Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/52ac95f8-c487-31f5-9f02-2e212018ddb0.roa
File:                     52ac95f8-c487-31f5-9f02-2e212018ddb0.roa (raw, json)
Hash identifier:          7GahNZJQ6I5ywXmxJxbh9PEoeNf4vwZq/q3PgbdLURc=
Subject key identifier:   9C:64:F1:BB:B9:50:5E:1C:56:DC:B3:47:98:01:6E:30:2A:0A:DB:6A
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230E7D453D421CF46E57740
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/52ac95f8-c487-31f5-9f02-2e212018ddb0.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     20454
IP address blocks:        104.218.198.0/24 maxlen: 24
                          104.218.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e7:d4:53:d4:21:cf:46:e5:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=472ec808-a1b1-4b1f-a815-3cce3868b6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:0f:ca:2e:0b:f7:15:d1:1f:85:95:ee:49:
                    8f:91:54:4d:94:55:a6:6d:bc:56:8d:d1:02:a8:58:
                    40:3c:dd:9d:8d:27:a4:d9:fc:0e:f1:77:1b:52:f3:
                    60:17:94:3b:93:06:e7:85:85:7a:c5:ce:7a:4e:de:
                    43:fa:06:b4:24:e6:6d:44:a0:25:af:09:50:60:b6:
                    7e:ae:07:25:f0:70:21:61:ef:c5:12:de:21:b9:5e:
                    2b:a0:ab:50:1e:0b:7b:52:ee:34:67:84:e2:c5:06:
                    1f:f0:6f:78:54:7d:f2:4c:40:8e:17:4f:fd:97:ad:
                    85:34:c4:53:ad:3a:d2:cb:e8:98:79:8a:d8:de:f3:
                    3d:95:f4:ce:03:8f:ef:22:53:d0:1b:0e:de:13:19:
                    35:fe:b8:c8:9a:a7:91:bf:88:81:11:2e:96:73:13:
                    03:fc:6f:0e:49:4d:8b:dd:c1:82:e6:df:1b:e3:47:
                    71:ce:fb:10:65:17:17:b4:81:76:b8:db:30:72:11:
                    01:6d:ad:57:30:cc:25:1b:8d:75:b6:0f:aa:4d:1a:
                    9e:60:18:63:15:ab:52:1f:2b:e0:3c:19:6b:de:46:
                    4a:0a:63:05:a0:e7:24:99:c1:7a:d2:e9:68:06:74:
                    31:94:94:79:70:3c:18:38:cc:c9:de:5d:57:37:c3:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:F1:BB:B9:50:5E:1C:56:DC:B3:47:98:01:6E:30:2A:0A:DB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/52ac95f8-c487-31f5-9f02-2e212018ddb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1a:a9:f0:dd:e6:be:57:d6:0b:c7:d9:a6:78:a5:15:4e:57:
         18:6a:e7:34:54:19:c8:8b:cd:2e:2a:5a:94:a9:fd:f9:48:d0:
         51:8a:03:48:fa:57:3d:1c:f7:37:cd:2a:ab:3b:ef:76:eb:29:
         e0:41:bd:66:0f:04:36:a9:ad:db:68:ea:ff:55:0f:15:c5:28:
         d8:8b:de:7d:e4:17:9a:0d:ff:7f:c1:d6:aa:d0:15:a8:e0:e2:
         1d:82:76:d2:65:db:74:83:89:9a:98:5b:7a:4d:e8:c7:ef:b2:
         1f:79:dc:62:86:1d:b4:a3:4f:1a:7b:ca:d6:18:63:fc:9d:eb:
         a9:51:a9:fc:6b:16:db:ef:c3:48:e5:eb:8c:cf:b6:6a:a3:be:
         90:1b:72:ef:a2:fd:e6:b1:89:60:8a:80:c1:6c:fa:f7:3e:a6:
         dd:ff:68:6e:ab:51:7e:78:8f:e5:27:1e:df:24:19:2a:04:c7:
         7b:d8:72:ac:8b:5b:37:13:c9:0b:fa:b6:9b:84:69:db:58:3a:
         c3:89:97:79:78:01:3c:a9:ab:45:05:c8:a5:75:4c:e3:65:97:
         6c:1c:9b:05:44:3f:f0:a3:36:a0:25:43:9f:d7:e0:a9:0c:aa:
         a0:2e:3e:ca:ef:f1:4b:37:d4:ad:8f:39:00:e0:b5:51:db:78:
         aa:06:c6:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOfUU9Qhz0bld0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
NDcyZWM4MDgtYTFiMS00YjFmLWE4MTUtM2NjZTM4NjhiNmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M0Pyi4L9xXRH4WV7kmPkVRNlFWmbbxWjdEC
qFhAPN2djSek2fwO8XcbUvNgF5Q7kwbnhYV6xc56Tt5D+ga0JOZtRKAlrwlQYLZ+
rgcl8HAhYe/FEt4huV4roKtQHgt7Uu40Z4TixQYf8G94VH3yTECOF0/9l62FNMRT
rTrSy+iYeYrY3vM9lfTOA4/vIlPQGw7eExk1/rjImqeRv4iBES6WcxMD/G8OSU2L
3cGC5t8b40dxzvsQZRcXtIF2uNswchEBba1XMMwlG411tg+qTRqeYBhjFatSHyvg
PBlr3kZKCmMFoOckmcF60uloBnQxlJR5cDwYOMzJ3l1XN8OvDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxk8bu5UF4cVtyzR5gBbjAqCttqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTJhYzk1ZjgtYzQ4Ny0z
MWY1LTlmMDItMmUyMTIwMThkZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNrGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFoaqfDd5r5X1gvH2aZ4pRVOVxhq5zRUGciLzS4qWpSp/flI0FGKA0j6
Vz0c9zfNKqs773brKeBBvWYPBDaprdto6v9VDxXFKNiL3n3kF5oN/3/B1qrQFajg
4h2CdtJl23SDiZqYW3pN6Mfvsh953GKGHbSjTxp7ytYYY/yd66lRqfxrFtvvw0jl
64zPtmqjvpAbcu+i/eaxiWCKgMFs+vc+pt3/aG6rUX54j+UnHt8kGSoEx3vYcqyL
WzcTyQv6tpuEadtYOsOJl3l4ATypq0UFyKV1TONll2wcmwVEP/CjNqAlQ5/X4KkM
qqAuPsrv8Us31K2POQDgtVHbeKoGxoE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org