Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
File:                     8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json)
Hash identifier:          8gue3nmdnDejvv5mXvD73OhyilJ/q9XT7EzK72lv0P8=
Subject key identifier:   24:C5:33:F4:5B:00:9B:76:E7:77:68:5D:6F:9C:36:2C:9B:13:EC:AB
Certificate issuer:       /CN=25422be5-720b-40bc-8a4d-02579ec1bead
Certificate serial:       010D0C9F4328584726D082CE9770BA9469FD8D00
Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     63447
IP address blocks:        104.245.200.0/22 maxlen: 22
                          204.107.204.0/24 maxlen: 24
                          2602:ff98::/36 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:82:ce:97:70:ba:94:69:fd:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=359d6545-9f99-4615-9843-3be309e61c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:4e:fd:21:d9:51:d3:7f:02:cf:7d:28:3b:
                    0f:12:6e:f0:89:5f:b7:b9:42:57:11:77:cb:c2:13:
                    4b:c4:0b:5e:02:65:5a:b3:63:b7:f3:6e:a3:0f:b2:
                    8f:52:b8:c9:b0:af:07:c1:48:6e:96:01:0c:d1:02:
                    39:80:41:ff:23:01:3f:55:d5:01:f6:6f:5a:e1:9f:
                    af:fd:67:52:59:84:55:16:b7:c3:0e:05:df:6f:16:
                    e2:8f:1f:c7:51:ad:26:e9:fa:d1:9e:48:0e:96:e7:
                    d5:83:de:82:00:f6:b0:82:83:db:d8:93:41:31:2c:
                    0f:b1:54:d7:b2:9a:ef:4e:7e:b5:e5:5e:b7:24:0b:
                    b5:53:e9:85:36:bd:42:30:d5:d0:c8:3c:98:2e:25:
                    86:fa:d3:1b:08:49:c7:aa:fe:cd:70:54:b7:6d:a9:
                    32:36:80:bb:88:26:b5:51:89:1e:fc:cf:bf:ef:1b:
                    43:39:d1:1f:bc:35:e0:51:b4:ac:b4:18:fb:08:d3:
                    8c:68:3c:15:26:29:e8:db:66:29:86:c5:fb:f8:b7:
                    ab:cc:4b:8e:d6:17:4a:0d:1e:00:97:66:b8:ad:59:
                    8b:f3:86:9f:11:66:e9:27:c1:fb:c8:95:23:e4:ca:
                    15:fb:57:91:a8:f8:73:b4:6f:a1:a1:03:88:ad:47:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C5:33:F4:5B:00:9B:76:E7:77:68:5D:6F:9C:36:2C:9B:13:EC:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl

            X509v3 Authority Key Identifier:
                keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.200.0/22
                  204.107.204.0/24
                IPv6:
                  2602:ff98::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:d5:52:09:da:e4:fd:8e:2b:b5:5f:ab:37:e6:b9:6b:18:b7:
         78:4e:f1:65:88:89:0d:2f:6e:6a:2f:e0:c4:fb:81:03:15:78:
         e4:09:75:f1:86:5c:fb:95:45:04:2e:f0:fe:ba:6f:31:7e:16:
         7e:23:23:49:96:16:93:4b:dd:d0:ca:b4:e2:68:80:42:3f:3a:
         82:8b:9f:91:9b:5d:ab:c7:de:8e:2f:f5:74:0d:41:9f:1f:93:
         b4:9f:b9:84:ef:4b:d7:5f:64:b5:56:de:25:ae:3c:af:f8:c3:
         5a:ea:be:ab:e2:d5:3e:83:b3:cd:51:18:01:68:94:39:5f:44:
         c8:19:91:bf:2c:fe:13:d1:7b:e2:32:14:a4:8c:a4:45:96:05:
         a3:df:30:04:9f:3b:d9:f6:e9:ff:2e:c3:fc:fc:c6:6d:9a:2b:
         68:9b:70:47:04:0b:ab:c3:0b:bc:1e:dd:ae:a1:b8:82:12:d4:
         70:7b:31:4c:16:87:38:2a:35:20:be:0d:4e:79:7d:18:df:0f:
         6b:7b:ea:dc:07:4d:1e:1d:6e:dd:39:2f:6b:a1:b2:e7:e9:5d:
         90:22:d6:f9:ac:96:7d:98:e8:d7:23:65:f7:d7:6c:bd:d9:a0:
         ce:3b:17:32:85:df:54:41:0e:97:27:e1:93:2c:a5:7e:c1:5f:
         96:f0:13:4c
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEcm0ILOl3C6lGn9jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi
ZWFkMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk
MzU5ZDY1NDUtOWY5OS00NjE1LTk4NDMtM2JlMzA5ZTYxYzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlANO/SHZUdN/As99KDsPEm7wiV+3uUJXEXfL
whNLxAteAmVas2O3826jD7KPUrjJsK8HwUhulgEM0QI5gEH/IwE/VdUB9m9a4Z+v
/WdSWYRVFrfDDgXfbxbijx/HUa0m6frRnkgOlufVg96CAPawgoPb2JNBMSwPsVTX
sprvTn615V63JAu1U+mFNr1CMNXQyDyYLiWG+tMbCEnHqv7NcFS3bakyNoC7iCa1
UYke/M+/7xtDOdEfvDXgUbSstBj7CNOMaDwVJino22YphsX7+LerzEuO1hdKDR4A
l2a4rVmL84afEWbpJ8H7yJUj5MoV+1eRqPhztG+hoQOIrUdGVQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFCTFM/RbAJt253doXW+cNiybE+yrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy
MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvOGE1YzBlOTAtZWM2Yi0z
YWM4LTg1ZDctOTA4Zjg4MGU3MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh
NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx
YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3
OWVjMWJlYWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCaPXIAwQA
zGvMMA4EAgACMAgDBgQmAv+YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC91VIJ2uT9jiu1X6s35rlrGLd4
TvFliIkNL25qL+DE+4EDFXjkCXXxhlz7lUUELvD+um8xfhZ+IyNJlhaTS93QyrTi
aIBCPzqCi5+Rm12rx96OL/V0DUGfH5O0n7mE70vXX2S1Vt4lrjyv+MNa6r6r4tU+
g7PNURgBaJQ5X0TIGZG/LP4T0XviMhSkjKRFlgWj3zAEnzvZ9un/LsP8/MZtmito
m3BHBAurwwu8Ht2uobiCEtRwezFMFoc4KjUgvg1OeX0Y3w9re+rcB00eHW7dOS9r
obLn6V2QItb5rJZ9mOjXI2X312y92aDOOxcyhd9UQQ6XJ+GTLKV+wV+W8BNM
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:09 2024 by rpki-client on console-ams.rpki-client.org