Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ff49d30-49ad-39df-b420-03985467cebf.roa
File:                     5ff49d30-49ad-39df-b420-03985467cebf.roa (raw, json)
Hash identifier:          Rog/MnyK//5kOboMTBCD8cJnwZGXGbhV0K399o+d+2A=
Subject key identifier:   C1:EA:E0:96:04:95:41:55:C3:99:00:86:F4:D1:66:FE:1C:75:72:C6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858474850C328061C87A885EC9500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ff49d30-49ad-39df-b420-03985467cebf.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     209242
IP address blocks:        104.164.10.0/24 maxlen: 24
                          104.165.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c3:28:06:1c:87:a8:85:ec:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=c340ec91-77bd-442f-a6cf-0104c60d4de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:c8:0f:9d:5d:75:75:e5:e8:83:23:f8:9a:
                    34:ec:4c:a6:d7:86:87:17:18:6d:73:6a:50:1a:71:
                    a5:8f:81:44:d0:2b:ff:ac:5d:77:94:0f:3f:bd:d6:
                    bd:38:8f:83:2d:21:9f:6d:0c:02:35:9e:7f:64:3f:
                    fb:61:38:a2:b8:dc:f7:07:1d:fb:88:0b:cb:cc:f4:
                    d7:fc:77:5f:d8:a6:58:83:3c:ee:40:62:71:2a:c3:
                    eb:30:be:b8:ec:b5:20:08:c6:f0:2d:76:79:e4:79:
                    96:38:4f:74:e4:69:b9:82:6a:7f:7d:b8:f0:1d:ef:
                    bd:5f:bb:9a:09:c5:96:25:1b:b2:87:9f:68:04:66:
                    03:d3:9f:c1:f5:74:a5:94:7e:ab:a0:79:f0:25:88:
                    2e:33:ec:00:fc:cd:f7:34:5b:d9:a9:c2:f8:bf:e4:
                    38:16:8b:96:76:60:75:82:8e:f3:41:22:b0:3a:37:
                    c2:68:a4:a8:1a:51:43:8d:5c:eb:f0:87:00:b3:7e:
                    f9:9c:70:fc:d0:fc:6a:4b:8a:50:ae:08:e9:d6:a8:
                    3c:7b:2e:cd:a4:55:d7:80:1e:22:b4:04:c9:12:23:
                    00:78:92:dd:39:8b:2e:5c:2f:1b:39:1c:62:5e:9f:
                    d4:fe:3f:2d:65:a9:f8:ea:bd:0f:39:0f:57:4c:23:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:E0:96:04:95:41:55:C3:99:00:86:F4:D1:66:FE:1C:75:72:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ff49d30-49ad-39df-b420-03985467cebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.10.0/24
                  104.165.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:cc:ab:8a:b2:8b:68:5f:53:c8:4e:80:79:06:dc:74:1d:
         0f:8c:81:48:ed:cb:1b:e6:9b:31:ef:60:82:45:64:f5:9a:d2:
         2f:2f:f1:dd:52:f8:d5:0e:da:7c:a7:12:7c:c0:ba:fe:b3:70:
         17:b7:2e:c5:a4:ba:8b:64:a1:aa:94:e6:09:e9:2b:f0:ab:5c:
         c2:d3:af:13:0c:13:8d:99:89:34:fd:36:28:ae:4e:20:89:a1:
         f7:c8:ae:ea:8c:d3:61:ea:d3:00:18:af:13:a2:c1:22:bf:85:
         d6:54:d7:3e:d0:0f:53:72:a7:1e:dc:3e:c6:c6:8e:fc:e4:9c:
         bf:63:4e:a5:0c:79:d6:96:f8:c0:ce:88:dd:0e:05:e9:32:28:
         74:86:1d:ff:b0:b3:68:1d:08:f9:6e:5c:a9:63:5d:f3:08:d7:
         49:24:78:94:6a:28:42:1a:ce:62:1a:55:95:a9:68:7a:24:2c:
         6c:00:79:28:3f:cd:3d:39:89:96:09:d4:ec:de:d3:2e:3d:63:
         a9:28:22:e0:f4:4d:22:03:dc:cd:fb:29:ac:79:a3:d9:a3:92:
         d5:8c:64:39:c4:24:8e:f2:86:13:18:f8:e2:26:a1:0e:1c:1a:
         45:ec:56:65:d0:8c:7e:94:b0:30:df:b7:27:de:fd:ac:7d:a8:
         c6:cb:99:f2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdIUMMoBhyHqIXslQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk
YzM0MGVjOTEtNzdiZC00NDJmLWE2Y2YtMDEwNGM2MGQ0ZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueLID51ddXXl6IMj+Jo07Eym14aHFxhtc2pQ
GnGlj4FE0Cv/rF13lA8/vda9OI+DLSGfbQwCNZ5/ZD/7YTiiuNz3Bx37iAvLzPTX
/Hdf2KZYgzzuQGJxKsPrML647LUgCMbwLXZ55HmWOE905Gm5gmp/fbjwHe+9X7ua
CcWWJRuyh59oBGYD05/B9XSllH6roHnwJYguM+wA/M33NFvZqcL4v+Q4FouWdmB1
go7zQSKwOjfCaKSoGlFDjVzr8IcAs375nHD80PxqS4pQrgjp1qg8ey7NpFXXgB4i
tATJEiMAeJLdOYsuXC8bORxiXp/U/j8tZan46r0POQ9XTCPJQQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMHq4JYElUFVw5kAhvTRZv4cdXLGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWZmNDlkMzAtNDlhZC0z
OWRmLWI0MjAtMDM5ODU0NjdjZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaKQKAwQA
aKVBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAI4NzKuKsotoX1PIToB5Btx0HQ+MgUjtyxvmmzHvYIJFZPWa
0i8v8d1S+NUO2nynEnzAuv6zcBe3LsWkuotkoaqU5gnpK/CrXMLTrxMME42ZiTT9
NiiuTiCJoffIruqM02Hq0wAYrxOiwSK/hdZU1z7QD1Nypx7cPsbGjvzknL9jTqUM
edaW+MDOiN0OBekyKHSGHf+ws2gdCPluXKljXfMI10kkeJRqKEIazmIaVZWpaHok
LGwAeSg/zT05iZYJ1Oze0y49Y6koIuD0TSID3M37Kax5o9mjktWMZDnEJI7yhhMY
+OImoQ4cGkXsVmXQjH6UsDDftyfe/ax9qMbLmfI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:58 2024 by rpki-client on console-fra.rpki-client.org