Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36f190f4-3724-377e-a511-b865a5783973.roa
File:                     36f190f4-3724-377e-a511-b865a5783973.roa (raw, json)
Hash identifier:          1fVKTiFUKmOE8qeLWC2oHTumI7yCR8/gcXopvJxt608=
Subject key identifier:   A6:DC:C9:92:91:4C:FA:FB:CC:C5:5D:B8:59:3E:04:47:1B:4C:15:A1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094DF6FDFC46927525A4500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36f190f4-3724-377e-a511-b865a5783973.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36383
IP address blocks:        104.135.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:df:6f:df:c4:69:27:52:5a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=e4f081dc-9579-4c09-9d76-aee39da88142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:4b:f4:59:22:db:bb:9f:ad:05:10:58:2b:
                    76:a5:6f:c3:f9:c4:84:2e:a5:5a:0a:0a:1c:6e:f2:
                    e8:15:9b:1d:61:47:8c:ae:3e:7b:63:f4:16:e7:fd:
                    a3:1b:7b:2d:7d:f8:33:57:b0:91:21:43:68:3a:6e:
                    5f:9c:08:35:39:a7:ea:05:a6:4d:07:e6:94:27:7e:
                    d6:9e:19:b6:00:d9:d3:d9:40:e7:cf:78:d3:24:2b:
                    5f:6a:08:ad:e4:31:89:75:f2:9b:95:d3:7d:fe:ad:
                    58:b1:ce:ae:2e:99:7a:33:ff:a1:00:bb:c3:86:12:
                    1b:8a:81:f3:6b:60:fd:7e:75:6a:55:11:c0:89:fe:
                    20:3f:11:ab:7f:14:33:db:23:49:f1:fb:bb:a9:26:
                    3a:d1:b3:ed:02:fe:1a:a3:f9:91:31:7b:d1:fe:77:
                    38:3d:b1:3d:21:7a:64:ef:f8:e0:f0:75:d4:84:81:
                    19:e0:49:cd:fa:51:95:48:f3:e1:a2:1a:73:3d:8c:
                    e6:44:2e:bc:df:15:72:e7:0a:ce:59:33:5b:f4:15:
                    ba:30:05:b6:8e:fa:b7:09:d7:ed:77:ed:5a:03:5a:
                    d9:72:7d:7e:76:db:d6:e8:c9:e9:e9:3d:29:1f:c2:
                    c2:d8:02:e5:b6:b2:db:68:90:d2:e2:5d:81:cf:74:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DC:C9:92:91:4C:FA:FB:CC:C5:5D:B8:59:3E:04:47:1B:4C:15:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36f190f4-3724-377e-a511-b865a5783973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:87:3b:40:2d:1f:ec:65:16:7c:aa:d8:9f:47:2d:3c:37:
         fb:d3:cd:dc:ff:44:35:75:7a:a9:0a:1d:5d:ac:3d:7f:9f:51:
         38:57:ab:ab:6b:13:1d:91:ad:30:19:1f:47:87:09:e5:d4:23:
         d9:44:5c:2e:11:fa:ca:28:97:6f:3f:56:fc:9e:c9:de:54:2d:
         1c:63:a9:28:7a:dc:a8:42:05:4d:38:b1:ba:90:c9:c4:b6:f2:
         67:5a:42:e2:f9:25:26:f4:fb:5a:46:b6:b3:df:04:e2:ea:98:
         ed:6d:0e:cf:16:d1:75:0c:8f:9e:7f:ca:84:aa:34:68:a7:ff:
         3e:d2:d4:3a:8e:d4:2c:d3:dd:9f:c2:ea:b5:49:b5:c1:0f:be:
         72:c8:55:ea:ab:a2:df:03:b2:03:fd:07:66:fe:9c:c6:b7:9b:
         d8:1d:6c:d6:2e:ee:2a:8f:d9:90:e1:1e:0d:e4:19:3c:e9:75:
         ab:3d:8c:c8:14:a7:db:fe:88:7d:f1:d2:b6:8c:56:0c:4b:6b:
         c0:71:54:aa:4b:09:fb:bd:68:ee:54:5f:f2:be:2d:e0:a0:11:
         e5:1f:81:15:5a:d4:92:73:aa:e7:71:dd:d7:85:f7:d2:fb:4f:
         db:cb:61:7b:0a:68:d6:ff:70:d7:77:89:79:4d:57:a3:16:26:
         bb:14:5e:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglN9v38RpJ1JaRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZTRmMDgxZGMtOTU3OS00YzA5LTlkNzYtYWVlMzlkYTg4MTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6dL9Fki27ufrQUQWCt2pW/D+cSELqVaCgoc
bvLoFZsdYUeMrj57Y/QW5/2jG3stffgzV7CRIUNoOm5fnAg1OafqBaZNB+aUJ37W
nhm2ANnT2UDnz3jTJCtfagit5DGJdfKbldN9/q1Ysc6uLpl6M/+hALvDhhIbioHz
a2D9fnVqVRHAif4gPxGrfxQz2yNJ8fu7qSY60bPtAv4ao/mRMXvR/nc4PbE9IXpk
7/jg8HXUhIEZ4EnN+lGVSPPhohpzPYzmRC683xVy5wrOWTNb9BW6MAW2jvq3Cdft
d+1aA1rZcn1+dtvW6Mnp6T0pH8LC2ALltrLbaJDS4l2Bz3TeQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbcyZKRTPr7zMVduFk+BEcbTBWhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzZmMTkwZjQtMzcyNC0z
NzdlLWE1MTEtYjg2NWE1NzgzOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwDhztALR/sZRZ8qtifRy08N/vTzdz/RDV1eqkKHV2sPX+fUThXq6tr
Ex2RrTAZH0eHCeXUI9lEXC4R+sool28/Vvyeyd5ULRxjqSh63KhCBU04sbqQycS2
8mdaQuL5JSb0+1pGtrPfBOLqmO1tDs8W0XUMj55/yoSqNGin/z7S1DqO1CzT3Z/C
6rVJtcEPvnLIVeqrot8DsgP9B2b+nMa3m9gdbNYu7iqP2ZDhHg3kGTzpdas9jMgU
p9v+iH3x0raMVgxLa8BxVKpLCfu9aO5UX/K+LeCgEeUfgRVa1JJzqudx3deF99L7
T9vLYXsKaNb/cNd3iXlNV6MWJrsUXs0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:48 2024 by rpki-client on console-fra.rpki-client.org