Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
File:                     dd1a3125-5c2f-32ec-a661-69fe5e642535.roa (raw, json)
Hash identifier:          J+1QATxU70g5VAROOz0ql7HeQ3AHiQh9O3mj1mog+jE=
Subject key identifier:   75:1B:45:C1:D4:05:9F:50:A4:1F:DD:35:97:F0:5F:3B:1D:D1:07:FD
Certificate issuer:       /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial:       010D0C9F432858478E1BC187C093E0B699DEE180
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     40772
IP address blocks:        104.36.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c1:87:c0:93:e0:b6:99:de:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=ca021159-caaa-4d3b-be24-6b4f71856795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:78:e7:18:17:c0:08:13:4d:37:0a:bd:0c:
                    18:e6:1c:67:a3:2f:42:eb:23:37:ca:51:44:c5:3e:
                    be:d5:0e:9e:d1:90:8f:66:8c:8c:88:02:ff:0f:64:
                    2c:dd:0f:bd:77:39:cb:33:af:d6:c3:e0:6f:fe:ed:
                    05:21:9c:bf:03:e8:95:5f:90:97:5c:7d:d8:ba:05:
                    cb:30:f5:da:2e:60:6f:3e:18:08:a8:5f:15:7b:c8:
                    b2:0c:8c:d3:bf:e3:96:87:72:36:43:06:c7:16:6b:
                    27:df:9b:d9:e8:ce:06:74:b3:25:86:68:44:4a:f8:
                    52:4e:09:89:30:e8:0f:d2:2c:fb:db:47:5b:61:a6:
                    24:db:45:a2:0a:de:aa:66:97:a7:1a:87:ed:2e:4d:
                    ba:18:8e:8d:b0:fb:10:31:e0:b1:13:ec:ed:56:55:
                    e9:19:6a:f3:ce:4c:3b:f1:36:9d:d3:17:ee:3f:fb:
                    05:7e:9d:b2:60:23:32:7e:23:b4:f3:45:23:a8:0d:
                    8f:89:37:75:70:48:82:59:9a:ba:d2:7c:7b:aa:49:
                    ab:a8:13:d8:b3:ad:29:d5:5d:89:51:a1:73:e5:59:
                    c4:43:d7:2d:f4:ab:86:ff:f3:e7:62:a7:51:ec:d0:
                    b0:d5:ea:94:68:44:8d:c1:f1:e0:fb:f0:60:b6:4e:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:45:C1:D4:05:9F:50:A4:1F:DD:35:97:F0:5F:3B:1D:D1:07:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl

            X509v3 Authority Key Identifier:
                keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ff:36:3e:ad:d5:26:c6:84:35:86:b6:f6:74:65:dc:38:ec:
         a0:7a:62:94:69:2b:e2:b9:06:88:21:25:63:b3:54:de:03:c5:
         5d:af:a8:a5:85:94:cc:1d:8e:30:cc:e4:e8:3b:cd:51:13:34:
         7a:dd:14:9c:f7:78:d9:ea:31:29:25:0f:33:49:b7:53:a4:48:
         25:65:ef:1a:4a:2d:9f:56:bd:d9:3b:6f:d5:8d:ad:03:ec:05:
         3e:80:a4:28:be:62:01:10:0c:fc:db:03:7b:53:30:ea:3d:36:
         62:ef:48:25:cb:e8:b1:1e:b5:bc:30:3a:35:b8:8f:0d:6d:d6:
         67:28:07:ac:bf:8d:18:fc:3f:04:44:e7:85:15:30:b6:b1:5a:
         75:8b:07:ec:fc:8b:db:12:37:d2:64:17:87:37:11:7a:74:17:
         9d:82:78:8a:49:39:e4:a1:be:91:70:9d:ca:7e:8a:cc:08:37:
         5e:9f:2d:b9:87:bc:fb:75:3c:2e:ff:56:99:32:33:a1:16:cf:
         64:b9:82:f7:d5:92:e6:7e:81:cd:43:44:d0:4b:ab:07:f0:8e:
         49:3a:e4:43:2e:d8:c6:bc:15:22:d2:53:1b:eb:d6:46:bf:f2:
         13:95:47:7e:48:d6:7d:90:3d:ac:ca:89:ff:33:68:40:08:92:
         c5:5e:cb:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG8GHwJPgtpne4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWYwYjBkMWUtZjI2Yi00N2VkLTk2OGUtZDMwYzllMGVi
YTk4MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
Y2EwMjExNTktY2FhYS00ZDNiLWJlMjQtNmI0ZjcxODU2Nzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOF45xgXwAgTTTcKvQwY5hxnoy9C6yM3ylFE
xT6+1Q6e0ZCPZoyMiAL/D2Qs3Q+9dznLM6/Ww+Bv/u0FIZy/A+iVX5CXXH3YugXL
MPXaLmBvPhgIqF8Ve8iyDIzTv+OWh3I2QwbHFmsn35vZ6M4GdLMlhmhESvhSTgmJ
MOgP0iz720dbYaYk20WiCt6qZpenGoftLk26GI6NsPsQMeCxE+ztVlXpGWrzzkw7
8Tad0xfuP/sFfp2yYCMyfiO080UjqA2PiTd1cEiCWZq60nx7qkmrqBPYs60p1V2J
UaFz5VnEQ9ct9KuG//PnYqdR7NCw1eqUaESNwfHg+/Bgtk6uyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUbRcHUBZ9QpB/dNZfwXzsd0Qf9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZjBi
MGQxZS1mMjZiLTQ3ZWQtOTY4ZS1kMzBjOWUwZWJhOTgvZGQxYTMxMjUtNWMyZi0z
MmVjLWE2NjEtNjlmZTVlNjQyNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWYwYjBkMWUtZjI2Yi00N2VkLTk2
OGUtZDMwYzllMGViYTk4LzlmMGIwZDFlLWYyNmItNDdlZC05NjhlLWQzMGM5ZTBl
YmE5OC5jcmwwHwYDVR0jBBgwFoAU3O+fr0NqIU9PMyK0rqOcjo8k5nkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85ZjBiMGQxZS1mMjZiLTQ3ZWQtOTY4ZS1kMzBj
OWUwZWJhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3/Nj6t1SbGhDWGtvZ0Zdw47KB6YpRpK+K5BoghJWOzVN4DxV2vqKWF
lMwdjjDM5Og7zVETNHrdFJz3eNnqMSklDzNJt1OkSCVl7xpKLZ9Wvdk7b9WNrQPs
BT6ApCi+YgEQDPzbA3tTMOo9NmLvSCXL6LEetbwwOjW4jw1t1mcoB6y/jRj8PwRE
54UVMLaxWnWLB+z8i9sSN9JkF4c3EXp0F52CeIpJOeShvpFwncp+iswIN16fLbmH
vPt1PC7/VpkyM6EWz2S5gvfVkuZ+gc1DRNBLqwfwjkk65EMu2Ma8FSLSUxvr1ka/
8hOVR35I1n2QPazKif8zaEAIksVey0U=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:24 2024 by rpki-client on console-ams.rpki-client.org