Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa
File:                     12b496d5-5cb5-36f8-baf0-9e729b598d53.roa (raw, json)
Hash identifier:          eWt00HNZaEA7Z/39sc+5LEAGSAHb3cydbIrZGcftGBE=
Subject key identifier:   F8:6F:05:82:B7:11:5F:6B:B8:CD:C4:7A:18:2F:68:83:4E:5C:90:70
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584503C01211F7B4DFDB40BFDB80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     31898
IP address blocks:        170.114.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:12:11:f7:b4:df:db:40:bf:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=10c55d2b-6f43-4daa-9c63-494e017c8812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:fe:a3:d4:0a:44:93:8c:4d:d4:27:09:7b:
                    29:b8:e7:cf:da:18:a2:36:18:ec:e9:ca:95:cc:9d:
                    ba:35:ec:79:1e:25:aa:a4:8f:a2:81:e4:5f:aa:3a:
                    68:a0:bc:ae:4c:c9:f3:16:ba:35:98:95:33:6f:39:
                    4c:86:9a:06:66:f2:3a:ef:3d:4c:3a:39:b3:c0:43:
                    57:c2:b2:62:76:ff:c1:3d:93:39:bd:7c:ed:cb:a0:
                    45:9b:d8:7f:72:92:c6:48:95:c4:e1:b5:63:09:18:
                    04:17:39:ad:1c:09:e1:73:74:1f:e6:4f:c9:12:89:
                    d0:ea:fa:55:ab:ea:ce:fc:f9:5f:2b:94:60:a1:57:
                    c8:9b:00:d4:df:74:f5:fe:be:82:28:82:9a:96:4f:
                    01:aa:43:e3:bc:a5:b4:3d:b5:52:c3:e9:cd:d3:f7:
                    94:f7:57:d5:5a:c5:55:04:0b:ad:e0:24:85:73:11:
                    0c:7a:1f:36:39:e4:91:21:bd:cb:d8:41:2b:6a:52:
                    ea:5d:5c:ce:ff:61:87:90:4e:cf:c4:a2:04:ec:16:
                    df:8d:27:94:1a:06:59:4e:66:2d:84:c8:28:b4:74:
                    42:bf:13:3c:6b:43:f1:60:c6:2a:5c:48:0d:ce:2b:
                    8b:7b:f2:52:4b:28:93:74:d8:1e:84:b0:d8:f5:08:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:05:82:B7:11:5F:6B:B8:CD:C4:7A:18:2F:68:83:4E:5C:90:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:e4:51:f8:bc:e4:66:55:88:65:d7:bf:e4:48:ad:35:73:
         c9:94:9f:97:59:c9:ed:fe:9b:47:fd:b4:21:ca:a7:eb:b6:0c:
         c3:d9:94:08:53:83:1c:d3:d4:1e:c4:d6:fc:c4:54:65:1b:48:
         37:76:58:bb:20:5c:85:04:68:f0:31:05:e8:24:77:2d:a1:f2:
         74:1a:d0:52:a7:34:7b:9d:47:03:39:54:ff:a9:58:b0:d3:ef:
         60:9f:7c:70:1b:9b:c6:64:23:f2:57:eb:28:16:56:6c:dd:78:
         c1:d2:b1:57:3a:9f:fc:f3:cb:3a:5e:10:ce:58:d9:cc:97:ed:
         78:3a:32:04:a6:7c:6f:63:d8:68:15:e3:9e:3e:ec:d8:8f:2c:
         56:12:2a:63:75:f8:6e:3b:c3:b3:87:87:48:94:91:33:b3:ac:
         e6:84:b4:0f:da:b9:c7:bd:ca:a6:ea:29:64:84:b8:33:ac:04:
         a4:4e:4f:a3:3f:6d:18:1d:94:6d:c3:52:e7:b5:7b:e7:e3:b5:
         94:3b:b0:dd:2e:37:ae:34:b9:f0:f9:8a:96:a2:62:05:aa:63:
         60:ae:e7:56:b1:70:a8:a1:84:0e:f9:92:66:68:23:4c:93:90:
         f6:f2:e4:38:21:41:ed:26:93:d7:35:43:9a:c2:04:b8:97:04:
         28:a8:e5:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUDwBIR97Tf20C/24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk
MTBjNTVkMmItNmY0My00ZGFhLTljNjMtNDk0ZTAxN2M4ODEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTb+o9QKRJOMTdQnCXspuOfP2hiiNhjs6cqV
zJ26Nex5HiWqpI+igeRfqjpooLyuTMnzFro1mJUzbzlMhpoGZvI67z1MOjmzwENX
wrJidv/BPZM5vXzty6BFm9h/cpLGSJXE4bVjCRgEFzmtHAnhc3Qf5k/JEonQ6vpV
q+rO/PlfK5RgoVfImwDU33T1/r6CKIKalk8BqkPjvKW0PbVSw+nN0/eU91fVWsVV
BAut4CSFcxEMeh82OeSRIb3L2EEralLqXVzO/2GHkE7PxKIE7BbfjSeUGgZZTmYt
hMgotHRCvxM8a0PxYMYqXEgNziuLe/JSSyiTdNgehLDY9Qhh6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhvBYK3EV9ruM3EehgvaINOXJBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMTJiNDk2ZDUtNWNiNS0z
NmY4LWJhZjAtOWU3MjliNTk4ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnJoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIC25FH4vORmVYhl17/kSK01c8mUn5dZye3+m0f9tCHKp+u2DMPZlAhT
gxzT1B7E1vzEVGUbSDd2WLsgXIUEaPAxBegkdy2h8nQa0FKnNHudRwM5VP+pWLDT
72CffHAbm8ZkI/JX6ygWVmzdeMHSsVc6n/zzyzpeEM5Y2cyX7Xg6MgSmfG9j2GgV
454+7NiPLFYSKmN1+G47w7OHh0iUkTOzrOaEtA/auce9yqbqKWSEuDOsBKROT6M/
bRgdlG3DUue1e+fjtZQ7sN0uN640ufD5ipaiYgWqY2Cu51axcKihhA75kmZoI0yT
kPby5DghQe0mk9c1Q5rCBLiXBCio5cQ=
-----END CERTIFICATE-----
Generated at Wed May 1 23:06:02 2024 by rpki-client on console-ams.rpki-client.org