Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10c39416-ccba-3e5a-bb73-6e72a46ac093.roa
File:                     10c39416-ccba-3e5a-bb73-6e72a46ac093.roa (raw, json)
Hash identifier:          sNDAUwRVpcCEHhH0C2nkXC5s9ZI0ExGjW73HfouMiEU=
Subject key identifier:   EC:1E:2E:1A:43:48:1A:6E:AC:6E:AF:F2:0D:E5:62:26:57:19:A4:40
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858458B088EB65518A69342132500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10c39416-ccba-3e5a-bb73-6e72a46ac093.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     45671
IP address blocks:        172.94.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8e:b6:55:18:a6:93:42:13:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=48211f42-1ecc-4b40-a976-74c27adfe0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:44:0b:2d:35:d1:a0:88:be:03:92:42:e0:
                    7f:d4:cd:4a:83:77:ac:c0:3c:80:9a:30:b3:f1:3c:
                    03:aa:db:f9:6b:03:49:22:d3:bb:e7:28:3f:5d:91:
                    c5:6a:c2:77:5e:57:b5:93:3a:f1:94:0f:ee:3b:21:
                    9e:ab:aa:13:25:f1:94:b3:20:60:bd:b3:64:1c:ae:
                    6f:ad:3e:56:98:f6:2f:ef:b4:0c:4a:9e:99:1b:e4:
                    82:01:3f:b8:3b:04:1e:20:d0:7e:3c:de:06:04:44:
                    32:49:b3:2b:ab:30:25:b4:dd:35:e0:f3:cf:55:3c:
                    13:c9:15:33:61:1d:e1:a3:23:0f:9e:b4:ac:e9:ce:
                    03:41:3b:a0:5e:75:c4:69:fc:1f:19:32:c7:54:30:
                    f8:f8:82:03:2b:88:b4:b2:9a:73:ca:26:d3:23:41:
                    83:7c:f9:cd:2f:e2:4b:86:8d:e3:e3:e7:5a:ac:25:
                    cd:bf:85:25:c8:38:10:e3:bd:ed:11:55:64:3b:24:
                    45:48:5a:38:bb:bc:9e:d4:ba:67:f8:fd:0d:a3:fb:
                    47:a8:f1:b4:d3:f4:24:d1:37:bb:bb:98:23:03:f6:
                    d2:0a:37:b1:b7:ba:2b:23:4b:6a:5b:25:eb:6b:35:
                    2c:64:83:ef:64:d4:77:28:4f:59:ae:7a:02:5f:73:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1E:2E:1A:43:48:1A:6E:AC:6E:AF:F2:0D:E5:62:26:57:19:A4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10c39416-ccba-3e5a-bb73-6e72a46ac093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:10:7c:72:56:17:be:83:9f:43:42:9e:52:33:1d:39:74:20:
         e2:e3:64:08:c9:2c:8d:76:11:1a:7f:02:17:c0:83:cf:49:74:
         27:2b:b8:57:05:5a:b6:61:f6:1a:45:a8:f1:b3:81:b0:7c:60:
         be:5d:8c:4a:b0:c4:f5:0b:c9:9b:df:9a:57:fd:d8:f8:09:51:
         a4:c5:51:8c:02:a4:c0:70:2d:4f:b5:92:cf:0e:01:3c:bc:02:
         a2:7b:23:10:38:89:a1:41:9f:dd:83:2d:bc:56:36:f9:e7:8b:
         c9:20:17:16:c8:9f:d8:cb:8a:ab:f6:2d:71:c5:81:34:35:65:
         d0:7d:37:d7:f7:14:f4:2a:7a:a7:e9:89:5a:a9:34:77:d9:18:
         ae:b1:f2:2f:6f:28:4f:70:1a:84:d2:46:da:b1:ae:84:06:fd:
         ca:76:98:9e:33:9b:38:7d:29:7d:ec:73:e6:df:b6:ec:fc:e8:
         f1:c7:6f:a2:6f:6a:2d:eb:1e:96:12:21:e6:c5:7e:f2:c7:9d:
         8f:de:83:37:02:24:01:69:e1:8d:9e:6d:fc:c2:ed:18:e7:32:
         72:ed:19:09:20:8a:85:f7:5f:cb:0c:3f:f8:01:be:4c:e9:a0:
         4c:d8:bf:6d:df:ae:0e:83:e5:67:dc:cc:06:85:db:0f:aa:bd:
         4d:8f:c8:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWLCI62VRimk0ITJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk
NDgyMTFmNDItMWVjYy00YjQwLWE5NzYtNzRjMjdhZGZlMGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ1ECy010aCIvgOSQuB/1M1Kg3eswDyAmjCz
8TwDqtv5awNJItO75yg/XZHFasJ3Xle1kzrxlA/uOyGeq6oTJfGUsyBgvbNkHK5v
rT5WmPYv77QMSp6ZG+SCAT+4OwQeINB+PN4GBEQySbMrqzAltN014PPPVTwTyRUz
YR3hoyMPnrSs6c4DQTugXnXEafwfGTLHVDD4+IIDK4i0sppzyibTI0GDfPnNL+JL
ho3j4+darCXNv4UlyDgQ473tEVVkOyRFSFo4u7ye1Lpn+P0No/tHqPG00/Qk0Te7
u5gjA/bSCjext7orI0tqWyXrazUsZIPvZNR3KE9ZrnoCX3ORywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOweLhpDSBpurG6v8g3lYiZXGaRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTBjMzk0MTYtY2NiYS0z
ZTVhLWJiNzMtNmU3MmE0NmFjMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYQfHJWF76Dn0NCnlIzHTl0IOLjZAjJLI12ERp/AhfAg89JdCcruFcF
WrZh9hpFqPGzgbB8YL5djEqwxPULyZvfmlf92PgJUaTFUYwCpMBwLU+1ks8OATy8
AqJ7IxA4iaFBn92DLbxWNvnni8kgFxbIn9jLiqv2LXHFgTQ1ZdB9N9f3FPQqeqfp
iVqpNHfZGK6x8i9vKE9wGoTSRtqxroQG/cp2mJ4zmzh9KX3sc+bftuz86PHHb6Jv
ai3rHpYSIebFfvLHnY/egzcCJAFp4Y2ebfzC7RjnMnLtGQkgioX3X8sMP/gBvkzp
oEzYv23frg6D5WfczAaF2w+qvU2PyCo=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:55 2024 by rpki-client on console-ams.rpki-client.org