Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa
File:                     c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa (raw, json)
Hash identifier:          to/7k1eRETRb1IjfalcoNGXlf3BQqp4RlIalvPM9bus=
Subject key identifier:   95:F3:E9:51:E5:B0:7F:C6:56:FF:77:C3:9E:0C:05:39:0F:3E:5E:77
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858475DEF5B7C4F2E081D79F37180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa
Signing time:             Sat 28 Sep 2024 18:52:24 +0000
ROA not before:           Sat 28 Sep 2024 18:52:24 +0000
ROA not after:            Fri 27 Dec 2024 19:52:24 +0000
asID:                     23470
IP address blocks:        104.243.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:ef:5b:7c:4f:2e:08:1d:79:f3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 28 18:52:24 2024 GMT
            Not After : Dec 27 19:52:24 2024 GMT
        Subject: CN=773ec557-cd8f-412f-b97c-2f4107281867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:67:03:3c:87:11:bc:24:ed:cb:ec:43:c7:
                    cd:5b:a4:6f:21:b9:e2:56:00:cd:5c:6d:09:d2:4a:
                    d4:c7:55:46:12:a5:96:99:9a:16:2c:19:ee:0f:7d:
                    66:e7:0b:72:96:fb:c7:7c:c7:6f:8b:87:59:ca:4d:
                    a3:10:5c:4d:51:96:43:7c:6e:92:cd:88:67:b7:c2:
                    74:16:6b:6a:30:0c:44:3c:f9:22:67:30:d4:4e:39:
                    d0:33:bf:48:c6:2c:6d:a0:ba:44:b2:20:57:8f:99:
                    4a:24:7a:94:e5:24:25:8e:a5:82:c1:aa:fe:ab:42:
                    a9:8d:69:ea:83:53:93:a2:11:0f:ea:e9:c4:5c:8f:
                    12:3e:8b:bd:3d:85:2f:f9:ad:3e:16:db:2f:67:45:
                    d7:f6:08:78:b9:41:e5:4b:13:20:8d:0c:d7:d7:b3:
                    af:d7:93:43:56:bf:28:52:61:45:95:40:0d:95:3d:
                    3b:c9:9b:19:8e:94:3e:1d:3b:0a:c9:b4:38:75:2c:
                    fc:78:18:f5:74:4e:e1:1a:eb:74:5f:78:a6:26:d7:
                    39:f5:8c:8a:ba:9f:5e:c5:c4:eb:86:14:4d:b1:a3:
                    79:a4:de:4d:6a:8f:05:e9:ae:b6:99:94:aa:4c:59:
                    9b:24:ef:dc:50:8d:fc:5b:36:0a:bf:e5:fc:52:22:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:E9:51:E5:B0:7F:C6:56:FF:77:C3:9E:0C:05:39:0F:3E:5E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6a1fba7-0b59-34ef-aee6-2752f67e166a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:94:ed:fe:77:fd:07:20:cb:54:01:bd:70:91:8e:02:03:b6:
         37:2d:e7:e3:aa:bb:b3:e0:eb:1c:51:fe:0a:cf:b5:33:43:32:
         34:ea:9e:bc:b4:a1:2b:3b:d4:b3:cb:8a:c1:0c:12:cb:13:38:
         44:34:c8:b6:f3:2a:31:10:0f:6c:93:f6:f4:9a:a9:f1:c0:84:
         7e:61:b6:ff:9b:34:1a:23:9a:87:c4:a8:0e:18:2d:10:18:17:
         f7:ea:16:4f:2c:1b:63:92:78:69:85:8f:65:60:b2:b2:2e:f3:
         6e:87:14:8e:8d:e8:5d:e7:4b:3c:a5:3b:2f:fd:6e:15:ba:81:
         3a:23:ab:3d:69:66:69:42:e1:96:bf:7b:49:df:85:89:cb:72:
         2a:93:45:47:1f:df:f5:91:1c:8e:23:c6:9b:9f:06:d2:e6:11:
         e2:65:7b:e5:ab:0b:43:5e:91:1d:c8:78:11:c3:ea:cf:ba:eb:
         b8:8b:c1:4b:6d:c9:82:2a:e4:b5:b2:31:b8:73:77:97:60:2f:
         5f:d0:27:03:d5:ba:28:38:0c:78:88:75:79:fc:6e:c7:80:5f:
         2c:09:bc:d1:c5:d0:9b:bb:41:86:e4:bd:f2:c4:b8:0c:55:e4:
         c1:2a:e5:b4:fb:69:09:ae:14:13:4a:63:04:f7:54:19:ff:f9:
         4a:23:60:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdd71t8Ty4IHXnzcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDkyODE4NTIyNFoXDTI0MTIyNzE5NTIyNFowLzEtMCsGA1UEAxMk
NzczZWM1NTctY2Q4Zi00MTJmLWI5N2MtMmY0MTA3MjgxODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K1nAzyHEbwk7cvsQ8fNW6RvIbniVgDNXG0J
0krUx1VGEqWWmZoWLBnuD31m5wtylvvHfMdvi4dZyk2jEFxNUZZDfG6SzYhnt8J0
FmtqMAxEPPkiZzDUTjnQM79IxixtoLpEsiBXj5lKJHqU5SQljqWCwar+q0KpjWnq
g1OTohEP6unEXI8SPou9PYUv+a0+FtsvZ0XX9gh4uUHlSxMgjQzX17Ov15NDVr8o
UmFFlUANlT07yZsZjpQ+HTsKybQ4dSz8eBj1dE7hGut0X3imJtc59YyKup9excTr
hhRNsaN5pN5Nao8F6a62mZSqTFmbJO/cUI38WzYKv+X8UiIAKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXz6VHlsH/GVv93w54MBTkPPl53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzZhMWZiYTctMGI1OS0z
NGVmLWFlZTYtMjc1MmY2N2UxNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKU7f53/Qcgy1QBvXCRjgIDtjct5+Oqu7Pg6xxR/grPtTNDMjTqnry0
oSs71LPLisEMEssTOEQ0yLbzKjEQD2yT9vSaqfHAhH5htv+bNBojmofEqA4YLRAY
F/fqFk8sG2OSeGmFj2VgsrIu826HFI6N6F3nSzylOy/9bhW6gTojqz1pZmlC4Za/
e0nfhYnLciqTRUcf3/WRHI4jxpufBtLmEeJle+WrC0NekR3IeBHD6s+667iLwUtt
yYIq5LWyMbhzd5dgL1/QJwPVuig4DHiIdXn8bseAXywJvNHF0Ju7QYbkvfLEuAxV
5MEq5bT7aQmuFBNKYwT3VBn/+UojYJo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:36 2024 by rpki-client on console-fra.rpki-client.org