Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1eefeec-aa54-309b-90a2-332c01d93050.roa
File:                     c1eefeec-aa54-309b-90a2-332c01d93050.roa (raw, json)
Hash identifier:          XNueXPfDqlyQRauaKZqZooPZi6XCneivOgnTyGLFpnk=
Subject key identifier:   74:DD:C9:2C:57:40:FC:E3:CC:36:DE:3C:F0:50:75:DF:68:5E:EC:36
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094EC5CD7DAD880700C4180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1eefeec-aa54-309b-90a2-332c01d93050.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        108.59.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ec:5c:d7:da:d8:80:70:0c:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=5390994d-1c2d-4783-89ad-10708d073800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:4d:86:e6:1e:be:55:11:af:97:09:93:b9:
                    cc:38:37:16:21:b0:ef:fb:22:4e:a6:25:ba:56:95:
                    0d:bd:0a:c2:22:91:6a:ed:cb:3a:fc:2f:f3:78:e9:
                    9d:f3:77:f5:c7:6e:1e:c6:3a:6e:81:6b:c5:9d:5d:
                    7e:9c:c0:85:0f:af:a7:6e:df:d8:c6:04:80:cb:b0:
                    15:7c:3a:18:d2:4f:3d:01:49:32:7d:93:3a:2e:2e:
                    bd:b8:14:0e:85:b8:99:a5:40:c5:aa:cd:f0:b9:4f:
                    b0:22:5b:d7:d0:57:75:89:0d:44:a5:e1:b1:2c:93:
                    45:f8:9a:79:ff:9f:55:ba:ec:5b:2b:f4:19:e5:a2:
                    0e:d7:50:01:aa:90:17:49:9c:36:18:a0:56:f8:5b:
                    ac:64:94:4e:3f:c2:b0:4a:4b:a6:1f:f0:00:28:7c:
                    9c:d8:f4:49:9d:0b:3b:88:7b:1b:8a:f8:92:9a:a2:
                    29:35:1a:1f:f5:fa:36:f8:8c:a7:75:53:4e:e0:5f:
                    ea:49:6a:05:ac:78:a2:67:e3:62:45:2f:de:d6:ca:
                    3a:50:75:73:ee:af:50:79:7b:b5:2f:02:9a:27:3c:
                    5a:5f:d5:3d:f7:56:d1:63:19:d8:16:3a:c7:8f:80:
                    49:8d:7e:29:ed:91:03:25:6b:bb:b7:b6:73:52:d1:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:C9:2C:57:40:FC:E3:CC:36:DE:3C:F0:50:75:DF:68:5E:EC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1eefeec-aa54-309b-90a2-332c01d93050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:33:5a:13:93:97:40:3d:7c:5c:4c:ff:0f:ee:5d:d9:6f:
         eb:f9:27:ca:bb:0c:66:28:14:45:b6:53:5b:8f:1d:82:a9:db:
         2d:e9:1b:1c:a0:02:ce:96:fb:f9:84:2a:84:ab:a2:b1:d8:01:
         64:3f:91:03:6b:39:bc:c6:7f:9f:38:84:ba:60:05:9a:c4:eb:
         76:66:00:10:c7:b3:2b:66:6a:9c:b7:52:1b:bd:fb:34:86:26:
         52:a8:cf:1e:5d:fc:ee:e5:70:9e:1c:cb:05:67:d2:d9:32:4b:
         3c:3f:da:85:eb:e1:d2:aa:87:91:62:08:ac:94:0a:2b:90:9b:
         11:6f:4b:58:a3:77:9d:6e:df:ca:bf:04:cf:c5:43:12:0f:3c:
         e6:ff:ee:ca:09:16:06:19:0d:2d:ad:10:c1:be:e3:c0:75:c5:
         fe:4a:3a:69:88:1c:b6:dc:4d:37:09:ec:dd:78:2a:e4:c2:57:
         b5:fc:61:a4:87:d4:d1:d8:27:32:60:38:c3:24:d2:1c:12:82:
         51:8c:9c:04:63:b3:d7:10:d4:dc:21:02:fb:1e:52:ee:25:3a:
         25:6f:bd:31:b7:93:5d:4c:dd:07:b6:a0:db:81:ae:5f:03:fd:
         9e:8c:96:e6:bb:f2:7b:da:92:7e:22:6c:d8:7d:b8:b2:5a:9d:
         2e:8a:29:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglOxc19rYgHAMQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NTM5MDk5NGQtMWMyZC00NzgzLTg5YWQtMTA3MDhkMDczODAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvglNhuYevlURr5cJk7nMODcWIbDv+yJOpiW6
VpUNvQrCIpFq7cs6/C/zeOmd83f1x24exjpugWvFnV1+nMCFD6+nbt/YxgSAy7AV
fDoY0k89AUkyfZM6Li69uBQOhbiZpUDFqs3wuU+wIlvX0Fd1iQ1EpeGxLJNF+Jp5
/59VuuxbK/QZ5aIO11ABqpAXSZw2GKBW+FusZJROP8KwSkumH/AAKHyc2PRJnQs7
iHsbiviSmqIpNRof9fo2+IyndVNO4F/qSWoFrHiiZ+NiRS/e1so6UHVz7q9QeXu1
LwKaJzxaX9U991bRYxnYFjrHj4BJjX4p7ZEDJWu7t7ZzUtFG6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTdySxXQPzjzDbePPBQdd9oXuw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzFlZWZlZWMtYWE1NC0z
MDliLTkwYTItMzMyYzAxZDkzMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsZM1oTk5dAPXxcTP8P7l3Zb+v5J8q7DGYoFEW2U1uPHYKp2y3pGxyg
As6W+/mEKoSrorHYAWQ/kQNrObzGf584hLpgBZrE63ZmABDHsytmapy3Uhu9+zSG
JlKozx5d/O7lcJ4cywVn0tkySzw/2oXr4dKqh5FiCKyUCiuQmxFvS1ijd51u38q/
BM/FQxIPPOb/7soJFgYZDS2tEMG+48B1xf5KOmmIHLbcTTcJ7N14KuTCV7X8YaSH
1NHYJzJgOMMk0hwSglGMnARjs9cQ1NwhAvseUu4lOiVvvTG3k11M3Qe2oNuBrl8D
/Z6Mlua78nvakn4ibNh9uLJanS6KKS8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:41 2024 by rpki-client on console-ams.rpki-client.org