Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
File:                     44f4f3da-18f8-3804-9775-d4656e898e07.roa (raw, json)
Hash identifier:          dOo7cY17WSLfin7WnLQVkB2YHuVmyHyNR8oJmmD5m2A=
Subject key identifier:   75:D5:B2:62:00:B3:29:FC:2D:EA:73:37:1F:7B:6D:A9:9A:F7:59:6C
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F6D247B3E6876F932BC0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        174.137.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:d2:47:b3:e6:87:6f:93:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=7609b3f8-f294-4d29-b749-f7bed8914467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:35:11:44:98:3f:3b:23:0b:38:bc:b7:e6:
                    92:39:c7:30:02:ae:c5:eb:b0:c7:31:7f:01:f2:62:
                    e8:60:b3:c0:77:c9:df:b4:58:1a:22:2d:52:14:5c:
                    18:27:ca:ce:01:f1:34:ab:1e:df:c8:16:19:61:58:
                    67:70:fa:05:3b:5c:47:22:fd:98:cc:6f:dd:ce:de:
                    39:a2:e1:33:07:51:84:68:c1:42:b1:02:de:5e:82:
                    83:b1:7d:06:18:fa:a7:39:d1:c0:4c:20:24:37:4b:
                    2b:14:dc:88:7d:51:ba:19:53:e6:b0:ef:d7:ac:fe:
                    cc:7e:7e:4a:e8:0c:b4:a0:3c:95:b1:b3:8d:f5:ba:
                    49:da:a5:24:1b:8f:36:a9:6d:b3:a9:61:76:52:fb:
                    eb:d3:29:59:96:0a:ff:cf:ba:3a:5c:ca:86:2e:5c:
                    78:1b:43:e4:5b:6a:bb:d8:ed:d5:d4:2b:39:84:72:
                    06:3c:de:da:60:7d:ce:02:b3:44:42:f6:39:56:57:
                    ea:0e:99:9b:75:f0:c4:5e:87:87:9f:78:96:95:2f:
                    88:6a:f5:36:4f:78:50:d2:c4:7c:df:5b:2e:90:d6:
                    60:87:63:f5:85:1d:f4:c9:f6:3b:5f:69:42:eb:7e:
                    f0:e1:79:36:2c:ff:ad:3d:77:e9:a4:08:62:42:6f:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D5:B2:62:00:B3:29:FC:2D:EA:73:37:1F:7B:6D:A9:9A:F7:59:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:33:18:dc:5a:93:5e:2e:0e:1a:c4:35:22:2e:bb:9d:f5:24:
         78:2f:9f:e1:6d:99:96:43:c9:f4:f0:db:39:1d:f0:a3:16:c7:
         1c:9d:0e:f5:df:3c:bc:e5:63:d6:b9:3c:2b:64:ea:32:5b:d2:
         68:95:58:9d:fd:95:ae:84:14:cd:31:46:58:6c:4d:44:00:c6:
         98:ce:c4:11:db:e7:ea:e2:22:4d:e8:69:41:08:b1:07:07:5f:
         d4:80:ef:22:ea:a1:20:6a:20:f8:2e:d4:49:18:4b:f5:24:8e:
         4d:cb:ac:00:ae:69:69:34:e8:ab:b6:eb:cd:87:53:c0:0a:48:
         8f:3a:3d:31:2b:18:da:ac:e9:92:34:44:6d:a2:e3:59:62:a7:
         7b:9f:ba:17:ef:08:f2:9d:ad:b7:8b:f0:19:69:67:41:33:bc:
         77:ce:fe:58:6d:41:0d:3e:4e:da:09:7f:8a:92:c0:fd:08:9e:
         78:77:79:76:b3:34:9f:1c:45:15:34:00:6f:e1:30:8a:b0:1e:
         86:38:8f:1a:28:de:eb:9a:8b:53:cc:f9:c6:93:02:23:a1:27:
         ed:8e:04:c5:9e:08:b0:ab:9b:9c:14:8c:8a:9c:d6:44:2d:6a:
         b3:f4:21:24:03:5e:a0:68:47:ba:91:46:41:88:3a:55:55:41:
         ca:97:1b:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPbSR7Pmh2+TK8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
NzYwOWIzZjgtZjI5NC00ZDI5LWI3NDktZjdiZWQ4OTE0NDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NU1EUSYPzsjCzi8t+aSOccwAq7F67DHMX8B
8mLoYLPAd8nftFgaIi1SFFwYJ8rOAfE0qx7fyBYZYVhncPoFO1xHIv2YzG/dzt45
ouEzB1GEaMFCsQLeXoKDsX0GGPqnOdHATCAkN0srFNyIfVG6GVPmsO/XrP7Mfn5K
6Ay0oDyVsbON9bpJ2qUkG482qW2zqWF2Uvvr0ylZlgr/z7o6XMqGLlx4G0PkW2q7
2O3V1Cs5hHIGPN7aYH3OArNEQvY5VlfqDpmbdfDEXoeHn3iWlS+IavU2T3hQ0sR8
31sukNZgh2P1hR30yfY7X2lC637w4Xk2LP+tPXfppAhiQm+xpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXVsmIAsyn8LepzNx97bama91lsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNDRmNGYzZGEtMThmOC0z
ODA0LTk3NzUtZDQ2NTZlODk4ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroloMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQzGNxak14uDhrENSIuu531JHgvn+FtmZZDyfTw2zkd8KMWxxydDvXf
PLzlY9a5PCtk6jJb0miVWJ39la6EFM0xRlhsTUQAxpjOxBHb5+riIk3oaUEIsQcH
X9SA7yLqoSBqIPgu1EkYS/Ukjk3LrACuaWk06Ku2682HU8AKSI86PTErGNqs6ZI0
RG2i41lip3ufuhfvCPKdrbeL8BlpZ0EzvHfO/lhtQQ0+TtoJf4qSwP0Innh3eXaz
NJ8cRRU0AG/hMIqwHoY4jxoo3uuai1PM+caTAiOhJ+2OBMWeCLCrm5wUjIqc1kQt
arP0ISQDXqBoR7qRRkGIOlVVQcqXG5Y=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org