Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36f190f4-3724-377e-a511-b865a5783973.roa
File:                     36f190f4-3724-377e-a511-b865a5783973.roa (raw, json)
Hash identifier:          gJCDX0FIdUJX0QbbKbjgNlHY04IiQmpUbNR5cOzVGio=
Subject key identifier:   69:91:B0:F8:F9:8B:5D:44:25:6A:C5:CD:FB:0B:F4:89:44:1C:27:CD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BBA67EEA74A8A5E6E43BC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36f190f4-3724-377e-a511-b865a5783973.roa
Signing time:             Mon 18 Mar 2024 22:15:54 +0000
ROA not before:           Mon 18 Mar 2024 22:15:54 +0000
ROA not after:            Sun 16 Jun 2024 22:15:54 +0000
asID:                     36383
IP address blocks:        104.135.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:a6:7e:ea:74:a8:a5:e6:e4:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:15:54 2024 GMT
            Not After : Jun 16 22:15:54 2024 GMT
        Subject: CN=6492d5cc-1bca-416f-b9ed-94e63fafd674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:b5:da:4b:ed:6c:7c:29:4c:68:fa:a0:01:
                    29:3a:b2:fd:c2:6e:f0:43:40:b2:10:08:70:04:ce:
                    b1:78:ad:a0:30:19:c3:7f:d3:0c:c5:17:32:39:2d:
                    93:01:47:fe:8c:31:56:ff:6b:3b:88:c2:0c:de:fc:
                    aa:0c:2a:86:60:bb:e7:2a:2c:b6:28:9a:bf:2c:9e:
                    13:f9:be:a8:98:29:a4:c5:ee:5d:ac:0a:ae:d0:97:
                    f7:2c:0d:97:f7:83:e4:8d:fd:e6:26:9f:1a:03:04:
                    b7:f7:c3:47:00:d8:ac:2d:f8:31:b0:a7:c5:a3:81:
                    4a:e4:44:95:0d:bf:c4:0a:cc:9a:27:ff:99:37:95:
                    91:6e:13:42:a9:b0:0f:de:a9:2b:6e:48:40:bc:ce:
                    fc:93:4f:5d:17:b4:53:3d:f4:06:70:fc:a4:f0:6b:
                    38:b6:65:17:62:bf:d9:e4:5f:b0:c1:89:46:44:db:
                    ca:bc:b4:e0:93:03:ec:0b:a8:16:d7:b1:e5:ac:30:
                    8d:96:23:2d:8b:3e:e0:f8:2d:ea:2b:7a:7f:06:ba:
                    92:ff:67:cb:a9:84:af:cc:06:e4:5a:30:57:3b:0d:
                    9c:b7:0e:f0:77:cb:8e:ed:04:34:ae:1f:1d:e8:0e:
                    b8:d9:63:29:25:b6:60:cf:e2:e7:37:d5:0f:1d:2c:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:B0:F8:F9:8B:5D:44:25:6A:C5:CD:FB:0B:F4:89:44:1C:27:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36f190f4-3724-377e-a511-b865a5783973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:40:c3:53:99:3b:70:37:d6:c4:72:7f:8f:53:92:40:07:
         98:fc:1b:30:a7:8d:dc:f9:40:50:12:6c:0a:f9:3c:de:24:68:
         ae:c3:42:70:a4:0a:07:1c:5c:b8:8e:d7:b7:06:db:4f:a3:be:
         0f:b1:bf:9f:f3:8d:06:6a:db:d9:8a:ba:86:4f:be:97:f9:89:
         5e:55:4c:6e:5d:14:78:15:35:1b:18:c6:a4:e6:73:be:a9:fe:
         fb:c2:78:ec:08:45:da:ea:ea:c6:57:c1:95:a0:b3:ec:48:35:
         4e:82:b7:29:6a:95:99:d4:54:7c:72:42:06:91:de:e6:5f:17:
         f3:39:f4:54:e0:fc:69:da:91:06:48:f7:71:fd:58:6a:07:dc:
         c0:60:ef:9f:0c:37:2b:db:8d:24:4d:b8:7a:61:58:70:03:ba:
         ac:4f:2f:73:75:b4:7b:9a:7b:d5:7b:c8:44:7a:ed:49:6f:d3:
         13:07:2d:66:9c:88:30:ed:83:22:96:16:ab:09:eb:97:46:f6:
         d4:f5:ea:93:cf:e7:1a:3a:0f:29:b1:4c:34:85:39:e5:87:40:
         3d:3b:ea:58:72:70:eb:fb:a7:b2:a8:a9:e2:70:58:9e:64:de:
         b0:c2:a0:60:3c:e3:a9:a6:0f:45:73:bf:0b:10:c4:09:b3:64:
         8c:84:71:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu6Z+6nSopebkO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDMxODIyMTU1NFoXDTI0MDYxNjIyMTU1NFowLzEtMCsGA1UEAxMk
NjQ5MmQ1Y2MtMWJjYS00MTZmLWI5ZWQtOTRlNjNmYWZkNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUa12kvtbHwpTGj6oAEpOrL9wm7wQ0CyEAhw
BM6xeK2gMBnDf9MMxRcyOS2TAUf+jDFW/2s7iMIM3vyqDCqGYLvnKiy2KJq/LJ4T
+b6omCmkxe5drAqu0Jf3LA2X94Pkjf3mJp8aAwS398NHANisLfgxsKfFo4FK5ESV
Db/ECsyaJ/+ZN5WRbhNCqbAP3qkrbkhAvM78k09dF7RTPfQGcPyk8Gs4tmUXYr/Z
5F+wwYlGRNvKvLTgkwPsC6gW17HlrDCNliMtiz7g+C3qK3p/BrqS/2fLqYSvzAbk
WjBXOw2ctw7wd8uO7QQ0rh8d6A642WMpJbZgz+LnN9UPHSzC+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmRsPj5i11EJWrFzfsL9IlEHCfNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzZmMTkwZjQtMzcyNC0z
NzdlLWE1MTEtYjg2NWE1NzgzOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGB6QMNTmTtwN9bEcn+PU5JAB5j8GzCnjdz5QFASbAr5PN4kaK7DQnCk
CgccXLiO17cG20+jvg+xv5/zjQZq29mKuoZPvpf5iV5VTG5dFHgVNRsYxqTmc76p
/vvCeOwIRdrq6sZXwZWgs+xINU6CtylqlZnUVHxyQgaR3uZfF/M59FTg/GnakQZI
93H9WGoH3MBg758MNyvbjSRNuHphWHADuqxPL3N1tHuae9V7yER67Ulv0xMHLWac
iDDtgyKWFqsJ65dG9tT16pPP5xo6DymxTDSFOeWHQD076lhycOv7p7KoqeJwWJ5k
3rDCoGA846mmD0VzvwsQxAmzZIyEcbo=
-----END CERTIFICATE-----
Generated at Sat May 11 09:50:04 2024 by rpki-client on console-fra.rpki-client.org