Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa
File:                     aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json)
Hash identifier:          MvAG7E7G6b6RPyKsQBJtSEhEXsCx9eFVDXeWpwts380=
Subject key identifier:   41:9E:95:F9:FE:62:93:BE:D1:7B:BB:12:44:C0:1E:18:84:05:5A:6E
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F43285847EE8A3CFA74DA0D9524AE2B00
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        104.237.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:3c:fa:74:da:0d:95:24:ae:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=1560e569-a95d-4ae3-b252-2a0c15b908f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:05:c1:41:32:e7:b9:0b:8d:23:d9:84:11:
                    ed:1d:37:37:1c:48:d5:5a:f7:d2:7b:5c:02:01:47:
                    74:95:93:8a:a5:98:de:1f:d9:7f:bd:a6:b3:ab:6f:
                    ff:f4:c0:d4:51:c8:27:10:77:53:d9:09:c4:3e:3d:
                    a6:97:61:66:52:82:17:f1:f0:cb:5a:7f:8a:26:16:
                    9d:ca:18:4a:4d:bb:81:7c:41:3e:b2:33:0f:17:7a:
                    ec:5c:63:92:d5:75:75:54:86:cd:84:63:40:77:ed:
                    3a:8e:87:7a:cf:e1:97:5d:dd:6d:0f:0a:2a:74:68:
                    37:e2:1b:88:ff:85:25:f9:99:3d:d6:72:39:5b:7b:
                    e6:79:d2:0f:ab:cc:1d:30:7d:86:d5:68:74:f8:3e:
                    42:f4:24:5a:2b:2d:15:a2:07:40:2e:fc:d7:56:21:
                    48:95:5d:99:c4:8f:d1:fe:ca:94:81:c2:11:1c:51:
                    87:9a:02:29:6f:75:5e:a1:de:ca:69:cd:20:8f:e8:
                    a1:9e:72:0e:e6:a3:d2:e5:9e:d6:54:79:6a:04:6d:
                    ab:1e:d5:5e:ae:b7:91:c9:76:87:38:95:ec:41:81:
                    80:4e:69:66:c5:87:72:90:e1:c9:0f:f0:21:54:ae:
                    57:54:5a:98:66:09:53:24:8f:e5:23:c0:49:e1:99:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:95:F9:FE:62:93:BE:D1:7B:BB:12:44:C0:1E:18:84:05:5A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fb:d9:fa:6e:8a:8a:1a:32:eb:88:5d:a1:a0:38:d0:94:fa:
         39:2d:e5:85:c1:e7:3b:53:7e:22:e8:8e:76:58:b9:77:59:e2:
         38:5a:28:cc:db:dc:d9:f7:fc:b5:00:e8:de:13:31:e1:ae:8f:
         1b:1c:2e:1f:a8:f9:d8:8e:d5:6d:24:96:4c:89:1c:2a:c9:80:
         42:98:ad:0f:b3:ec:d4:18:86:f0:ce:d4:13:b8:8d:74:2b:ba:
         46:18:f1:9f:75:50:ea:21:aa:c9:9e:ec:14:d7:9b:a3:64:d4:
         f0:ce:4b:88:e2:3a:66:64:6d:32:c8:9c:48:88:c2:0e:0e:a0:
         47:3b:26:4b:1d:ca:db:dd:3e:5f:51:a0:e0:6a:59:20:50:1a:
         6e:61:d6:9f:e9:23:03:f3:99:88:f7:5d:ed:08:ac:e6:d7:6d:
         d6:44:d2:2c:51:dc:78:95:d1:68:c5:c6:09:86:97:77:94:2d:
         5d:47:2d:16:b0:d7:83:58:71:2e:12:e7:56:8d:fe:c0:88:7b:
         97:9c:ae:b4:69:f2:4d:1f:8e:b4:cb:fe:15:26:bf:60:5c:a0:
         1d:aa:72:6e:d8:cc:75:b2:1c:d1:d2:fc:8e:94:8a:32:49:e2:
         ff:34:b7:d8:ec:26:fb:f7:ee:e7:b7:2f:88:ba:87:2d:d5:b7:
         83:b9:1e:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijz6dNoNlSSuKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj
MTU1MB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk
MTU2MGU1NjktYTk1ZC00YWUzLWIyNTItMmEwYzE1YjkwOGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQFwUEy57kLjSPZhBHtHTc3HEjVWvfSe1wC
AUd0lZOKpZjeH9l/vaazq2//9MDUUcgnEHdT2QnEPj2ml2FmUoIX8fDLWn+KJhad
yhhKTbuBfEE+sjMPF3rsXGOS1XV1VIbNhGNAd+06jod6z+GXXd1tDwoqdGg34huI
/4Ul+Zk91nI5W3vmedIPq8wdMH2G1Wh0+D5C9CRaKy0VogdALvzXViFIlV2ZxI/R
/sqUgcIRHFGHmgIpb3Veod7Kac0gj+ihnnIO5qPS5Z7WVHlqBG2rHtVerreRyXaH
OJXsQYGATmlmxYdykOHJD/AhVK5XVFqYZglTJI/lI8BJ4ZnLIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGelfn+YpO+0Xu7EkTAHhiEBVpuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl
NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYWEwZGRhYzItNjM1Yy0z
MGI0LWJmMzctMTE5ZWQ4NGUzMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw
MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl
YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk
ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn72fpuiooaMuuIXaGgONCU+jkt5YXB5ztTfiLojnZYuXdZ4jhaKMzb
3Nn3/LUA6N4TMeGujxscLh+o+diO1W0klkyJHCrJgEKYrQ+z7NQYhvDO1BO4jXQr
ukYY8Z91UOohqsme7BTXm6Nk1PDOS4jiOmZkbTLInEiIwg4OoEc7JksdytvdPl9R
oOBqWSBQGm5h1p/pIwPzmYj3Xe0IrObXbdZE0ixR3HiV0WjFxgmGl3eULV1HLRaw
14NYcS4S51aN/sCIe5ecrrRp8k0fjrTL/hUmv2BcoB2qcm7YzHWyHNHS/I6UijJJ
4v80t9jsJvv37ue3L4i6hy3Vt4O5Hjc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org