Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa
File:                     5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa (raw, json)
Hash identifier:          bT3eFXP4JN5FdKn2yQdYp2dKNzdonkHzlnJI4g6s+38=
Subject key identifier:   CF:B7:12:08:BF:2F:A1:D2:EA:2C:DE:B2:0E:E1:58:95:31:33:A3:42
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E094FB076EF5CB66637B82C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        108.170.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fb:07:6e:f5:cb:66:63:7b:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=29439070-cc2b-43ba-9233-7aa1899f9d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:23:65:71:e8:9f:ad:52:71:1f:b5:3a:8a:
                    b2:e9:8f:2a:3b:b5:13:69:51:c0:8f:95:e0:b4:91:
                    51:a4:f8:d9:35:89:4d:17:8a:04:48:ed:c9:31:03:
                    6c:32:18:8c:b6:94:74:86:10:3d:25:ec:08:01:5d:
                    85:93:b7:d4:7b:f0:d1:e0:f2:4d:3c:25:07:7d:73:
                    59:4d:4c:db:35:ba:75:cd:b7:21:a4:47:12:c1:f9:
                    bc:95:73:33:b2:2c:c2:91:7c:fe:bb:39:27:3c:4b:
                    dd:6c:46:fb:59:7b:28:38:96:c1:fb:30:60:9b:9b:
                    2d:a6:fa:85:fc:8f:23:64:8b:f2:37:5d:fc:7f:ef:
                    2f:cd:df:91:ef:89:6a:c2:4c:ae:a2:ea:20:3a:31:
                    d3:ab:af:12:f3:f9:94:1c:8b:ec:aa:b7:56:f6:a6:
                    8c:a5:68:bf:5a:22:37:28:0e:04:13:b1:46:6d:64:
                    eb:11:80:76:ca:9d:2c:60:7f:e3:1e:cf:91:0d:92:
                    ec:0c:70:38:7b:0c:54:5a:0b:df:92:78:cf:b5:ee:
                    b2:8f:0e:1d:4d:4a:f6:5b:b8:e9:c8:17:f7:dd:36:
                    75:82:63:ec:5b:89:95:e6:81:28:9c:7d:34:9b:32:
                    be:74:84:51:82:e3:7d:93:18:ae:54:5f:7a:8a:69:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B7:12:08:BF:2F:A1:D2:EA:2C:DE:B2:0E:E1:58:95:31:33:A3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:ae:16:5c:d8:d9:22:fc:90:18:a0:6f:c8:b6:23:47:a9:
         51:18:49:42:95:61:cb:10:fc:3a:52:1a:1d:66:51:c3:66:4b:
         28:36:36:b7:2a:5a:2c:5d:8d:9c:d7:74:ba:7c:04:5f:52:4f:
         1f:57:2e:8f:f9:38:93:ab:f2:4a:ea:72:45:5e:d7:21:9c:56:
         94:f8:a9:8d:bd:0e:e3:c1:a2:65:37:f8:59:44:97:39:fb:b1:
         f0:bc:67:c7:c2:6c:be:ff:08:6c:b7:6a:5c:e9:68:0a:90:5c:
         d2:c3:6a:d5:4c:bb:72:7b:cb:0e:b8:b8:de:16:da:76:50:5e:
         60:52:84:a4:7a:73:ff:d8:51:1e:a0:fe:cd:63:49:ba:34:c1:
         4f:32:e5:f7:41:6c:2a:e0:cf:cb:33:b5:f6:1d:a9:02:e1:c9:
         d3:50:85:c3:30:30:6c:26:dd:f5:85:f5:06:20:66:f6:ca:17:
         6c:04:91:da:8e:fa:96:18:d2:b5:af:cc:11:39:7b:0c:38:6b:
         b4:ef:18:10:4d:c1:4d:e6:62:6d:05:d6:c6:8e:89:0f:85:ad:
         8b:30:dc:bd:e6:eb:ef:1f:db:92:b8:c3:d8:f6:ce:3f:17:f0:
         6a:36:e4:f2:e3:38:31:ae:64:43:12:a0:32:00:ab:cc:71:7c:
         8c:b1:3d:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPsHbvXLZmN7gsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
Mjk0MzkwNzAtY2MyYi00M2JhLTkyMzMtN2FhMTg5OWY5ZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx0jZXHon61ScR+1Ooqy6Y8qO7UTaVHAj5Xg
tJFRpPjZNYlNF4oESO3JMQNsMhiMtpR0hhA9JewIAV2Fk7fUe/DR4PJNPCUHfXNZ
TUzbNbp1zbchpEcSwfm8lXMzsizCkXz+uzknPEvdbEb7WXsoOJbB+zBgm5stpvqF
/I8jZIvyN138f+8vzd+R74lqwkyuouogOjHTq68S8/mUHIvsqrdW9qaMpWi/WiI3
KA4EE7FGbWTrEYB2yp0sYH/jHs+RDZLsDHA4ewxUWgvfknjPte6yjw4dTUr2W7jp
yBf33TZ1gmPsW4mV5oEonH00mzK+dIRRguN9kxiuVF96imn7zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+3Egi/L6HS6izesg7hWJUxM6NCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWRlZGIwMjctMmNkOS0z
ZjdkLWJkZjktMDdkM2NmNTk5ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKraMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrvrhZc2Nki/JAYoG/ItiNHqVEYSUKVYcsQ/DpSGh1mUcNmSyg2Nrcq
WixdjZzXdLp8BF9STx9XLo/5OJOr8krqckVe1yGcVpT4qY29DuPBomU3+FlElzn7
sfC8Z8fCbL7/CGy3alzpaAqQXNLDatVMu3J7yw64uN4W2nZQXmBShKR6c//YUR6g
/s1jSbo0wU8y5fdBbCrgz8sztfYdqQLhydNQhcMwMGwm3fWF9QYgZvbKF2wEkdqO
+pYY0rWvzBE5eww4a7TvGBBNwU3mYm0F1saOiQ+FrYsw3L3m6+8f25K4w9j2zj8X
8Go25PLjODGuZEMSoDIAq8xxfIyxPSM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:53 2024 by rpki-client on console-ams.rpki-client.org