Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5050ff8c-b707-3789-8105-0de42597f9c6.roa
File:                     5050ff8c-b707-3789-8105-0de42597f9c6.roa (raw, json)
Hash identifier:          9/IAtqb8Ia6DDv8f2Bn9XqZ7Waap1hWcU7DPAvyA1CQ=
Subject key identifier:   44:B6:B4:C9:45:AC:73:33:37:50:EE:0D:42:AC:EC:60:2A:7D:11:36
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094E2E8E914977AF4A57700
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5050ff8c-b707-3789-8105-0de42597f9c6.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e2:e8:e9:14:97:7a:f4:a5:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=029516ec-a2da-4e13-a7c3-68b51aa23725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:0b:67:0b:ad:d9:4e:fb:a3:dc:63:03:26:
                    98:23:00:b2:a0:d7:47:9b:42:2e:ca:96:a6:d3:1b:
                    a5:02:8e:53:a3:42:c4:c6:57:e5:2d:50:3f:0f:90:
                    28:a0:6c:25:68:bb:3c:97:bc:cf:7c:cc:73:71:9f:
                    af:83:08:f3:a6:f7:13:bc:56:f9:ab:f7:75:7f:87:
                    49:f7:4b:c0:d1:0d:05:ac:1b:67:9d:5e:83:e1:05:
                    5c:f1:68:36:84:1b:38:82:da:6a:5a:c4:33:bb:8d:
                    e1:f1:24:02:0a:1d:6b:25:c0:fc:9e:80:ff:b1:94:
                    c0:2c:d6:6a:dc:cd:0b:bc:72:5b:04:67:58:5f:3d:
                    f6:a7:c8:f0:98:66:30:90:41:22:c4:2e:15:2c:b3:
                    7f:a5:6a:da:c0:ca:da:64:ee:a9:b9:e7:2a:c7:68:
                    b1:bb:d7:f2:cd:58:b6:4c:bd:70:2e:08:50:d1:49:
                    8f:d2:07:44:36:73:e7:b2:0c:b7:0a:36:09:bc:31:
                    d6:65:ab:34:cc:52:b2:fb:ac:b6:3f:02:bc:ba:bd:
                    6f:15:f0:13:ff:19:47:e9:15:c7:a6:a1:09:f0:89:
                    3b:75:56:e3:66:bb:8e:52:58:d1:32:8a:9d:e2:eb:
                    ee:a0:ba:b5:a3:da:d1:8e:ad:81:41:b9:7a:fa:74:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:B4:C9:45:AC:73:33:37:50:EE:0D:42:AC:EC:60:2A:7D:11:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5050ff8c-b707-3789-8105-0de42597f9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:77:24:26:dd:db:c8:ec:b4:d9:4c:5e:94:71:27:74:db:7c:
         ac:3a:38:81:6b:ed:36:88:42:76:4c:86:ec:e6:6e:4c:dc:85:
         be:54:31:ba:6e:36:b9:fa:8f:b0:14:ff:d4:90:4f:a0:8e:db:
         69:c4:c8:51:c9:37:18:2b:87:4e:cc:4e:9f:26:1a:d8:e0:c1:
         e4:8c:1a:2c:e6:78:66:f1:6f:c6:64:ae:32:78:ee:3a:a3:8d:
         b2:9a:df:7d:ae:2a:54:63:6a:c0:65:37:18:20:13:36:ce:c8:
         3b:a9:b3:bb:58:38:43:a4:b9:b4:4d:e7:76:04:35:0e:82:d6:
         3a:d3:4e:f2:86:94:a0:eb:95:f8:b0:18:e8:36:19:9f:a9:77:
         7e:47:8f:46:a9:94:b2:29:4b:81:50:6b:0e:27:90:c5:50:72:
         1c:47:be:00:b4:4f:c4:ab:72:76:49:2a:02:7b:44:bc:6b:3e:
         3e:29:fe:6f:ef:60:5a:37:91:f7:a0:b2:b0:bb:aa:93:ed:c0:
         c3:b7:d8:90:0e:0d:73:20:94:5a:56:6d:cd:42:58:e9:fe:8a:
         50:65:58:bb:01:75:10:87:de:3e:e1:50:c5:60:66:0e:bd:d4:
         8b:7d:4e:68:8f:0f:03:2d:43:2a:b5:82:5f:ac:4e:99:dc:21:
         d9:b4:15:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglOLo6RSXevSldwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
MDI5NTE2ZWMtYTJkYS00ZTEzLWE3YzMtNjhiNTFhYTIzNzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo88LZwut2U77o9xjAyaYIwCyoNdHm0Iuypam
0xulAo5To0LExlflLVA/D5AooGwlaLs8l7zPfMxzcZ+vgwjzpvcTvFb5q/d1f4dJ
90vA0Q0FrBtnnV6D4QVc8Wg2hBs4gtpqWsQzu43h8SQCCh1rJcD8noD/sZTALNZq
3M0LvHJbBGdYXz32p8jwmGYwkEEixC4VLLN/pWrawMraZO6puecqx2ixu9fyzVi2
TL1wLghQ0UmP0gdENnPnsgy3CjYJvDHWZas0zFKy+6y2PwK8ur1vFfAT/xlH6RXH
pqEJ8Ik7dVbjZruOUljRMoqd4uvuoLq1o9rRjq2BQbl6+nQwfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFES2tMlFrHMzN1DuDUKs7GAqfRE2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvNTA1MGZmOGMtYjcwNy0z
Nzg5LTgxMDUtMGRlNDI1OTdmOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJ3JCbd28jstNlMXpRxJ3TbfKw6OIFr7TaIQnZMhuzmbkzchb5UMbpu
Nrn6j7AU/9SQT6CO22nEyFHJNxgrh07MTp8mGtjgweSMGizmeGbxb8ZkrjJ47jqj
jbKa332uKlRjasBlNxggEzbOyDups7tYOEOkubRN53YENQ6C1jrTTvKGlKDrlfiw
GOg2GZ+pd35Hj0aplLIpS4FQaw4nkMVQchxHvgC0T8SrcnZJKgJ7RLxrPj4p/m/v
YFo3kfegsrC7qpPtwMO32JAODXMglFpWbc1CWOn+ilBlWLsBdRCH3j7hUMVgZg69
1It9TmiPDwMtQyq1gl+sTpncIdm0Ffo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:15 2024 by rpki-client on console-ams.rpki-client.org