Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15570953-3408-31bd-b153-b8ac3ca5e891.roa
File:                     15570953-3408-31bd-b153-b8ac3ca5e891.roa (raw, json)
Hash identifier:          0nFG7/JD5BiPVb0M3PNEfSD6EuNPsvcQsOuyex6G9Io=
Subject key identifier:   97:03:36:63:78:2A:F9:96:C9:69:E9:35:77:C7:50:D0:43:79:84:DD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BC33A213C2FBDFDE39B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15570953-3408-31bd-b153-b8ac3ca5e891.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.122.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:c3:3a:21:3c:2f:bd:fd:e3:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=a5b566be-4490-4940-a2eb-ae876a5f1bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:8b:3c:5f:6b:d4:f5:93:6d:c6:10:cf:35:
                    06:f9:7b:db:d3:28:23:85:59:79:e6:13:a9:80:bb:
                    d1:cb:95:85:ee:cf:40:df:fc:6b:e6:99:47:cb:50:
                    f0:55:f9:44:b1:03:8e:ac:f5:ed:eb:1a:e2:23:aa:
                    ab:50:02:35:e9:de:f8:d1:59:fe:4b:89:98:fd:15:
                    2b:0c:48:cc:d4:e5:a3:e8:b0:43:20:e5:c6:91:22:
                    ee:d5:ca:2e:74:2a:a5:60:ba:5a:c2:60:9d:c1:cf:
                    d5:2f:d7:87:39:7e:e4:de:91:0f:51:98:5c:de:26:
                    07:15:cf:7b:58:2f:a2:d7:27:5d:f1:40:11:78:73:
                    01:78:94:72:7d:cc:eb:c8:f9:41:45:b4:b4:c3:b2:
                    cc:b4:f4:33:c9:9e:5d:40:6f:a5:b0:10:61:78:7c:
                    e5:2a:51:19:87:81:e3:c6:9b:a7:42:19:93:e7:01:
                    61:57:4f:6e:63:10:16:65:72:a4:e3:c5:7d:3c:ea:
                    41:6e:09:a8:33:c6:3e:de:b4:ab:4f:24:aa:48:82:
                    ad:49:ae:c9:bb:7d:ee:27:4b:bd:82:e4:eb:f9:f1:
                    b7:49:ce:b8:a0:ca:67:ad:91:17:75:81:32:87:7d:
                    3b:02:41:df:5a:44:d7:bf:93:48:a9:9b:2f:6b:c5:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:03:36:63:78:2A:F9:96:C9:69:E9:35:77:C7:50:D0:43:79:84:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15570953-3408-31bd-b153-b8ac3ca5e891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.122.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:31:19:9a:16:79:f2:bd:4b:da:cc:10:9f:ca:f1:8e:09:d2:
         58:3f:cf:6b:bb:17:70:3a:a6:6a:8b:c6:fd:22:e5:34:57:38:
         14:e5:d1:e7:6f:85:39:0f:53:f6:d8:b1:fd:05:64:6b:70:70:
         a3:56:eb:60:22:3a:52:2a:64:80:49:f1:ef:0e:dc:42:39:5c:
         08:17:1b:86:d5:77:ac:ee:a8:b3:81:9f:41:ca:61:d1:46:ad:
         46:18:1b:8a:28:d1:d5:8a:9e:6d:5d:c7:2c:ff:37:d8:f8:36:
         c4:93:94:ca:c8:c0:f6:55:a7:0d:f7:dd:1a:55:3f:e5:b2:d7:
         da:c6:2f:be:87:f3:44:7c:9b:ef:e5:5e:08:de:39:51:f9:59:
         40:ad:c7:b9:81:04:df:73:3b:9f:84:1c:da:7d:a0:ef:32:89:
         4e:6c:27:ae:c0:54:54:f4:7a:06:4d:4e:78:49:43:8d:b0:5c:
         d1:e0:3b:0d:31:25:03:7c:f5:d1:d0:36:58:3a:6d:8a:18:6e:
         1d:39:6e:8f:95:f7:04:37:f6:43:3e:6d:86:f3:ac:b5:e8:04:
         6f:db:4f:bf:26:e2:af:15:6c:6d:ec:1b:a9:fb:25:5b:88:23:
         77:ac:16:ec:9a:75:2c:7b:de:ca:77:41:f5:60:f1:89:c1:cb:
         de:15:3e:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K8M6ITwvvf3jm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
YTViNTY2YmUtNDQ5MC00OTQwLWEyZWItYWU4NzZhNWYxYmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOqLPF9r1PWTbcYQzzUG+Xvb0ygjhVl55hOp
gLvRy5WF7s9A3/xr5plHy1DwVflEsQOOrPXt6xriI6qrUAI16d740Vn+S4mY/RUr
DEjM1OWj6LBDIOXGkSLu1coudCqlYLpawmCdwc/VL9eHOX7k3pEPUZhc3iYHFc97
WC+i1ydd8UAReHMBeJRyfczryPlBRbS0w7LMtPQzyZ5dQG+lsBBheHzlKlEZh4Hj
xpunQhmT5wFhV09uYxAWZXKk48V9POpBbgmoM8Y+3rSrTySqSIKtSa7Ju33uJ0u9
guTr+fG3Sc64oMpnrZEXdYEyh307AkHfWkTXv5NIqZsva8VZnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJcDNmN4KvmWyWnpNXfHUNBDeYTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU1NzA5NTMtMzQwOC0z
MWJkLWIxNTMtYjhhYzNjYTVlODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHpeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcxGZoWefK9S9rMEJ/K8Y4J0lg/z2u7F3A6pmqLxv0i5TRXOBTl0edv
hTkPU/bYsf0FZGtwcKNW62AiOlIqZIBJ8e8O3EI5XAgXG4bVd6zuqLOBn0HKYdFG
rUYYG4oo0dWKnm1dxyz/N9j4NsSTlMrIwPZVpw333RpVP+Wy19rGL76H80R8m+/l
XgjeOVH5WUCtx7mBBN9zO5+EHNp9oO8yiU5sJ67AVFT0egZNTnhJQ42wXNHgOw0x
JQN89dHQNlg6bYoYbh05bo+V9wQ39kM+bYbzrLXoBG/bT78m4q8VbG3sG6n7JVuI
I3esFuyadSx73sp3QfVg8YnBy94VPuE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:20 2024 by rpki-client on console-fra.rpki-client.org