Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6038e4-234e-3cd4-a714-a48d09a317a2.roa
File:                     3c6038e4-234e-3cd4-a714-a48d09a317a2.roa (raw, json)
Hash identifier:          GHk5lzmXaoIIFs04oFE5G63D7Wgl/Triw1mXef+F6S4=
Subject key identifier:   D3:96:31:ED:C3:2D:D6:BC:F9:5A:0B:D9:D0:2D:6D:22:EB:24:6C:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584750B0AC578D209EF940602020
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6038e4-234e-3cd4-a714-a48d09a317a2.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     18779
IP address blocks:        104.252.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:ac:57:8d:20:9e:f9:40:60:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=d71875a1-031b-4fa9-b692-12bd50112adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:cc:43:03:42:f4:d6:3d:ad:94:3e:1f:82:
                    60:f4:03:3e:fd:2f:8a:25:40:fa:0c:9c:f5:12:1a:
                    a3:32:d6:77:75:f1:e9:a7:3c:83:1f:32:f3:75:e9:
                    30:7c:6c:da:e0:e7:84:af:ae:68:74:37:0e:b1:1d:
                    52:00:2a:a1:31:34:13:43:6e:b9:09:24:b9:48:ca:
                    a5:ed:81:9c:43:1e:6f:c5:1e:96:8b:44:49:c2:1c:
                    f2:36:f9:a5:52:8a:00:00:67:3d:db:52:c0:8c:2e:
                    21:f9:56:c4:19:1e:a9:9e:ee:29:27:41:57:45:ef:
                    58:42:8a:74:f1:03:cd:b7:b3:af:b9:35:48:14:42:
                    d0:97:ad:e7:87:4d:3b:65:3f:46:8d:43:ad:6d:da:
                    dd:92:09:84:b9:6f:62:49:45:43:fe:43:d3:5e:2f:
                    af:4b:ab:d8:51:c8:9a:ee:f3:73:89:ce:61:bf:77:
                    ec:63:06:46:02:8a:85:a9:d9:44:db:5e:f9:72:25:
                    85:8e:a9:51:39:26:43:1f:bd:e3:d6:32:e6:07:bb:
                    c9:76:a4:8a:13:0f:ff:a7:e7:5d:9f:14:c4:b7:f5:
                    ae:95:8b:02:09:49:af:6f:cf:ac:66:8c:ee:b2:6d:
                    3d:37:e5:2a:13:fc:11:91:7e:b0:b9:8c:72:fd:04:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:31:ED:C3:2D:D6:BC:F9:5A:0B:D9:D0:2D:6D:22:EB:24:6C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6038e4-234e-3cd4-a714-a48d09a317a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:66:d2:ef:08:2e:22:0e:25:84:16:97:2c:d8:4b:f6:e8:9b:
         ef:5a:9d:72:f4:bd:18:f2:0a:ce:f7:45:7f:93:96:eb:20:b3:
         ef:ea:73:06:ff:a3:ca:2d:1a:88:6a:34:2c:10:fb:e4:18:df:
         f7:d6:b4:b5:6d:cc:bf:5c:75:c9:4c:c4:25:79:f1:67:6f:a2:
         fc:d8:5f:fc:03:b9:67:2b:ba:5d:ef:02:1e:3c:20:4b:85:fe:
         9b:c5:69:4a:43:60:d9:be:20:02:bd:44:26:ab:e3:c9:43:3a:
         4c:3c:f4:ff:ee:d3:19:82:48:0b:4a:53:80:cb:98:1e:3f:0a:
         44:ec:37:a9:62:b1:bc:c1:ff:ca:75:45:21:5b:3c:92:3b:a6:
         1e:d1:7f:7e:1f:13:37:f8:a1:90:cc:5d:53:7b:36:04:49:73:
         6e:0f:0d:92:9a:f9:00:22:6d:b6:b9:93:d9:53:76:d4:89:cc:
         33:ef:17:79:7a:5b:3f:67:df:99:f7:e0:02:8c:0b:ea:9c:a3:
         6e:38:41:ac:12:55:c5:56:d6:8c:f0:d5:5f:10:a1:50:c5:33:
         e5:68:98:82:74:c8:96:e0:79:99:b7:62:78:29:53:e8:86:95:
         8f:40:30:38:8f:72:61:68:c4:b3:73:2b:3d:bf:65:28:cf:36:
         a4:9d:cf:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdQsKxXjSCe+UBgICAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDkyNDAxMDAzMVoXDTI0MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
ZDcxODc1YTEtMDMxYi00ZmE5LWI2OTItMTJiZDUwMTEyYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSfMQwNC9NY9rZQ+H4Jg9AM+/S+KJUD6DJz1
EhqjMtZ3dfHppzyDHzLzdekwfGza4OeEr65odDcOsR1SACqhMTQTQ265CSS5SMql
7YGcQx5vxR6Wi0RJwhzyNvmlUooAAGc921LAjC4h+VbEGR6pnu4pJ0FXRe9YQop0
8QPNt7OvuTVIFELQl63nh007ZT9GjUOtbdrdkgmEuW9iSUVD/kPTXi+vS6vYUcia
7vNzic5hv3fsYwZGAoqFqdlE2175ciWFjqlROSZDH73j1jLmB7vJdqSKEw//p+dd
nxTEt/WulYsCCUmvb8+sZozusm09N+UqE/wRkX6wuYxy/QSrtQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNOWMe3DLda8+VoL2dAtbSLrJGxKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2M2MDM4ZTQtMjM0ZS0z
Y2Q0LWE3MTQtYTQ4ZDA5YTMxN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBaPwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeGbS7wguIg4lhBaXLNhL9uib71qdcvS9GPIKzvdFf5OW6yCz7+pzBv+j
yi0aiGo0LBD75Bjf99a0tW3Mv1x1yUzEJXnxZ2+i/Nhf/AO5Zyu6Xe8CHjwgS4X+
m8VpSkNg2b4gAr1EJqvjyUM6TDz0/+7TGYJIC0pTgMuYHj8KROw3qWKxvMH/ynVF
IVs8kjumHtF/fh8TN/ihkMxdU3s2BElzbg8Nkpr5ACJttrmT2VN21InMM+8XeXpb
P2ffmffgAowL6pyjbjhBrBJVxVbWjPDVXxChUMUz5WiYgnTIluB5mbdieClT6IaV
j0AwOI9yYWjEs3MrPb9lKM82pJ3PGA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:53 2024 by rpki-client on console-ams.rpki-client.org