Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/4bf4b3f3-92fa-3bb4-8d7b-c08c58d08605.roa
File:                     4bf4b3f3-92fa-3bb4-8d7b-c08c58d08605.roa (raw, json)
Hash identifier:          h2CpHcrPvCnfItLuYpEGzSwXC13HVJRMKiTs9U0OCuE=
Subject key identifier:   C7:97:87:B6:BE:5F:AC:F3:0C:9A:00:2E:60:75:59:13:AF:13:BB:A3
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F43285848854B41E78EE90BA6E8EF8380
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/4bf4b3f3-92fa-3bb4-8d7b-c08c58d08605.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     40793
IP address blocks:        108.174.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:41:e7:8e:e9:0b:a6:e8:ef:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=fcecdf4b-a63e-4726-a1b0-78a3c63e0fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:71:7a:75:78:b5:bf:5c:9f:e0:25:0a:7d:
                    be:b3:40:f5:31:9c:93:99:58:50:3d:27:c6:4f:69:
                    72:62:62:67:0b:9a:91:85:fc:ba:1e:68:96:48:93:
                    56:2e:b5:08:59:56:99:7e:c3:ac:f6:da:c6:c7:fb:
                    78:21:0f:9b:95:2b:a0:47:8c:3b:f4:2f:52:0f:99:
                    be:66:2a:a5:2d:f6:bb:5b:3f:35:13:d4:b5:de:a8:
                    36:42:a0:d1:44:9a:84:b0:88:0e:d0:8e:b2:a5:10:
                    ca:99:29:85:98:92:c4:e8:20:93:44:c5:fa:55:8a:
                    e7:71:9b:52:40:27:14:8b:b3:6a:bf:92:c0:78:c8:
                    61:e5:0d:f0:84:3f:a5:6e:63:59:a7:7f:be:bf:20:
                    d8:5d:f0:3f:ad:6a:f3:23:b1:79:7a:9f:f9:56:44:
                    f5:15:2c:6a:a2:ac:21:62:ab:67:38:3e:f5:7c:5d:
                    44:36:3f:d2:bf:e5:e5:07:e4:a3:cb:a1:f7:66:90:
                    a8:35:b7:aa:b1:30:d0:6e:37:47:7d:17:2b:0c:e2:
                    36:e4:47:3d:9e:ba:e3:f1:c1:6d:25:84:e4:c8:8f:
                    fc:2b:60:6d:00:ea:7d:e6:9c:b7:23:29:d5:93:29:
                    57:9a:eb:ed:95:d4:42:ae:67:39:79:35:16:52:cf:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:87:B6:BE:5F:AC:F3:0C:9A:00:2E:60:75:59:13:AF:13:BB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/4bf4b3f3-92fa-3bb4-8d7b-c08c58d08605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:d4:16:b0:62:71:0e:c1:47:a9:1f:cf:42:02:f0:a5:60:
         58:d2:83:cb:35:0a:05:67:79:d3:29:95:14:34:58:bf:36:a2:
         cb:61:eb:53:f6:73:b7:ba:03:00:1e:db:5f:e5:1c:e9:a3:a9:
         dc:f8:fa:40:60:23:b4:8b:b7:c7:40:80:e0:7c:5d:d5:93:27:
         2c:ec:ac:d3:e8:ae:38:46:fd:8c:74:52:27:bc:d0:64:79:78:
         84:d1:65:78:d3:b1:79:12:fa:a9:c5:a4:8e:c7:60:6b:ce:b6:
         1f:a8:a3:13:73:9a:0d:2a:4c:63:42:95:98:06:73:fb:a8:c1:
         64:0a:c9:8b:0e:35:52:1e:d1:44:ae:bb:a0:29:89:1f:d6:7c:
         6c:9b:eb:76:90:5d:fa:1b:a8:c1:c9:a7:c6:6f:55:bc:f4:03:
         c8:1a:ef:af:99:1f:04:3a:d5:93:73:fd:41:04:1e:fc:0e:8e:
         66:a3:53:1d:24:e9:74:fa:29:87:42:15:d0:59:8a:24:42:21:
         21:8b:cb:0f:98:fc:a9:f6:f4:71:6d:23:db:23:3b:66:d4:40:
         e3:66:a6:e3:e3:2e:a6:b0:6f:de:0b:52:88:c8:19:17:20:0b:
         4a:bc:2e:cd:16:e3:48:f4:c8:6c:29:a9:5b:70:b6:9a:00:e1:
         39:ce:8b:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0HnjukLpujvg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4MDE0MjctNmE0NS00NzBhLTg5OGMtYzZhMmIxYjI3
MzgwMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZmNlY2RmNGItYTYzZS00NzI2LWExYjAtNzhhM2M2M2UwZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2opxenV4tb9cn+AlCn2+s0D1MZyTmVhQPSfG
T2lyYmJnC5qRhfy6HmiWSJNWLrUIWVaZfsOs9trGx/t4IQ+blSugR4w79C9SD5m+
ZiqlLfa7Wz81E9S13qg2QqDRRJqEsIgO0I6ypRDKmSmFmJLE6CCTRMX6VYrncZtS
QCcUi7Nqv5LAeMhh5Q3whD+lbmNZp3++vyDYXfA/rWrzI7F5ep/5VkT1FSxqoqwh
YqtnOD71fF1ENj/Sv+XlB+Sjy6H3ZpCoNbeqsTDQbjdHfRcrDOI25Ec9nrrj8cFt
JYTkyI/8K2BtAOp95py3IynVkylXmuvtldRCrmc5eTUWUs+QwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeXh7a+X6zzDJoALmB1WROvE7ujMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZTgw
MTQyNy02YTQ1LTQ3MGEtODk4Yy1jNmEyYjFiMjczODAvNGJmNGIzZjMtOTJmYS0z
YmI0LThkN2ItYzA4YzU4ZDA4NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGU4MDE0MjctNmE0NS00NzBhLTg5
OGMtYzZhMmIxYjI3MzgwL2RlODAxNDI3LTZhNDUtNDcwYS04OThjLWM2YTJiMWIy
NzM4MC5jcmwwHwYDVR0jBBgwFoAUIeQVrQ52f9WA8jMJ584FENpzaBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZTgwMTQyNy02YTQ1LTQ3MGEtODk4Yy1jNmEy
YjFiMjczODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFob1BawYnEOwUepH89CAvClYFjSg8s1CgVnedMplRQ0WL82osth61P2
c7e6AwAe21/lHOmjqdz4+kBgI7SLt8dAgOB8XdWTJyzsrNPorjhG/Yx0Uie80GR5
eITRZXjTsXkS+qnFpI7HYGvOth+ooxNzmg0qTGNClZgGc/uowWQKyYsONVIe0USu
u6ApiR/WfGyb63aQXfobqMHJp8ZvVbz0A8ga76+ZHwQ61ZNz/UEEHvwOjmajUx0k
6XT6KYdCFdBZiiRCISGLyw+Y/Kn29HFtI9sjO2bUQONmpuPjLqawb94LUojIGRcg
C0q8Ls0W40j0yGwpqVtwtpoA4TnOiwo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:41 2025 by rpki-client