Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7d242c40-3559-322b-95d3-9278be1b329f.roa
File:                     7d242c40-3559-322b-95d3-9278be1b329f.roa (raw, json)
Hash identifier:          rFtoC53nRtq2z/IyN6rTcvp8NaXPHZAV/WA88h2o6Oo=
Subject key identifier:   EB:52:89:3C:56:50:8E:74:F1:F1:C7:46:FD:2F:07:C1:76:2F:33:84
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474C80BEFDC721FF3575E2E780
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7d242c40-3559-322b-95d3-9278be1b329f.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     20454
IP address blocks:        108.170.47.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:be:fd:c7:21:ff:35:75:e2:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=043ea949-e76b-49cc-a021-c906761e4b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:d9:f0:ad:0a:87:dc:b1:eb:49:85:59:81:
                    de:9a:6c:ab:51:bc:01:63:ec:45:78:b4:75:e7:12:
                    01:14:1a:93:d3:2a:bc:cb:bd:81:cf:39:7f:03:65:
                    0d:bb:3c:48:f0:ff:c9:5d:9b:2c:a0:7f:23:43:25:
                    d9:01:cd:56:b9:db:28:0e:f9:30:3c:60:e9:27:a4:
                    d6:7e:16:23:c4:32:c4:b9:71:04:fa:ab:2b:b6:a5:
                    38:f3:7f:de:60:5e:07:9b:73:55:25:b7:51:69:15:
                    da:9c:f7:c5:90:a2:e7:ff:9b:99:5b:ce:5d:d0:21:
                    1b:5a:0b:c0:3b:0f:ec:d7:fe:67:40:4c:e5:f0:18:
                    c5:0b:3a:91:2a:fe:75:c4:4f:b7:cb:32:b1:fd:93:
                    de:36:1c:f8:6a:b1:e6:86:a7:68:e7:4a:b4:1d:e8:
                    95:ce:ba:79:7c:a7:a2:2a:8c:cc:80:5b:1f:5f:e4:
                    28:81:81:49:1f:dd:ba:2d:11:0d:b4:a3:96:45:0a:
                    58:71:82:12:f9:ce:0b:b1:7e:bf:f1:35:12:a5:70:
                    77:c4:d0:a6:1f:12:9c:e6:87:97:07:ee:e0:f3:fe:
                    2a:a3:93:bd:cb:cf:ca:be:ef:04:eb:a1:8d:27:6b:
                    d9:9f:c8:c2:3b:ae:6d:f6:8e:b6:52:c1:86:f3:97:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:52:89:3C:56:50:8E:74:F1:F1:C7:46:FD:2F:07:C1:76:2F:33:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7d242c40-3559-322b-95d3-9278be1b329f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:31:2b:f6:53:6c:8c:7e:14:a2:29:10:c3:ce:40:bf:6e:59:
         4b:a5:9a:1c:5c:1d:37:7c:23:e7:36:bd:01:e7:5d:d5:91:37:
         59:6d:67:c2:71:1b:59:8c:fc:42:36:c8:45:10:1d:e0:da:1e:
         2a:ac:79:8b:b8:57:a8:38:3d:cb:cd:c5:58:9e:b8:25:cb:91:
         8c:f0:12:a3:91:a6:9b:ff:e0:e5:f7:e4:a2:a7:8e:a2:fd:76:
         60:18:b2:ae:81:31:fb:5d:8c:11:d8:cb:ef:4c:74:b7:06:99:
         e9:65:3d:4d:9c:96:3e:99:7d:b5:2e:32:0d:95:99:6c:5c:9c:
         e5:d9:51:c2:52:1a:80:03:a6:48:f5:cf:be:6b:5b:35:3d:ab:
         9a:c8:f1:b4:da:bd:1d:c5:1e:59:38:c3:b9:46:74:b1:ba:20:
         3f:da:9c:c5:49:2d:e4:fd:73:ab:0b:f0:3a:88:54:5f:37:6c:
         e1:cf:d8:dc:fb:8a:26:98:5a:2d:c3:32:d0:03:c8:a4:95:a2:
         eb:7d:38:84:13:56:d3:38:60:90:91:01:b0:e4:75:07:c6:c7:
         b0:15:74:e4:72:96:ab:aa:73:33:cf:1e:0d:4c:d3:61:b4:1b:
         d8:fa:88:b7:c8:0d:0f:54:19:da:f1:4b:7c:7b:74:d9:11:91:
         d2:d6:30:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgL79xyH/NXXi54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
MDQzZWE5NDktZTc2Yi00OWNjLWEwMjEtYzkwNjc2MWU0YjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjTZ8K0Kh9yx60mFWYHemmyrUbwBY+xFeLR1
5xIBFBqT0yq8y72Bzzl/A2UNuzxI8P/JXZssoH8jQyXZAc1WudsoDvkwPGDpJ6TW
fhYjxDLEuXEE+qsrtqU483/eYF4Hm3NVJbdRaRXanPfFkKLn/5uZW85d0CEbWgvA
Ow/s1/5nQEzl8BjFCzqRKv51xE+3yzKx/ZPeNhz4arHmhqdo50q0HeiVzrp5fKei
KozMgFsfX+QogYFJH926LRENtKOWRQpYcYIS+c4LsX6/8TUSpXB3xNCmHxKc5oeX
B+7g8/4qo5O9y8/Kvu8E66GNJ2vZn8jCO65t9o62UsGG85ff4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtSiTxWUI508fHHRv0vB8F2LzOEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2QyNDJjNDAtMzU1OS0z
MjJiLTk1ZDMtOTI3OGJlMWIzMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKovMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkxK/ZTbIx+FKIpEMPOQL9uWUulmhxcHTd8I+c2vQHnXdWRN1ltZ8Jx
G1mM/EI2yEUQHeDaHiqseYu4V6g4PcvNxVieuCXLkYzwEqORppv/4OX35KKnjqL9
dmAYsq6BMftdjBHYy+9MdLcGmellPU2clj6ZfbUuMg2VmWxcnOXZUcJSGoADpkj1
z75rWzU9q5rI8bTavR3FHlk4w7lGdLG6ID/anMVJLeT9c6sL8DqIVF83bOHP2Nz7
iiaYWi3DMtADyKSVout9OIQTVtM4YJCRAbDkdQfGx7AVdORylquqczPPHg1M02G0
G9j6iLfIDQ9UGdrxS3x7dNkRkdLWMAE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org