Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa
File:                     29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa (raw, json)
Hash identifier:          fB0DJulhzXfCpS9WeYew/nwMBpYv1KMkn7qHGF5hvNc=
Subject key identifier:   40:45:59:18:10:3B:A9:F1:80:D0:2F:09:07:B0:E5:EA:93:67:CE:66
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F43285845CE08FA64CD96710514786C00
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     46906
IP address blocks:        104.245.248.0/21 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:fa:64:cd:96:71:05:14:78:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=bbd95910-adc8-4180-95af-dc6e35a069b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:b7:f1:a4:7f:a7:f8:6f:65:5a:5f:7c:6e:
                    f3:85:10:bf:28:c1:97:84:22:80:33:e5:8d:87:81:
                    64:96:1d:9c:6a:32:75:c6:a5:c6:40:fc:e9:07:b5:
                    41:95:a7:37:d2:48:09:4d:ce:92:19:02:e7:b7:4a:
                    22:f8:f8:af:c4:39:ae:90:62:7b:cd:51:e1:94:2e:
                    43:81:d2:75:d8:16:14:f7:71:08:d2:47:f6:c1:c4:
                    c9:eb:a7:65:87:b7:f8:2b:d2:d4:8c:49:23:38:cc:
                    04:c7:91:42:e6:e5:ee:3a:07:85:94:86:6b:8e:67:
                    2d:5b:8e:c4:c9:ce:14:4d:4f:12:49:8b:e6:ca:d9:
                    93:2a:a1:66:58:1c:b0:6a:1b:ad:5c:65:84:83:14:
                    0c:36:f3:0b:18:10:7e:ba:d2:84:41:51:a0:c8:25:
                    03:f8:d7:8f:04:12:12:08:91:26:57:07:00:37:79:
                    f6:f4:d7:f1:fa:50:41:d7:86:db:75:ed:f5:74:85:
                    f4:9b:4d:06:01:bd:85:3c:a8:74:11:85:3d:c8:ed:
                    91:b2:23:55:95:9c:b1:62:4a:e6:cc:94:ba:ed:48:
                    3c:bb:66:10:a3:f7:30:e5:e3:13:12:50:59:a4:a1:
                    0d:f8:61:c1:75:5e:73:b5:66:f6:ed:8b:0e:22:5a:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:59:18:10:3B:A9:F1:80:D0:2F:09:07:B0:E5:EA:93:67:CE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:4f:d2:cb:71:85:a5:26:e1:49:09:c2:d3:ef:58:aa:99:c4:
         f4:d7:e4:18:88:8e:b3:08:dc:e8:e0:e1:82:86:f9:50:c9:e5:
         4d:18:b5:22:b7:44:64:30:4c:6a:f6:9e:95:6f:88:be:b3:de:
         3f:86:7e:03:3f:e3:7f:39:9a:07:1f:e9:a2:3d:9b:08:77:05:
         07:dd:07:1e:c1:a3:b8:e6:0f:bc:70:64:8c:98:0f:56:43:3f:
         5f:3a:1c:90:83:50:17:79:68:39:4b:cd:66:58:2a:4b:21:fd:
         c7:2e:f8:8b:ed:2b:36:d6:82:ab:e7:d9:23:44:ec:ef:19:83:
         ca:6d:11:a7:4d:3b:84:a5:48:af:d1:54:a6:5e:53:ba:cf:31:
         4e:06:7e:be:9b:ef:2a:9f:05:46:64:30:51:33:0b:fb:67:c5:
         7b:ad:97:3f:d7:22:3f:09:ad:c4:8c:59:0d:19:bb:42:99:63:
         0e:43:b8:fa:b1:7e:e6:dd:2a:cf:42:04:38:16:b3:26:26:fc:
         cf:72:48:98:be:9e:73:93:9a:5f:61:da:d4:ef:8c:f3:55:3e:
         ed:d5:d9:a0:f3:10:b0:47:0a:8b:45:e6:3d:2b:98:a8:93:73:
         3b:3e:78:07:6a:a5:6a:e4:e0:25:89:77:7d:ba:93:d1:0e:15:
         2b:f5:ee:e5
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEXOCPpkzZZxBRR4bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzNjZjN2ItOGRlNS00NjIyLTlmM2QtODliYjM2ZTU3
ZGY1MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
YmJkOTU5MTAtYWRjOC00MTgwLTk1YWYtZGM2ZTM1YTA2OWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjW38aR/p/hvZVpffG7zhRC/KMGXhCKAM+WN
h4Fklh2cajJ1xqXGQPzpB7VBlac30kgJTc6SGQLnt0oi+PivxDmukGJ7zVHhlC5D
gdJ12BYU93EI0kf2wcTJ66dlh7f4K9LUjEkjOMwEx5FC5uXuOgeFlIZrjmctW47E
yc4UTU8SSYvmytmTKqFmWBywahutXGWEgxQMNvMLGBB+utKEQVGgyCUD+NePBBIS
CJEmVwcAN3n29Nfx+lBB14bbde31dIX0m00GAb2FPKh0EYU9yO2RsiNVlZyxYkrm
zJS67Ug8u2YQo/cw5eMTElBZpKEN+GHBdV5ztWb27YsOIlpnjQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFEBFWRgQO6nxgNAvCQew5eqTZ85mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NTM2
NmM3Yi04ZGU1LTQ2MjItOWYzZC04OWJiMzZlNTdkZjUvMjliMzVjODItNmExYi0z
ZDExLWI3ZjQtNWY5MGQ2YjNkNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDUzNjZjN2ItOGRlNS00NjIyLTlm
M2QtODliYjM2ZTU3ZGY1LzQ1MzY2YzdiLThkZTUtNDYyMi05ZjNkLTg5YmIzNmU1
N2RmNS5jcmwwHwYDVR0jBBgwFoAUr7+F3/AUj+PGZgjiAAyCJf7vmAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NTM2NmM3Yi04ZGU1LTQ2MjItOWYzZC04OWJi
MzZlNTdkZjUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDaPX4AwQE
kkcQAwQEoE9QAwQEwB6gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALJP0stxhaUm4UkJwtPvWKqZxPTX5BiI
jrMI3Ojg4YKG+VDJ5U0YtSK3RGQwTGr2npVviL6z3j+GfgM/4385mgcf6aI9mwh3
BQfdBx7Bo7jmD7xwZIyYD1ZDP186HJCDUBd5aDlLzWZYKksh/ccu+IvtKzbWgqvn
2SNE7O8Zg8ptEadNO4SlSK/RVKZeU7rPMU4Gfr6b7yqfBUZkMFEzC/tnxXutlz/X
Ij8JrcSMWQ0Zu0KZYw5DuPqxfubdKs9CBDgWsyYm/M9ySJi+nnOTml9h2tTvjPNV
Pu3V2aDzELBHCotF5j0rmKiTczs+eAdqpWrk4CWJd326k9EOFSv17uU=
-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:12 2024 by rpki-client on console-fra.rpki-client.org