Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa
File:                     c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa (raw, json)
Hash identifier:          uhrysx3zBUwHKfwmvAFtxJfPrV4hjl0VU+5QkREbHQM=
Subject key identifier:   7A:E5:9C:1E:67:D0:72:47:47:BE:46:40:6F:FE:0B:A5:15:B5:AB:E1
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F43285847DDCA0B3F6D2C535C6086B720
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        104.237.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:0b:3f:6d:2c:53:5c:60:86:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=fcad7866-8a2c-4750-9f8e-c7916aab9dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b8:bb:52:d5:cf:b4:f4:3f:b0:1f:eb:94:ba:
                    39:d9:3e:ab:82:e9:08:5d:dc:5c:8b:66:19:a9:8c:
                    7a:04:88:a1:e9:b9:58:d0:eb:14:51:c2:b1:61:5d:
                    8c:9c:c5:fb:e5:e2:4b:f0:2c:8c:71:c6:ff:c5:79:
                    ff:77:2b:06:90:8b:bc:59:ff:61:f5:07:de:47:10:
                    3f:d1:8f:e7:fe:06:46:76:0f:59:71:38:b0:2c:2b:
                    b4:77:33:29:6f:c9:4a:a4:65:d2:2a:f6:15:1b:f4:
                    2c:f0:cf:bb:56:91:24:ac:7f:4b:28:da:32:11:c0:
                    a8:fd:c2:c7:aa:4e:9f:e6:fe:69:e4:f9:73:e6:88:
                    dc:20:60:a8:ff:7e:c9:36:cd:4f:22:ed:12:e7:ac:
                    29:13:b4:8d:d7:b2:1c:bc:81:e4:f3:bc:f4:c1:a0:
                    78:de:15:e9:57:fb:3f:d2:bc:53:cf:ad:ea:9f:c5:
                    d8:bc:1f:3d:fa:a9:82:65:b0:4e:f7:24:11:c3:31:
                    e1:bc:76:10:d8:5f:4d:bd:a0:ad:4e:09:6a:1f:02:
                    0f:f0:08:08:06:44:b8:10:eb:e0:15:e0:41:e9:10:
                    b2:13:0c:39:9a:90:fc:93:f7:d9:11:9d:5f:3a:16:
                    37:f4:c2:06:8c:46:04:e8:05:b2:53:ce:0e:49:42:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E5:9C:1E:67:D0:72:47:47:BE:46:40:6F:FE:0B:A5:15:B5:AB:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:93:73:17:35:4a:48:48:b9:49:02:f0:f6:d3:fe:11:3a:bd:
         e8:96:79:e2:04:fd:34:ff:40:eb:dd:20:06:34:c2:3d:86:e9:
         31:0f:96:a1:7e:78:8a:c2:40:f6:9e:f2:1f:0f:5e:90:84:c5:
         b9:0f:64:fb:b8:6d:12:62:ba:a1:c4:10:61:c2:c9:8e:a3:d8:
         bc:68:41:15:83:1a:06:df:bb:bf:e0:16:af:cd:91:dc:a9:58:
         1e:8f:ca:72:50:84:b6:e9:69:cf:d0:d9:46:e3:f8:fc:3c:58:
         18:a9:42:1e:bc:e2:de:7f:73:17:aa:5c:18:6e:78:7a:66:35:
         4b:03:79:03:aa:d0:ea:36:cd:38:8d:55:ad:4b:e1:f2:84:f3:
         14:65:96:99:65:05:70:89:8e:80:0f:13:2e:b7:95:99:9f:b8:
         25:d6:89:8a:71:69:f3:b4:ee:cc:4f:00:d7:8a:50:9d:c0:f1:
         cf:1f:22:c4:ff:10:ee:8c:0b:cf:72:b4:c7:f7:9d:b4:90:b9:
         c8:db:74:05:c9:0a:1e:80:ae:e9:fc:83:11:e2:47:84:d2:cb:
         c2:b7:dc:82:d1:c8:21:6c:0d:97:e4:a9:fe:25:71:03:35:5a:
         95:c9:ed:ac:83:f7:0a:20:12:7b:e5:c7:1b:7a:46:01:8f:fb:
         43:47:ae:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdygs/bSxTXGCGtyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj
MTU1MB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk
ZmNhZDc4NjYtOGEyYy00NzUwLTlmOGUtYzc5MTZhYWI5ZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbi7UtXPtPQ/sB/rlLo52T6rgukIXdxci2YZ
qYx6BIih6blY0OsUUcKxYV2MnMX75eJL8CyMccb/xXn/dysGkIu8Wf9h9QfeRxA/
0Y/n/gZGdg9ZcTiwLCu0dzMpb8lKpGXSKvYVG/Qs8M+7VpEkrH9LKNoyEcCo/cLH
qk6f5v5p5Plz5ojcIGCo/37JNs1PIu0S56wpE7SN17IcvIHk87z0waB43hXpV/s/
0rxTz63qn8XYvB89+qmCZbBO9yQRwzHhvHYQ2F9NvaCtTglqHwIP8AgIBkS4EOvg
FeBB6RCyEww5mpD8k/fZEZ1fOhY39MIGjEYE6AWyU84OSUKk8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrlnB5n0HJHR75GQG/+C6UVtavhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl
NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYzhkMTViN2MtOGM4Ny0z
ZWY0LWFhNjYtMWY4M2RlNGUwNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw
MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl
YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk
ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOTcxc1SkhIuUkC8PbT/hE6veiWeeIE/TT/QOvdIAY0wj2G6TEPlqF+
eIrCQPae8h8PXpCExbkPZPu4bRJiuqHEEGHCyY6j2LxoQRWDGgbfu7/gFq/Nkdyp
WB6PynJQhLbpac/Q2Ubj+Pw8WBipQh684t5/cxeqXBhueHpmNUsDeQOq0Oo2zTiN
Va1L4fKE8xRllpllBXCJjoAPEy63lZmfuCXWiYpxafO07sxPANeKUJ3A8c8fIsT/
EO6MC89ytMf3nbSQucjbdAXJCh6Arun8gxHiR4TSy8K33ILRyCFsDZfkqf4lcQM1
WpXJ7ayD9wogEnvlxxt6RgGP+0NHrvY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org