Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54ae5c69-a484-32bc-8725-66c07a501403.roa
File:                     54ae5c69-a484-32bc-8725-66c07a501403.roa (raw, json)
Hash identifier:          ukJE2qtgsn0v/0jkZLh/+maDvH3YnE9bzh6rEM2tc1s=
Subject key identifier:   CB:46:0E:A4:AE:49:D8:39:6F:BB:6F:EA:84:AA:07:55:CF:02:AD:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584773966BBA4C6B530A6C1959C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54ae5c69-a484-32bc-8725-66c07a501403.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        104.76.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:6b:ba:4c:6b:53:0a:6c:19:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=09b865ed-f823-48ec-90e3-7bdcac836310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:15:74:ca:d5:bf:23:4a:31:84:d2:a3:05:
                    2b:78:be:a9:31:8e:84:a9:74:f6:65:2f:c7:5c:9c:
                    aa:03:ad:b2:f1:40:1f:ae:4c:db:f7:57:7a:59:e5:
                    ea:d7:71:c6:ad:a7:11:f9:21:67:d9:d5:4b:99:b7:
                    f4:fc:65:d8:61:7a:db:2b:9a:6d:c3:bb:bf:7f:a8:
                    45:78:f5:0d:28:2c:92:38:08:9e:db:03:9a:45:97:
                    25:b2:03:bd:24:fc:c9:b6:68:1a:7a:b0:54:fe:c3:
                    be:2f:6b:62:fc:b6:64:40:18:cb:40:ad:26:78:f5:
                    e6:a8:aa:d1:dc:82:98:b0:f6:d6:e5:70:91:53:9f:
                    22:18:7d:db:5e:14:a6:76:b2:fb:c3:b9:35:33:e3:
                    bd:f4:06:9d:14:fa:d2:73:5b:cd:62:de:29:db:c8:
                    5d:60:01:2b:e6:32:b8:40:60:8b:5c:09:76:5f:5e:
                    74:3f:18:72:22:2f:70:35:e3:69:58:1d:24:45:e1:
                    63:31:c5:43:b9:3f:83:6e:3e:51:f0:c5:ee:33:01:
                    c3:09:dc:5c:20:60:e2:c2:63:07:4b:79:fa:a7:e9:
                    20:aa:b6:43:2c:6f:f9:58:23:71:90:be:9d:20:28:
                    5a:ce:f5:99:04:12:3a:b3:f2:3d:41:73:55:9b:50:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:0E:A4:AE:49:D8:39:6F:BB:6F:EA:84:AA:07:55:CF:02:AD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54ae5c69-a484-32bc-8725-66c07a501403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.76.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:51:6a:37:3c:80:48:37:e8:eb:d2:9f:ab:b0:4c:5f:b1:
         ab:3e:a0:e2:bc:5d:d2:95:3a:f0:5b:ae:d3:c8:5d:f3:63:3b:
         c2:37:0f:f8:e6:9d:ac:49:1c:6f:32:3e:a5:d9:32:b2:a7:e8:
         9f:2b:4f:ed:ed:bb:34:c4:9b:a8:75:1f:e9:ce:57:07:51:a1:
         9a:fc:0d:b1:01:55:3b:55:cd:47:8d:95:d0:dc:d2:c0:38:04:
         73:26:bc:b6:cb:cc:cc:55:b7:82:64:eb:f5:af:51:39:60:fe:
         22:b5:d2:cf:1a:f9:06:98:f8:a6:c9:58:f7:1b:12:10:04:4c:
         6d:0c:b5:4b:2f:58:0a:34:3b:2d:6c:e8:de:7e:08:c6:ad:43:
         4e:54:ac:a9:6d:cc:58:14:af:2e:3e:13:24:fc:9b:8c:4b:e5:
         dc:d3:2f:0d:2c:74:66:b1:80:67:a7:6d:7c:08:af:eb:f7:47:
         34:53:13:b8:5d:c0:cb:c9:52:f6:2d:02:99:0d:30:3c:f6:a9:
         52:7d:e6:67:79:78:ce:0a:8f:8d:14:c0:e7:55:8a:57:9d:ec:
         da:77:bd:53:d1:87:3f:22:d9:89:0d:33:e7:7d:d5:a9:9f:39:
         60:10:3b:f8:17:05:79:cf:99:a1:38:99:5e:c9:e7:5a:9d:be:
         b6:3b:28:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlmu6TGtTCmwZWcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MDliODY1ZWQtZjgyMy00OGVjLTkwZTMtN2JkY2FjODM2MzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknUVdMrVvyNKMYTSowUreL6pMY6EqXT2ZS/H
XJyqA62y8UAfrkzb91d6WeXq13HGracR+SFn2dVLmbf0/GXYYXrbK5ptw7u/f6hF
ePUNKCySOAie2wOaRZclsgO9JPzJtmgaerBU/sO+L2ti/LZkQBjLQK0mePXmqKrR
3IKYsPbW5XCRU58iGH3bXhSmdrL7w7k1M+O99AadFPrSc1vNYt4p28hdYAEr5jK4
QGCLXAl2X150PxhyIi9wNeNpWB0kReFjMcVDuT+Dbj5R8MXuMwHDCdxcIGDiwmMH
S3n6p+kgqrZDLG/5WCNxkL6dIChazvWZBBI6s/I9QXNVm1C+dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtGDqSuSdg5b7tv6oSqB1XPAq0qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTRhZTVjNjktYTQ4NC0z
MmJjLTg3MjUtNjZjMDdhNTAxNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEzIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2/UWo3PIBIN+jr0p+rsExfsas+oOK8XdKVOvBbrtPIXfNjO8I3D/jm
naxJHG8yPqXZMrKn6J8rT+3tuzTEm6h1H+nOVwdRoZr8DbEBVTtVzUeNldDc0sA4
BHMmvLbLzMxVt4Jk6/WvUTlg/iK10s8a+QaY+KbJWPcbEhAETG0MtUsvWAo0Oy1s
6N5+CMatQ05UrKltzFgUry4+EyT8m4xL5dzTLw0sdGaxgGenbXwIr+v3RzRTE7hd
wMvJUvYtApkNMDz2qVJ95md5eM4Kj40UwOdViled7Np3vVPRhz8i2YkNM+d91amf
OWAQO/gXBXnPmaE4mV7J51qdvrY7KAI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:05 2024 by rpki-client on console-ams.rpki-client.org