Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa
File:                     ecbf30c8-7329-3304-805e-346857b377f6.roa (raw, json)
Hash identifier:          h2deAeE678RLB1wQvbiI2XPMz+I5b/MMhG6Ji754qIc=
Subject key identifier:   06:85:BE:A5:CB:46:60:D0:CA:5C:E0:52:60:97:BF:A2:08:B9:ED:C2
Certificate issuer:       /CN=12e1088c-ebe4-47cb-a051-5344b3551a83
Certificate serial:       010D0C9F432858474DE5FD859D9D58E3B9569F80
Authority key identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     13621
IP address blocks:        104.128.78.0/23 maxlen: 24
                          198.190.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fd:85:9d:9d:58:e3:b9:56:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e1088c-ebe4-47cb-a051-5344b3551a83
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=8d168047-8884-47a5-b48e-3a1d0b2a0a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:ce:c9:ee:18:4f:48:a0:b4:12:4c:07:47:
                    d3:21:fa:f4:b9:9c:bd:84:d2:e9:d3:e5:e0:4b:8c:
                    97:9f:97:fd:2a:3d:17:34:73:cf:53:56:df:e1:97:
                    58:8a:ce:bb:ee:e6:42:42:ab:70:b9:2c:09:7d:73:
                    2a:e8:51:56:bc:05:03:9b:d1:5c:f7:18:45:4a:5a:
                    28:e2:c6:de:9c:da:ef:93:10:46:b2:9e:be:59:c8:
                    35:90:d9:60:d3:c5:5e:9e:21:2c:9d:1f:55:23:d6:
                    f2:f6:44:aa:f9:c4:5c:56:1a:bb:c8:22:3e:4e:8b:
                    20:93:fe:4b:20:ee:4a:a7:99:df:f3:0b:ea:7b:bc:
                    f2:a6:28:47:ae:13:f3:fc:ef:b5:b6:67:48:de:cb:
                    13:e6:f9:d3:60:1d:9e:34:9f:fd:87:57:8c:e3:d0:
                    6a:4d:ac:56:a8:2d:e5:f9:65:68:a2:f7:c4:72:0e:
                    7c:fd:f4:6a:37:10:78:94:6b:8c:d6:54:21:30:3c:
                    21:69:85:7d:aa:c8:a4:3e:a6:f2:25:d6:68:0a:46:
                    3d:7a:a1:c4:4a:b9:28:01:67:97:b6:0c:d2:a1:c8:
                    76:05:07:ce:40:ba:2f:97:52:70:b6:ec:b6:7b:36:
                    97:d1:a3:79:67:f0:cc:d7:07:79:72:ed:39:fc:94:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:BE:A5:CB:46:60:D0:CA:5C:E0:52:60:97:BF:A2:08:B9:ED:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.crl

            X509v3 Authority Key Identifier:
                keyid:8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.78.0/23
                  198.190.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:af:49:19:b2:ad:a4:f2:72:65:5b:e1:76:4e:c4:40:7f:
         9a:14:ba:d3:a9:86:f3:98:f7:55:39:ec:d3:95:24:3f:56:83:
         8e:42:67:80:76:d1:55:d1:f7:12:2e:81:3c:d0:31:0b:0b:b0:
         18:41:70:df:34:8f:72:2d:b2:34:76:3a:d4:76:3c:b0:8b:29:
         3b:01:ef:7f:7b:fb:b8:3e:9b:90:de:23:58:e9:ce:ac:cd:35:
         dc:e9:76:7c:a7:06:dd:4b:98:76:57:c2:5a:90:fc:a4:d5:73:
         78:9f:e1:e1:dd:b5:8a:12:46:4d:54:cb:1e:77:7a:9a:bf:cc:
         9b:05:f8:cb:72:69:68:1e:c1:8c:00:ad:47:b1:1d:a6:97:df:
         d5:d9:96:6d:7c:07:c2:e0:b8:29:1a:5d:2c:c0:2c:de:e4:de:
         3d:35:66:3b:ef:10:3f:02:96:12:8d:5d:ed:1a:18:65:36:d4:
         d3:8e:ea:dc:17:98:62:2c:01:c1:d6:61:c5:a0:e4:a9:c0:96:
         71:a4:2d:89:10:86:70:76:dd:2a:8e:3d:51:c1:17:53:58:a9:
         02:32:84:36:99:fb:8f:a5:ef:59:b3:5d:43:af:d8:ef:b0:56:
         4a:74:c1:95:3f:c7:10:8f:42:b3:15:e4:e8:47:e8:e2:58:df:
         97:56:52:89
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdN5f2FnZ1Y47lWn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJlMTA4OGMtZWJlNC00N2NiLWEwNTEtNTM0NGIzNTUx
YTgzMB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk
OGQxNjgwNDctODg4NC00N2E1LWI0OGUtM2ExZDBiMmEwYTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjPOye4YT0igtBJMB0fTIfr0uZy9hNLp0+Xg
S4yXn5f9Kj0XNHPPU1bf4ZdYis677uZCQqtwuSwJfXMq6FFWvAUDm9Fc9xhFSloo
4sbenNrvkxBGsp6+Wcg1kNlg08VeniEsnR9VI9by9kSq+cRcVhq7yCI+Tosgk/5L
IO5Kp5nf8wvqe7zypihHrhPz/O+1tmdI3ssT5vnTYB2eNJ/9h1eM49BqTaxWqC3l
+WVoovfEcg58/fRqNxB4lGuM1lQhMDwhaYV9qsikPqbyJdZoCkY9eqHESrkoAWeX
tgzSoch2BQfOQLovl1Jwtuy2ezaX0aN5Z/DM1wd5cu05/JSxEQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAaFvqXLRmDQylzgUmCXv6IIue3CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMmUx
MDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1NTFhODMvZWNiZjMwYzgtNzMyOS0z
MzA0LTgwNWUtMzQ2ODU3YjM3N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTJlMTA4OGMtZWJlNC00N2NiLWEw
NTEtNTM0NGIzNTUxYTgzLzEyZTEwODhjLWViZTQtNDdjYi1hMDUxLTUzNDRiMzU1
MWE4My5jcmwwHwYDVR0jBBgwFoAUigPC+c8mlQCBebwLhcxEn7vFtc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0
YjM1NTFhODMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBaIBOAwQA
xr6rMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIHtr0kZsq2k8nJlW+F2TsRAf5oUutOphvOY91U57NOVJD9W
g45CZ4B20VXR9xIugTzQMQsLsBhBcN80j3ItsjR2OtR2PLCLKTsB7397+7g+m5De
I1jpzqzNNdzpdnynBt1LmHZXwlqQ/KTVc3if4eHdtYoSRk1Uyx53epq/zJsF+Mty
aWgewYwArUexHaaX39XZlm18B8LguCkaXSzALN7k3j01ZjvvED8ClhKNXe0aGGU2
1NOO6twXmGIsAcHWYcWg5KnAlnGkLYkQhnB23SqOPVHBF1NYqQIyhDaZ+4+l71mz
XUOv2O+wVkp0wZU/xxCPQrMV5OhH6OJY35dWUok=
-----END CERTIFICATE-----
Generated at Sat Nov 23 23:40:27 2024 by rpki-client on console-fra.rpki-client.org