Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ca99bbb-a8e2-3577-86ba-50d1b1038535.roa
File:                     2ca99bbb-a8e2-3577-86ba-50d1b1038535.roa (raw, json)
Hash identifier:          Kb/cp0BPnuXgNGdlDWj1XJ/U4ZJ646bHYxSZZ7sCPVM=
Subject key identifier:   C6:B7:3E:B7:D0:2E:4F:CB:BD:07:6B:27:AD:57:AD:C3:57:F6:A0:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584773966C777F0CC332887703C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ca99bbb-a8e2-3577-86ba-50d1b1038535.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        104.77.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:6c:77:7f:0c:c3:32:88:77:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=a879cd8e-4c10-46fe-ac8c-5835d14ada04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:9d:09:66:a0:63:8e:f9:0c:07:11:04:a9:
                    ae:85:72:ee:3e:df:91:49:c3:34:30:a2:4c:be:59:
                    87:fa:2d:53:17:b2:42:4c:04:49:5d:6e:ce:a8:8d:
                    fd:c4:ac:ea:96:d7:1f:ab:8c:82:2c:ad:60:e3:57:
                    6b:a0:ea:1f:9d:14:3c:00:5e:69:a6:b3:42:e2:0a:
                    19:b2:01:65:5c:44:57:bf:78:ba:24:85:06:fb:c8:
                    8d:b5:72:09:98:62:84:ad:b6:77:b9:70:5e:87:c1:
                    15:09:ba:31:5c:22:d8:a5:01:58:f9:f5:cb:36:1f:
                    c0:4d:34:04:f1:fc:26:10:29:19:c5:bd:24:80:3f:
                    dc:39:1c:b4:ed:e3:c6:49:bf:68:06:81:ab:8d:29:
                    56:c5:42:78:31:32:60:0b:e6:8b:1a:59:cd:22:6b:
                    01:ec:3c:de:15:87:0d:1a:1c:0e:9c:6b:ce:77:75:
                    21:4c:d2:28:0a:d3:18:4b:14:d3:38:90:4f:f4:b6:
                    ba:01:d9:be:24:f8:60:ad:b0:1b:12:46:30:ea:c1:
                    b9:0c:8f:77:15:d3:93:df:98:a7:1e:67:4a:e2:37:
                    da:c7:32:0b:70:15:dc:3e:4b:82:87:30:01:1f:f3:
                    61:ee:78:67:aa:4f:da:9f:9b:2a:50:03:86:2c:c3:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B7:3E:B7:D0:2E:4F:CB:BD:07:6B:27:AD:57:AD:C3:57:F6:A0:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ca99bbb-a8e2-3577-86ba-50d1b1038535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:c3:d5:01:7d:ef:7b:66:0d:98:77:a4:89:50:33:4b:1f:
         72:91:f8:48:7a:68:67:ac:64:d0:27:09:53:49:b2:4f:47:7c:
         f4:81:fc:5b:08:41:e3:01:46:d2:83:8d:36:69:67:22:c5:4a:
         53:bb:5b:2c:d9:86:01:28:22:34:e8:03:3c:c7:34:be:33:52:
         17:7d:76:f5:3a:53:a5:25:da:1b:66:0c:1a:cc:ab:3e:1f:b4:
         66:af:2b:31:7a:7d:b2:ad:45:31:e8:25:d4:ef:92:bb:f8:25:
         a2:15:e1:d9:b5:bf:55:e7:df:a5:08:01:23:89:f1:ca:85:60:
         ea:a0:e3:70:24:fd:5a:0f:bc:57:24:56:ee:3c:7b:81:4c:ea:
         a5:de:ad:95:a1:44:6b:37:5f:39:a0:d5:a7:44:da:43:e3:22:
         f9:ed:b0:44:ee:dc:2b:c7:b0:97:74:d5:bd:a2:ee:b9:35:ed:
         73:34:00:46:38:7c:37:e1:bb:5d:64:44:23:0f:81:f1:76:2c:
         4e:66:e2:ed:a7:c6:eb:2e:81:ee:ba:4f:45:54:8e:8c:71:2b:
         32:61:89:4d:cc:57:2e:ba:db:1c:07:07:f7:84:66:ce:04:9a:
         01:05:e2:23:16:8d:7a:3c:d6:60:e5:21:e0:d8:da:eb:ea:0c:
         fb:a5:75:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlmx3fwzDMoh3A8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YTg3OWNkOGUtNGMxMC00NmZlLWFjOGMtNTgzNWQxNGFkYTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0mdCWagY475DAcRBKmuhXLuPt+RScM0MKJM
vlmH+i1TF7JCTARJXW7OqI39xKzqltcfq4yCLK1g41droOofnRQ8AF5pprNC4goZ
sgFlXERXv3i6JIUG+8iNtXIJmGKErbZ3uXBeh8EVCboxXCLYpQFY+fXLNh/ATTQE
8fwmECkZxb0kgD/cORy07ePGSb9oBoGrjSlWxUJ4MTJgC+aLGlnNImsB7DzeFYcN
GhwOnGvOd3UhTNIoCtMYSxTTOJBP9La6Adm+JPhgrbAbEkYw6sG5DI93FdOT35in
HmdK4jfaxzILcBXcPkuChzABH/Nh7nhnqk/an5sqUAOGLMP9pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMa3PrfQLk/LvQdrJ61XrcNX9qDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNhOTliYmItYThlMi0z
NTc3LTg2YmEtNTBkMWIxMDM4NTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE2iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5Ew9UBfe97Zg2Yd6SJUDNLH3KR+Eh6aGesZNAnCVNJsk9HfPSB/FsI
QeMBRtKDjTZpZyLFSlO7WyzZhgEoIjToAzzHNL4zUhd9dvU6U6Ul2htmDBrMqz4f
tGavKzF6fbKtRTHoJdTvkrv4JaIV4dm1v1Xn36UIASOJ8cqFYOqg43Ak/VoPvFck
Vu48e4FM6qXerZWhRGs3Xzmg1adE2kPjIvntsETu3CvHsJd01b2i7rk17XM0AEY4
fDfhu11kRCMPgfF2LE5m4u2nxusuge66T0VUjoxxKzJhiU3MVy662xwHB/eEZs4E
mgEF4iMWjXo81mDlIeDY2uvqDPuldcU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:13 2024 by rpki-client on console-ams.rpki-client.org