Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b97efeb-5954-337c-9122-8da5c2e55fe8.roa
File:                     8b97efeb-5954-337c-9122-8da5c2e55fe8.roa (raw, json)
Hash identifier:          WeIDLXYXBJkc/PJQ09JKCytaJZtrr660c07bdGpe2f0=
Subject key identifier:   DA:CA:FA:C2:A2:DF:AB:31:28:6E:4D:D2:2A:54:03:BC:D7:05:DD:CA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8EC8752E4A93E973B380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b97efeb-5954-337c-9122-8da5c2e55fe8.roa
Signing time:             Thu 25 Apr 2024 22:43:56 +0000
ROA not before:           Thu 25 Apr 2024 22:43:56 +0000
ROA not after:            Wed 24 Jul 2024 22:43:56 +0000
asID:                     44477
IP address blocks:        104.252.2.0/24 maxlen: 24
                          104.252.233.0/24 maxlen: 24
                          104.253.147.0/24 maxlen: 24
                          104.253.158.0/24 maxlen: 24
                          104.253.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8e:c8:75:2e:4a:93:e9:73:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:56 2024 GMT
            Not After : Jul 24 22:43:56 2024 GMT
        Subject: CN=7340a4e1-317a-4ac8-b5f1-40a8b62f7c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:85:f6:c0:32:c9:2f:91:57:35:f3:63:36:
                    d2:64:c9:f8:b8:df:e3:37:95:a9:28:e9:c6:0c:7c:
                    3e:f2:70:57:1a:29:9b:e8:09:72:2e:0c:1e:54:30:
                    6d:0f:ff:0b:08:e9:b4:a0:a8:ad:c0:43:c1:f1:90:
                    a0:01:98:4a:98:4f:de:24:eb:24:e5:c9:c9:dc:b3:
                    a7:86:e5:83:f3:1c:aa:4f:9a:2f:f8:db:01:83:63:
                    f4:cb:ab:cc:5b:51:28:d5:fb:30:47:1a:c4:8d:39:
                    87:9a:e5:15:a5:2b:66:03:2e:05:4d:48:b6:a1:cd:
                    c7:18:34:67:c0:cb:0a:73:24:d2:1b:c5:15:aa:be:
                    be:40:f0:5a:e4:52:1a:62:84:ef:79:f5:d1:62:5d:
                    5b:ea:16:09:f9:ed:9d:3b:4a:8d:c0:df:1e:ae:5c:
                    0f:d3:d2:eb:24:cc:3d:a6:07:be:72:2f:9b:ab:b6:
                    63:57:c4:d4:0f:0b:13:a7:32:d5:39:fa:e9:80:8a:
                    0c:e2:a5:30:39:14:fd:84:c1:cc:40:2b:54:ed:b0:
                    f6:36:4d:38:d3:2a:1f:c8:a8:33:b7:7a:2f:9e:9d:
                    75:c2:0f:23:0a:eb:7d:d7:be:f1:b7:42:86:5f:29:
                    7f:b0:b3:d9:6b:e0:61:1e:ca:3a:2b:91:81:bb:5c:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CA:FA:C2:A2:DF:AB:31:28:6E:4D:D2:2A:54:03:BC:D7:05:DD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b97efeb-5954-337c-9122-8da5c2e55fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.2.0/24
                  104.252.233.0/24
                  104.253.147.0/24
                  104.253.158.0/24
                  104.253.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:c4:06:eb:05:f2:67:1c:bb:a0:77:bf:8a:4b:40:d4:2b:
         86:66:26:6b:c1:70:c1:2b:57:74:87:52:16:d7:03:c9:c1:ff:
         c5:53:d8:d0:64:c5:83:3e:d1:4c:89:b6:4b:ad:ef:8b:c2:00:
         31:d6:f7:3e:63:ec:3e:5f:9a:ad:79:09:11:95:d9:17:32:d5:
         68:15:8e:c1:c9:51:1a:9f:29:86:1d:9a:2d:98:6a:f7:5a:e8:
         f9:2d:4a:bf:c6:9b:48:3e:27:44:63:18:f5:c5:bb:65:e9:1c:
         22:41:d5:7f:a0:74:49:d5:bf:74:b9:99:42:10:d9:27:77:2c:
         97:0b:ea:c4:94:0e:10:2e:38:3b:21:de:be:f1:41:a0:11:26:
         06:c4:92:de:e2:42:9b:1e:b9:06:00:7f:e8:8e:d6:8e:82:d7:
         ce:7c:3e:f4:b3:bd:57:6f:73:6d:57:72:b3:87:de:84:69:1e:
         8d:fd:04:0d:4c:6a:e5:9d:e5:ab:34:3a:ef:4b:15:77:5a:a8:
         40:2b:82:bd:8b:d3:e8:de:a3:05:34:f7:c2:38:dd:6a:ed:4e:
         30:9d:30:cc:d7:27:6c:3d:79:e6:ea:bd:d7:c9:d3:cb:95:32:
         cf:bf:26:00:8b:12:02:9f:99:f2:e2:2e:d0:77:a7:41:14:8f:
         c4:c7:5f:8e
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEWq347IdS5Kk+lzs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQyNTIyNDM1NloXDTI0MDcyNDIyNDM1NlowLzEtMCsGA1UEAxMk
NzM0MGE0ZTEtMzE3YS00YWM4LWI1ZjEtNDBhOGI2MmY3Yzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycKF9sAyyS+RVzXzYzbSZMn4uN/jN5WpKOnG
DHw+8nBXGimb6AlyLgweVDBtD/8LCOm0oKitwEPB8ZCgAZhKmE/eJOsk5cnJ3LOn
huWD8xyqT5ov+NsBg2P0y6vMW1Eo1fswRxrEjTmHmuUVpStmAy4FTUi2oc3HGDRn
wMsKcyTSG8UVqr6+QPBa5FIaYoTvefXRYl1b6hYJ+e2dO0qNwN8erlwP09LrJMw9
pge+ci+bq7ZjV8TUDwsTpzLVOfrpgIoM4qUwORT9hMHMQCtU7bD2Nk040yofyKgz
t3ovnp11wg8jCut9177xt0KGXyl/sLPZa+BhHso6K5GBu1xHrQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFNrK+sKi36sxKG5N0ipUA7zXBd3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGI5N2VmZWItNTk1NC0z
MzdjLTkxMjItOGRhNWMyZTU1ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaPwCAwQA
aPzpAwQAaP2TAwQAaP2eAwQAaP2lMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEujxAbrBfJnHLugd7+KS0DU
K4ZmJmvBcMErV3SHUhbXA8nB/8VT2NBkxYM+0UyJtkut74vCADHW9z5j7D5fmq15
CRGV2Rcy1WgVjsHJURqfKYYdmi2Yavda6PktSr/Gm0g+J0RjGPXFu2XpHCJB1X+g
dEnVv3S5mUIQ2Sd3LJcL6sSUDhAuODsh3r7xQaARJgbEkt7iQpseuQYAf+iO1o6C
1858PvSzvVdvc21XcrOH3oRpHo39BA1MauWd5as0Ou9LFXdaqEArgr2L0+jeowU0
98I43WrtTjCdMMzXJ2w9eebqvdfJ08uVMs+/JgCLEgKfmfLiLtB3p0EUj8THX44=
-----END CERTIFICATE-----
Generated at Sun May 19 19:41:49 2024 by rpki-client on console-fra.rpki-client.org