Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
File:                     bb330b77-f6a5-3349-83dd-00364aa65fa2.roa (raw, json)
Hash identifier:          1SVq3gv+llLnxcZfwAcLeztHKHM9pxIXACwfOS2ODMs=
Subject key identifier:   DF:63:17:96:A2:93:F3:75:51:32:35:52:7B:0C:22:B0:04:EA:E7:5D
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285845304D392EF615427FE6AC1940
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        192.185.112.0/21 maxlen: 21
                          192.185.120.0/21 maxlen: 21
                          108.179.254.0/24 maxlen: 24
                          192.185.104.0/21 maxlen: 21
                          108.179.246.0/23 maxlen: 23
                          108.179.252.0/23 maxlen: 23
                          216.172.172.0/23 maxlen: 23
                          216.172.168.0/23 maxlen: 23
                          216.172.188.0/24 maxlen: 24
                          216.172.175.0/24 maxlen: 24
                          192.254.250.0/23 maxlen: 23
                          192.254.224.0/20 maxlen: 20
                          108.167.132.0/24 maxlen: 24
                          108.167.164.0/23 maxlen: 23
                          192.185.192.0/21 maxlen: 21
                          192.185.184.0/21 maxlen: 21
                          192.185.96.0/21 maxlen: 21
                          192.185.88.0/21 maxlen: 21
                          192.185.84.0/22 maxlen: 22
                          192.185.82.0/23 maxlen: 23
                          192.185.12.0/22 maxlen: 22
                          192.185.24.0/21 maxlen: 21
                          192.185.4.0/23 maxlen: 23
                          192.185.2.0/23 maxlen: 23
                          192.185.32.0/20 maxlen: 20
                          192.185.16.0/21 maxlen: 21
                          192.185.48.0/21 maxlen: 21
                          50.116.68.0/22 maxlen: 22
                          50.116.84.0/23 maxlen: 23
                          192.232.216.0/21 maxlen: 21
                          50.116.86.0/23 maxlen: 23
                          192.185.202.0/23 maxlen: 23
                          50.116.80.0/22 maxlen: 22
                          50.116.66.0/23 maxlen: 23
                          50.116.64.0/23 maxlen: 23
                          192.185.60.0/22 maxlen: 22
                          192.185.81.0/24 maxlen: 24
                          192.185.56.0/23 maxlen: 23
                          192.185.64.0/21 maxlen: 21
                          192.185.72.0/21 maxlen: 21
                          108.167.188.0/24 maxlen: 24
                          108.179.192.0/23 maxlen: 23
                          108.167.190.0/23 maxlen: 23
                          192.185.180.0/22 maxlen: 22
                          192.185.179.0/24 maxlen: 24
                          192.185.58.0/23 maxlen: 23
                          108.167.152.0/22 maxlen: 22
                          108.167.156.0/22 maxlen: 22
                          50.116.92.0/22 maxlen: 22
                          108.167.146.0/23 maxlen: 23
                          50.116.88.0/22 maxlen: 22
                          108.167.144.0/23 maxlen: 23
                          50.116.124.0/22 maxlen: 22
                          108.167.168.0/22 maxlen: 22
                          108.167.166.0/24 maxlen: 24
                          50.116.112.0/23 maxlen: 23
                          108.179.241.0/24 maxlen: 24
                          108.179.242.0/23 maxlen: 23
                          108.179.212.0/22 maxlen: 22
                          108.179.228.0/22 maxlen: 22
                          108.179.194.0/24 maxlen: 24
                          108.179.200.0/23 maxlen: 23
                          96.125.174.0/23 maxlen: 23
                          96.125.162.0/23 maxlen: 23
                          192.185.132.0/23 maxlen: 23
                          108.167.151.0/24 maxlen: 24
                          192.185.136.0/21 maxlen: 21
                          108.167.148.0/23 maxlen: 23
                          192.185.129.0/24 maxlen: 24
                          108.167.140.0/22 maxlen: 22
                          192.185.131.0/24 maxlen: 24
                          108.167.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:39:2e:f6:15:42:7f:e6:ac:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=a9b13cdf-41e7-4192-9d1e-bc0ce6b499f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:1a:24:96:fc:2b:58:d1:ef:e9:9d:4d:ce:
                    00:d4:0c:e8:f5:33:73:b8:e6:f7:f6:99:2d:64:be:
                    9f:79:30:3d:58:c1:80:12:64:f7:a3:ef:42:27:c6:
                    44:03:bc:dd:c9:24:33:7e:f6:be:e2:7c:01:c4:8f:
                    cb:4f:bd:c0:a2:05:d8:d1:28:44:9b:4c:cd:ef:4e:
                    f9:2b:38:75:c1:d5:b8:db:df:2e:ea:d8:05:72:4d:
                    4f:7e:17:8d:f5:f9:52:1e:6f:fe:04:0d:3c:b4:ed:
                    47:87:6f:93:67:a6:0f:85:7f:93:c7:de:a7:56:6e:
                    34:d4:25:7c:6e:39:30:56:11:9f:7b:66:28:36:84:
                    78:17:ec:66:9c:ec:fa:92:95:5d:08:aa:a9:69:ea:
                    8f:64:b6:d1:d4:a6:e9:53:79:eb:db:a9:0c:2d:86:
                    19:68:fe:44:64:f0:48:fd:5e:0b:36:fc:d1:dc:97:
                    0a:46:d9:79:a9:f6:c8:71:0c:f7:8e:7b:03:26:ec:
                    e2:58:21:2d:4f:ac:e4:72:e7:08:dc:4c:f3:87:59:
                    e4:43:fb:51:08:a5:d3:72:eb:d6:88:c4:92:95:99:
                    58:8d:5f:a3:c6:dc:cc:d7:44:6b:b1:54:86:d3:d9:
                    a5:7b:27:1a:88:12:87:89:2b:1f:82:34:11:a0:78:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:63:17:96:A2:93:F3:75:51:32:35:52:7B:0C:22:B0:04:EA:E7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/21
                  50.116.80.0/20
                  50.116.112.0/23
                  50.116.124.0/22
                  96.125.162.0/23
                  96.125.174.0/23
                  108.167.132.0/23
                  108.167.140.0-108.167.149.255
                  108.167.151.0-108.167.159.255
                  108.167.164.0-108.167.166.255
                  108.167.168.0/22
                  108.167.188.0/24
                  108.167.190.0/23
                  108.179.192.0-108.179.194.255
                  108.179.200.0/23
                  108.179.212.0/22
                  108.179.228.0/22
                  108.179.241.0-108.179.243.255
                  108.179.246.0/23
                  108.179.252.0-108.179.254.255
                  192.185.2.0-192.185.5.255
                  192.185.12.0-192.185.79.255
                  192.185.81.0-192.185.127.255
                  192.185.129.0/24
                  192.185.131.0-192.185.133.255
                  192.185.136.0/21
                  192.185.179.0-192.185.199.255
                  192.185.202.0/23
                  192.232.216.0/21
                  192.254.224.0/20
                  192.254.250.0/23
                  216.172.168.0/23
                  216.172.172.0/23
                  216.172.175.0/24
                  216.172.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:85:3d:9b:53:bd:fc:87:4a:03:31:1e:9a:52:91:af:7f:b1:
         92:67:03:42:6a:dd:1f:7c:36:11:62:0c:20:b5:dc:9c:57:3d:
         63:ef:8f:ea:e2:9f:b0:09:a2:99:c7:9a:fa:af:89:81:c0:ad:
         80:e3:6d:7c:c1:c4:8d:e2:35:9a:7c:86:39:42:8b:99:73:c6:
         14:19:e5:7d:ed:cd:f9:2c:fa:f9:98:ac:03:a8:44:4c:d9:74:
         06:17:ad:dc:d8:72:79:ca:1c:f7:32:0a:7e:1c:2d:71:89:20:
         8a:61:74:8a:15:fd:4b:68:71:4d:f1:fd:39:d9:83:e1:de:45:
         44:ee:f9:b1:1c:65:ab:69:34:66:25:50:2e:73:fc:c9:1e:92:
         e5:49:a5:d5:5f:11:af:85:a5:e0:d5:85:0c:b5:d4:78:fc:0b:
         5e:e8:d7:39:fa:74:de:65:4a:4f:83:a5:29:89:fe:ec:35:c2:
         8b:b4:ed:82:9b:8a:c4:06:59:41:4e:f4:c2:99:f2:1d:7d:b7:
         30:9e:8f:c9:f8:5c:4a:02:aa:80:79:24:86:d6:ac:d7:00:a6:
         ef:da:41:89:84:50:d1:d8:db:c1:6a:16:2c:b9:8c:cf:d5:2a:
         83:8d:d2:ff:49:9f:49:df:0c:23:61:98:e9:94:55:78:53:85:
         61:c1:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:43 2024 by rpki-client on console-fra.rpki-client.org