Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/fb782dca-b91f-32ae-8beb-3964d1a7981d.roa
File:                     fb782dca-b91f-32ae-8beb-3964d1a7981d.roa (raw, json)
Hash identifier:          NWntu6wl9L2Sbl5u7MGopvmxLiMmfG2Ds/1DfQXG/hs=
Subject key identifier:   BC:E5:98:C9:AA:91:6C:EE:42:68:33:2C:B6:10:9D:9E:D1:96:82:5B
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F43285846C24FC2A9CC3B1FE33C6A9C00
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/fb782dca-b91f-32ae-8beb-3964d1a7981d.roa
Signing time:             Sun 04 Aug 2024 01:00:28 +0000
ROA not before:           Sun 04 Aug 2024 01:00:28 +0000
ROA not after:            Sat 02 Nov 2024 01:00:28 +0000
asID:                     396982
IP address blocks:        104.36.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c2:4f:c2:a9:cc:3b:1f:e3:3c:6a:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Aug  4 01:00:28 2024 GMT
            Not After : Nov  2 01:00:28 2024 GMT
        Subject: CN=a7bcf5c8-10f8-40e0-89ea-22ecd17f7c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:eb:8a:fc:19:4d:99:b1:8d:29:eb:59:1d:
                    3c:84:9f:a8:49:e1:c3:72:88:48:f0:3f:10:09:d9:
                    8b:b7:7b:6a:14:28:d5:94:04:ac:c6:2f:b0:4b:26:
                    b8:74:0d:19:2e:00:ae:45:6b:e4:b0:60:08:11:49:
                    ec:2e:a6:7b:a8:4e:c9:65:a7:b6:22:fe:f2:2c:48:
                    d3:ba:24:30:91:d2:e9:75:a9:7d:c1:09:d4:ef:ca:
                    36:97:93:67:a3:e9:18:32:fd:32:ef:a0:78:0a:9a:
                    6d:32:33:e3:17:c1:c4:f5:9d:63:e2:65:c6:99:6d:
                    a4:c6:1c:e0:87:32:68:17:bc:91:1c:c3:de:19:97:
                    7e:5b:46:5d:8e:ea:02:dc:09:a4:89:95:6f:de:85:
                    44:d9:41:2a:54:ff:3d:df:f3:bb:c2:90:02:53:e0:
                    b3:f4:4e:03:82:8b:59:99:3f:1b:a5:05:a1:86:73:
                    71:53:91:d1:29:64:24:5a:76:91:18:4e:af:f0:10:
                    76:9f:96:57:b9:55:97:98:67:b0:54:0d:7a:96:e7:
                    37:9e:27:b6:61:c9:c0:8e:8e:3f:6f:e2:9a:da:76:
                    3b:de:37:80:5d:a7:7c:48:f2:4f:cc:d6:35:33:8c:
                    6a:0a:b5:aa:5a:39:2c:ce:29:f9:38:5d:dc:1c:ce:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E5:98:C9:AA:91:6C:EE:42:68:33:2C:B6:10:9D:9E:D1:96:82:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/fb782dca-b91f-32ae-8beb-3964d1a7981d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:35:f1:3f:eb:da:70:51:d3:d5:e0:bb:8d:67:23:e2:2b:4f:
         4e:d2:2a:6d:e6:30:4e:42:c6:59:0b:1f:25:aa:fb:98:a7:81:
         c5:fa:6c:a9:fd:52:87:c1:3c:60:72:f3:4b:a9:c0:54:e3:e6:
         ef:cb:61:b5:45:23:0b:31:57:75:32:92:51:c0:8c:4d:64:84:
         55:21:0d:58:c8:30:0c:95:de:9f:bb:1f:db:bb:4d:cf:f1:c8:
         25:8d:34:5a:98:37:79:c7:4b:01:4f:1c:ba:9c:74:11:7a:19:
         75:67:6f:80:cc:59:8d:1e:80:cc:ba:96:12:71:ef:6f:67:99:
         63:12:8a:06:59:dc:17:b4:71:bc:f7:40:a8:db:7f:c4:98:fe:
         db:01:10:9d:44:d0:f9:6f:e1:92:cc:d5:41:ac:d9:fc:65:4a:
         aa:26:05:63:5c:a1:d6:1d:fe:b1:f9:9d:29:68:18:1a:a3:6f:
         db:1d:80:87:97:3d:37:ce:05:a5:5c:ef:12:13:66:06:f2:d2:
         94:a4:da:90:2f:72:6e:a4:a8:39:d0:90:57:d9:b3:7d:1f:29:
         89:9a:e7:30:8a:e8:ce:2e:b1:b8:fd:10:a8:11:b7:c2:ed:ca:
         05:9a:63:44:e8:d2:3e:64:e9:81:1f:81:57:18:07:a2:10:cc:
         7b:66:6a:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbCT8KpzDsf4zxqnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI0MDgwNDAxMDAyOFoXDTI0MTEwMjAxMDAyOFowLzEtMCsGA1UEAxMk
YTdiY2Y1YzgtMTBmOC00MGUwLTg5ZWEtMjJlY2QxN2Y3Yzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVbrivwZTZmxjSnrWR08hJ+oSeHDcohI8D8Q
CdmLt3tqFCjVlASsxi+wSya4dA0ZLgCuRWvksGAIEUnsLqZ7qE7JZae2Iv7yLEjT
uiQwkdLpdal9wQnU78o2l5Nno+kYMv0y76B4CpptMjPjF8HE9Z1j4mXGmW2kxhzg
hzJoF7yRHMPeGZd+W0ZdjuoC3AmkiZVv3oVE2UEqVP893/O7wpACU+Cz9E4DgotZ
mT8bpQWhhnNxU5HRKWQkWnaRGE6v8BB2n5ZXuVWXmGewVA16luc3nie2YcnAjo4/
b+Ka2nY73jeAXad8SPJPzNY1M4xqCrWqWjkszin5OF3cHM60zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzlmMmqkWzuQmgzLLYQnZ7RloJbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvZmI3ODJkY2EtYjkxZi0z
MmFlLThiZWItMzk2NGQxYTc5ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMI18T/r2nBR09Xgu41nI+IrT07SKm3mME5CxlkLHyWq+5ingcX6bKn9
UofBPGBy80upwFTj5u/LYbVFIwsxV3UyklHAjE1khFUhDVjIMAyV3p+7H9u7Tc/x
yCWNNFqYN3nHSwFPHLqcdBF6GXVnb4DMWY0egMy6lhJx729nmWMSigZZ3Be0cbz3
QKjbf8SY/tsBEJ1E0Plv4ZLM1UGs2fxlSqomBWNcodYd/rH5nSloGBqjb9sdgIeX
PTfOBaVc7xITZgby0pSk2pAvcm6kqDnQkFfZs30fKYma5zCK6M4usbj9EKgRt8Lt
ygWaY0To0j5k6YEfgVcYB6IQzHtmahA=
-----END CERTIFICATE-----
Generated at Fri Sep 20 20:32:57 2024 by rpki-client on console-fra.rpki-client.org