Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35bca73b-347e-3828-8b62-087c22eed79e.roa
File:                     35bca73b-347e-3828-8b62-087c22eed79e.roa (raw, json)
Hash identifier:          rNCfkRPeMIIumbHAtiTpJy0jf3Xwztdk1N1erQ5ffO8=
Subject key identifier:   DD:DB:C3:84:BA:7C:FF:58:BD:00:D0:CD:80:3C:5F:0E:59:76:ED:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BC0AF9523C63873CA1F30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35bca73b-347e-3828-8b62-087c22eed79e.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.116.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:c0:af:95:23:c6:38:73:ca:1f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=425158c2-95d2-47be-9de4-0cb4a70f1b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:4e:4a:89:3f:f1:b6:82:9d:72:0e:eb:04:
                    d4:f9:23:01:f2:66:d5:41:14:41:b6:4b:8e:06:c5:
                    50:8f:1e:06:cb:53:dc:d2:da:4a:3b:3c:a7:80:ff:
                    31:4c:29:3d:1a:55:6e:52:c6:18:4d:f8:f5:c6:54:
                    79:ae:b5:a6:7a:c0:3a:93:19:f5:c5:3a:c9:d6:22:
                    4a:78:29:32:85:08:ee:b9:65:09:ae:d0:8a:d2:29:
                    8a:63:d2:e3:89:b1:ef:80:76:96:41:87:73:ec:44:
                    60:de:83:b8:de:5f:fc:7b:40:c7:e6:ad:0d:ad:c6:
                    21:a2:1d:9d:75:45:1d:db:90:5d:99:82:db:52:0d:
                    2b:09:c9:34:76:09:96:36:21:92:4d:dc:dc:45:c7:
                    af:a1:e2:80:81:4a:5f:9e:68:d8:87:e5:56:cb:07:
                    00:0e:f5:54:7f:86:8a:4b:11:6b:26:1d:c1:b9:b7:
                    55:0b:ec:01:eb:f5:b2:5b:4b:7d:9c:f8:fc:e5:65:
                    71:22:fd:b3:f0:cd:28:25:85:cf:34:85:98:4b:38:
                    aa:1a:a7:15:be:27:05:dd:ab:40:27:3d:75:a2:b0:
                    10:af:7f:ff:4c:af:9a:9a:48:23:5d:27:c1:4a:cd:
                    72:6b:62:a9:08:cd:aa:56:27:e9:b8:f5:c1:0c:2f:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DB:C3:84:BA:7C:FF:58:BD:00:D0:CD:80:3C:5F:0E:59:76:ED:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35bca73b-347e-3828-8b62-087c22eed79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.116.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7f:35:dc:dc:14:5f:73:36:37:97:aa:ae:ed:f1:3d:f4:0d:
         3d:a7:24:d6:c1:49:73:6b:a7:a5:b8:5f:26:70:45:d1:f7:54:
         8e:ab:7f:33:c6:46:64:b5:c6:bf:0a:ec:7f:c0:c9:a3:c7:b9:
         b8:94:10:41:4e:19:d4:1b:80:0a:0b:7a:4b:6f:74:ba:78:1e:
         63:98:3a:5d:90:1b:51:75:38:9c:73:1d:2d:fb:ac:dd:be:a3:
         56:cc:11:11:a7:2d:46:e0:8f:3b:fb:c1:0d:98:05:82:d7:e2:
         6a:67:7c:74:dc:81:08:d8:4d:3a:99:df:75:49:07:22:96:77:
         3d:f0:89:7c:f2:41:a0:16:f3:ba:5c:7a:01:ad:46:71:07:bc:
         aa:72:7e:29:81:ad:c3:93:cc:9a:3a:8f:5f:9f:60:ed:c4:e3:
         44:bf:bb:65:d0:91:38:51:8e:40:01:69:28:73:56:87:aa:64:
         e2:9d:05:d7:79:00:45:99:21:9c:dc:ec:cb:88:d3:65:6b:09:
         fe:12:93:21:2e:42:f1:32:16:f2:71:61:b5:86:1b:ca:e6:62:
         e3:ef:1d:51:9d:f4:ae:e6:56:ec:2f:b9:21:be:ed:34:db:eb:
         06:fe:66:b6:5a:d2:fe:2c:bb:47:2d:8a:24:40:f2:35:9d:42:
         c5:4c:c7:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K8CvlSPGOHPKHzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
NDI1MTU4YzItOTVkMi00N2JlLTlkZTQtMGNiNGE3MGYxYjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM1OSok/8baCnXIO6wTU+SMB8mbVQRRBtkuO
BsVQjx4Gy1Pc0tpKOzyngP8xTCk9GlVuUsYYTfj1xlR5rrWmesA6kxn1xTrJ1iJK
eCkyhQjuuWUJrtCK0imKY9LjibHvgHaWQYdz7ERg3oO43l/8e0DH5q0NrcYhoh2d
dUUd25BdmYLbUg0rCck0dgmWNiGSTdzcRcevoeKAgUpfnmjYh+VWywcADvVUf4aK
SxFrJh3BubdVC+wB6/WyW0t9nPj85WVxIv2z8M0oJYXPNIWYSziqGqcVvicF3atA
Jz11orAQr3//TK+amkgjXSfBSs1ya2KpCM2qVifpuPXBDC8gYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3bw4S6fP9YvQDQzYA8Xw5Zdu3ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzViY2E3M2ItMzQ3ZS0z
ODI4LThiNjItMDg3YzIyZWVkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHT1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGl/NdzcFF9zNjeXqq7t8T30DT2nJNbBSXNrp6W4XyZwRdH3VI6rfzPG
RmS1xr8K7H/AyaPHubiUEEFOGdQbgAoLektvdLp4HmOYOl2QG1F1OJxzHS37rN2+
o1bMERGnLUbgjzv7wQ2YBYLX4mpnfHTcgQjYTTqZ33VJByKWdz3wiXzyQaAW87pc
egGtRnEHvKpyfimBrcOTzJo6j1+fYO3E40S/u2XQkThRjkABaShzVoeqZOKdBdd5
AEWZIZzc7MuI02VrCf4SkyEuQvEyFvJxYbWGG8rmYuPvHVGd9K7mVuwvuSG+7TTb
6wb+ZrZa0v4su0ctiiRA8jWdQsVMxwA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:35 2024 by rpki-client on console-fra.rpki-client.org