJC85
nKTvuIZ3rIxCMZ8HhD5D4Ykc20+r7dm5LqPDQD6FUmgJ2G+k8LPCXQJbkaCFIAOj
ISGpQPBC+9xY7u6w7Gf/hhdomVkvt9oDUMSfLl8c08yamH0WXkYanUsQSYJ2wCLn
kcsAQy4oWj3fdfRvwSRiNRlErngj0L/CdPU1tayFg56MMVf32zmcV8XhginJyBI4
BniEIiG59L2vKJGi4vEd1x4jmPl3npA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:43 2024 by rpki-client on console-ams.rpki-client.org