Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa
File:                     3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa (raw, json)
Hash identifier:          6Zt5F/tMH+mVzCbmGC05RvttuTtZUgAuxATI2oUEN1w=
Subject key identifier:   53:38:87:F4:7F:94:D4:EB:84:E8:51:F5:54:BC:56:51:2B:9C:03:EE
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858455E5D97C29381F1A73771F400
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     23470
IP address blocks:        208.67.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:97:c2:93:81:f1:a7:37:71:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=a82df311-0514-4cdb-9b43-5096e263a39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:01:2d:da:e3:30:19:59:6e:2b:77:f7:d8:
                    24:fc:b8:bf:84:4c:60:f3:a9:bd:7f:a1:a1:51:7e:
                    ba:40:0b:a9:0e:22:96:57:58:58:bf:a4:6c:47:88:
                    2d:1d:72:40:58:17:20:eb:bf:8a:f5:e8:f2:e7:af:
                    c0:38:d5:11:63:bd:18:4f:f6:ff:ce:0a:68:75:2f:
                    f7:fd:b3:05:fd:7d:2e:18:af:60:9d:e8:05:98:8a:
                    7f:5d:b4:31:6a:b7:bf:26:18:01:33:69:36:5f:67:
                    e6:79:d8:2e:03:d2:0d:a9:bd:c8:55:12:43:df:e4:
                    24:30:e4:48:0c:05:c6:46:1d:c2:8c:78:07:f2:46:
                    f7:df:94:be:ce:5a:74:38:a5:63:2a:91:21:1a:09:
                    81:5e:ae:6e:a9:5c:65:3e:04:e4:31:2b:3c:1e:65:
                    c8:66:fe:cd:b5:08:65:5d:a6:f0:2c:ac:f6:09:63:
                    d1:3a:33:fc:13:94:f1:c5:ce:4e:a9:9d:8f:6a:4b:
                    ea:b4:74:dc:5a:4c:50:46:91:6e:f8:93:d1:1e:88:
                    88:4f:a4:de:79:24:3e:98:cc:0e:d4:17:77:4f:4e:
                    85:42:2c:23:01:d5:45:8b:2e:c7:e2:2d:72:e5:35:
                    a0:48:5a:c9:5f:e0:df:92:8c:3a:e8:9f:d4:cb:d8:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:87:F4:7F:94:D4:EB:84:E8:51:F5:54:BC:56:51:2B:9C:03:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:a6:83:71:98:10:f9:6e:a4:4b:99:70:03:5c:03:e4:da:
         45:27:20:58:d0:5e:71:a2:25:1b:34:a0:6d:11:3a:0e:33:14:
         fe:c0:a8:5f:fb:5a:a8:9b:c3:14:54:68:e3:21:6b:22:b3:70:
         de:e1:87:65:2a:b5:5e:5c:23:55:7e:36:a4:66:67:4b:69:3c:
         e1:0f:5e:40:d4:e1:68:45:e1:e7:0e:5e:6c:9c:38:b1:0b:d2:
         6a:89:5b:0d:a4:3e:e7:f1:fd:64:56:fb:f1:21:e1:70:cf:78:
         eb:58:d1:54:ee:48:8f:0f:90:15:14:02:1d:9e:b9:9b:81:4f:
         af:12:33:e7:1b:d2:17:15:43:d3:e9:7c:19:72:aa:19:ac:2b:
         6b:91:5e:43:10:33:4c:23:32:2d:9c:9e:82:ba:b5:ed:f0:7a:
         ea:95:4e:52:f1:b6:c2:ed:c6:67:b3:bb:fe:c9:4f:10:42:91:
         1d:72:8e:39:d0:de:ee:2b:e4:17:f1:8b:7a:20:1d:0e:56:79:
         a2:ad:3d:4f:90:f3:02:3a:87:1d:65:a4:e4:01:b6:4e:ec:8c:
         c3:4a:2f:d5:3f:e2:b2:ed:4f:a1:00:61:c2:6b:a2:86:ea:58:
         9b:62:61:66:8f:0e:86:05:26:34:aa:ab:8e:7b:96:0c:12:12:
         11:da:2c:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXZfCk4Hxpzdx9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1YTk3YWUtZGY0ZS00OWJjLTlmNzYtZmYwMjVhNWMy
NWU4MB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk
YTgyZGYzMTEtMDUxNC00Y2RiLTliNDMtNTA5NmUyNjNhMzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycYBLdrjMBlZbit399gk/Li/hExg86m9f6Gh
UX66QAupDiKWV1hYv6RsR4gtHXJAWBcg67+K9ejy56/AONURY70YT/b/zgpodS/3
/bMF/X0uGK9gnegFmIp/XbQxare/JhgBM2k2X2fmedguA9INqb3IVRJD3+QkMORI
DAXGRh3CjHgH8kb335S+zlp0OKVjKpEhGgmBXq5uqVxlPgTkMSs8HmXIZv7NtQhl
XabwLKz2CWPROjP8E5Txxc5OqZ2PakvqtHTcWkxQRpFu+JPRHoiIT6TeeSQ+mMwO
1Bd3T06FQiwjAdVFiy7H4i1y5TWgSFrJX+Dfkow66J/Uy9h5JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFM4h/R/lNTrhOhR9VS8VlErnAPuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTVh
OTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAyNWE1YzI1ZTgvM2NmOWRjYjQtZmFhNy0z
ZDIxLWE0ZDUtODRhMjg1ZDc2NTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU1YTk3YWUtZGY0ZS00OWJjLTlm
NzYtZmYwMjVhNWMyNWU4LzQ1NWE5N2FlLWRmNGUtNDliYy05Zjc2LWZmMDI1YTVj
MjVlOC5jcmwwHwYDVR0jBBgwFoAU1q6NbrjOWHH/k5GUTpU1xCeTuU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTVhOTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAy
NWE1YzI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ENoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXLpoNxmBD5bqRLmXADXAPk2kUnIFjQXnGiJRs0oG0ROg4zFP7AqF/7
WqibwxRUaOMhayKzcN7hh2UqtV5cI1V+NqRmZ0tpPOEPXkDU4WhF4ecOXmycOLEL
0mqJWw2kPufx/WRW+/Eh4XDPeOtY0VTuSI8PkBUUAh2euZuBT68SM+cb0hcVQ9Pp
fBlyqhmsK2uRXkMQM0wjMi2cnoK6te3weuqVTlLxtsLtxmezu/7JTxBCkR1yjjnQ
3u4r5Bfxi3ogHQ5WeaKtPU+Q8wI6hx1lpOQBtk7sjMNKL9U/4rLtT6EAYcJroobq
WJtiYWaPDoYFJjSqq457lgwSEhHaLKY=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:08 2024 by rpki-client on console-ams.rpki-client.org