Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa
File:                     1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa (raw, json)
Hash identifier:          U1E7k2OKgGmCbHFYbDhWb4m7vnTVCfsMiaU28pjIbJY=
Subject key identifier:   86:2C:E9:96:D1:05:45:9E:E8:CE:1F:6B:E4:07:A5:9A:87:1B:58:3E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D503A62808DCCD8965F41B80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        104.156.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:a6:28:08:dc:cd:89:65:f4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=c432cf29-0f64-488b-a58e-cc42f77d9662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7f:05:b3:a4:ad:8c:db:4f:c3:22:46:c9:63:
                    b4:74:7c:7b:e7:19:72:50:c4:1b:0d:d6:56:44:f5:
                    96:ef:33:51:25:b5:08:83:ec:63:9b:c3:56:6e:db:
                    d6:96:60:6a:8e:15:64:a1:ef:0d:94:6a:ff:89:21:
                    2d:4b:93:0a:b7:6f:2b:f9:f8:e7:30:74:62:68:16:
                    18:da:13:fa:b1:d6:c1:72:9c:cd:3a:b6:8a:8a:62:
                    6b:a5:4c:7a:83:41:d3:f2:f8:89:48:16:99:d3:03:
                    42:36:37:f9:3d:83:b7:ee:4a:0b:fb:60:ec:74:9d:
                    ce:09:1c:8a:10:c5:df:39:08:a3:76:06:74:2a:87:
                    64:ff:d0:24:4e:f5:1e:10:76:f4:61:2a:59:e0:90:
                    71:d2:6e:81:af:e8:d0:48:56:6f:06:44:e1:b1:a9:
                    ec:da:67:a8:90:ae:18:58:be:c2:cb:fb:dc:78:c1:
                    b6:f3:70:17:7f:c6:43:8e:7d:c8:6f:e9:0d:4a:89:
                    ad:3c:95:1f:dc:c8:f8:47:8e:62:fb:7c:15:b5:cf:
                    b2:08:58:ab:77:b3:6b:cf:8c:10:c3:09:9e:d3:1a:
                    f5:c7:49:5e:df:ea:dd:60:6f:84:c1:21:7f:46:fa:
                    09:9d:b2:38:83:84:79:8d:3d:1c:46:64:f9:c7:96:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:E9:96:D1:05:45:9E:E8:CE:1F:6B:E4:07:A5:9A:87:1B:58:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:bc:f4:62:4d:33:cc:ff:74:08:c4:71:06:ec:aa:4d:46:
         64:52:d7:8d:44:5d:65:cb:0a:3a:ce:46:40:24:dd:f3:b0:23:
         51:ce:cf:3b:c7:b3:81:1e:16:11:4a:b3:ef:8d:00:07:63:dc:
         c9:ab:f7:df:f2:f3:af:c2:14:3a:c7:ad:ff:06:38:5c:94:13:
         db:d2:ee:36:90:cc:61:c0:1b:c4:07:c7:01:77:c2:8c:8e:c3:
         08:78:5a:4e:6d:1f:f6:17:d7:6a:6b:26:ff:e1:87:ff:52:0b:
         35:86:6a:e6:83:c1:a0:a7:e2:0f:25:a3:07:1c:e1:d3:eb:cf:
         be:31:b1:e4:72:b8:4a:c5:91:35:d3:25:17:68:22:b9:13:d7:
         4d:38:6d:94:39:4e:55:44:bd:31:18:d6:b2:bd:be:5c:b4:1b:
         93:97:15:9b:a2:4e:7e:8b:8b:07:d2:c9:e0:e1:c2:42:2f:47:
         83:8d:82:07:a0:99:cc:9d:bb:80:ac:74:89:73:fe:52:13:a3:
         33:fb:ff:b5:86:bf:77:46:42:87:03:5d:06:40:d5:e8:29:38:
         62:4e:6a:00:3b:61:a4:c0:8b:5b:5f:3a:09:94:d5:12:b6:ec:
         a2:7c:01:38:c7:c0:d2:8f:42:f4:f2:e9:38:cf:fc:cf:e9:01:
         40:ee:69:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA6YoCNzNiWX0G4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
YzQzMmNmMjktMGY2NC00ODhiLWE1OGUtY2M0MmY3N2Q5NjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H8Fs6StjNtPwyJGyWO0dHx75xlyUMQbDdZW
RPWW7zNRJbUIg+xjm8NWbtvWlmBqjhVkoe8NlGr/iSEtS5MKt28r+fjnMHRiaBYY
2hP6sdbBcpzNOraKimJrpUx6g0HT8viJSBaZ0wNCNjf5PYO37koL+2DsdJ3OCRyK
EMXfOQijdgZ0Kodk/9AkTvUeEHb0YSpZ4JBx0m6Br+jQSFZvBkThsans2meokK4Y
WL7Cy/vceMG283AXf8ZDjn3Ib+kNSomtPJUf3Mj4R45i+3wVtc+yCFird7Nrz4wQ
wwme0xr1x0le3+rdYG+EwSF/RvoJnbI4g4R5jT0cRmT5x5b2ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYs6ZbRBUWe6M4fa+QHpZqHG1g+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMWNiNmExZjEtMGE5MC0z
NGQxLTlhMjItNTMwM2MxZjQ3YTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvkvPRiTTPM/3QIxHEG7KpNRmRS141EXWXLCjrORkAk3fOwI1HOzzvH
s4EeFhFKs++NAAdj3Mmr99/y86/CFDrHrf8GOFyUE9vS7jaQzGHAG8QHxwF3woyO
wwh4Wk5tH/YX12prJv/hh/9SCzWGauaDwaCn4g8lowcc4dPrz74xseRyuErFkTXT
JRdoIrkT1004bZQ5TlVEvTEY1rK9vly0G5OXFZuiTn6LiwfSyeDhwkIvR4ONggeg
mcydu4CsdIlz/lITozP7/7WGv3dGQocDXQZA1egpOGJOagA7YaTAi1tfOgmU1RK2
7KJ8ATjHwNKPQvTy6TjP/M/pAUDuaZ4=
-----END CERTIFICATE-----
Generated at Wed May 22 23:39:43 2024 by rpki-client on console-fra.rpki-client.org