Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa
File:                     7d236149-de2f-3afa-a239-d8caf0a03337.roa (raw, json)
Hash identifier:          fyp8aLwjsnsJXGB+p682NYrDEe0nS9IFLTya/NqcJQ0=
Subject key identifier:   22:BD:CB:3A:6A:E9:DA:59:B7:BD:6C:AB:4D:48:A5:92:14:99:87:0F
Certificate issuer:       /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
Certificate serial:       010D0C9F432858475910CB2B1B0AE54ED40C2E00
Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     16801
IP address blocks:        104.255.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cb:2b:1b:0a:e5:4e:d4:0c:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=0ee5708b-634a-41d3-8185-2f11619743aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:45:44:7b:7b:ec:c6:1d:f6:70:20:c1:d6:
                    91:be:bd:89:25:19:71:94:3d:f0:0c:13:58:ab:7a:
                    a4:e3:6b:05:37:df:45:a3:27:ae:08:c8:7c:87:0e:
                    e4:27:a4:a5:b9:6c:26:8a:b3:49:b1:7f:db:37:2a:
                    dd:66:9e:8a:34:4d:70:2f:37:12:67:17:43:32:28:
                    69:9a:65:78:d2:3e:4e:cf:f1:af:f4:ad:95:1d:33:
                    fb:3d:74:e7:cb:05:df:4c:15:88:73:3a:ff:4b:9b:
                    3f:b2:7f:99:6c:ba:53:63:f4:20:41:47:84:88:fe:
                    c6:e2:df:02:40:d0:1e:2a:97:bc:26:71:0e:42:85:
                    1c:65:70:3f:90:06:11:10:5e:43:18:f3:e1:ea:b0:
                    30:4b:74:2b:24:22:e2:75:12:d1:63:9a:1c:95:83:
                    fb:61:39:17:11:24:70:a3:56:04:ff:ad:86:6d:99:
                    df:36:bb:00:0b:c2:53:e2:93:c2:f9:41:fc:51:4d:
                    82:74:c0:19:01:74:e3:d1:bc:e5:62:ca:b9:5a:1e:
                    bb:84:fd:d4:d5:8d:03:ca:7c:15:e5:88:d9:7e:6f:
                    15:53:b2:c2:e5:72:73:df:71:6e:7d:57:d7:90:3b:
                    eb:b4:05:92:06:87:3d:ae:5b:0d:45:0c:91:99:54:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BD:CB:3A:6A:E9:DA:59:B7:BD:6C:AB:4D:48:A5:92:14:99:87:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl

            X509v3 Authority Key Identifier:
                keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:c2:0c:b2:53:0b:25:32:ad:bb:8d:ad:36:1d:b1:36:e6:
         0c:ee:17:bf:67:c2:d7:9e:fb:0f:b9:4f:73:da:96:47:f4:7d:
         29:56:69:18:03:76:ae:c2:d5:ac:ae:54:b3:91:97:5d:02:01:
         c8:f2:54:e9:b9:3d:df:7f:72:3a:b0:5e:51:88:2b:77:ec:0a:
         da:cc:b4:7e:ce:77:7e:6c:40:9d:cf:c9:53:f2:85:26:10:24:
         e5:28:29:61:d2:96:25:46:c5:1a:a8:bc:ed:05:25:ad:fb:03:
         bf:6e:bd:29:7f:d0:56:29:ad:fa:3d:23:1d:81:f8:97:fd:d3:
         91:4a:00:08:b7:21:5e:9a:c4:24:4a:2d:13:e3:cb:1a:4e:91:
         d3:2c:4a:76:ed:7a:d9:85:dc:2a:55:8b:db:b6:23:13:64:da:
         1a:e1:7c:ca:3d:5c:a0:b5:c2:40:79:ee:04:f7:be:7e:cb:1d:
         f0:3b:56:df:90:68:85:a5:e7:47:67:44:d3:23:a8:14:1e:3f:
         e5:f4:ba:6d:1e:49:2b:0b:39:10:af:61:10:ec:22:98:7e:8e:
         d9:5c:78:87:bd:12:66:1e:fd:a4:d5:fa:61:1e:95:14:9c:22:
         88:9c:38:3b:8e:cb:85:a3:98:26:06:65:ae:28:98:1e:79:99:
         33:b4:76:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMsrGwrlTtQMLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlk
N2FhMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
MGVlNTcwOGItNjM0YS00MWQzLTgxODUtMmYxMTYxOTc0M2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kVFRHt77MYd9nAgwdaRvr2JJRlxlD3wDBNY
q3qk42sFN99FoyeuCMh8hw7kJ6SluWwmirNJsX/bNyrdZp6KNE1wLzcSZxdDMihp
mmV40j5Oz/Gv9K2VHTP7PXTnywXfTBWIczr/S5s/sn+ZbLpTY/QgQUeEiP7G4t8C
QNAeKpe8JnEOQoUcZXA/kAYREF5DGPPh6rAwS3QrJCLidRLRY5oclYP7YTkXESRw
o1YE/62GbZnfNrsAC8JT4pPC+UH8UU2CdMAZAXTj0bzlYsq5Wh67hP3U1Y0DynwV
5YjZfm8VU7LC5XJz33FufVfXkDvrtAWSBoc9rlsNRQyRmVQAyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCK9yzpq6dpZt71sq01IpZIUmYcPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTNi
ZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvN2QyMzYxNDktZGUyZi0z
YWZhLWEyMzktZDhjYWYwYTAzMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEzYmRkNjctNzRiNS00MjY4LTk2
ZTctYjNjYmIwNDlkN2FhLzYxM2JkZDY3LTc0YjUtNDI2OC05NmU3LWIzY2JiMDQ5
ZDdhYS5jcmwwHwYDVR0jBBgwFoAUQE7XvfQ+9gx92AydL/8Ip/RiZXswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2Ni
YjA0OWQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMtwgyyUwslMq27ja02HbE25gzuF79nwtee+w+5T3Palkf0fSlWaRgD
dq7C1ayuVLORl10CAcjyVOm5Pd9/cjqwXlGIK3fsCtrMtH7Od35sQJ3PyVPyhSYQ
JOUoKWHSliVGxRqovO0FJa37A79uvSl/0FYprfo9Ix2B+Jf905FKAAi3IV6axCRK
LRPjyxpOkdMsSnbtetmF3CpVi9u2IxNk2hrhfMo9XKC1wkB57gT3vn7LHfA7Vt+Q
aIWl50dnRNMjqBQeP+X0um0eSSsLORCvYRDsIph+jtlceIe9EmYe/aTV+mEelRSc
IoicODuOy4WjmCYGZa4omB55mTO0dos=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org