Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
File:                     002cd295-0845-3e0b-8fc6-6be378b880ee.roa (raw, json)
Hash identifier:          7vBDKNxR8CRT9WbxcfXI5Crh+rFoUP3SurUzcLXU84U=
Subject key identifier:   DB:DF:F5:34:5C:FC:DC:83:A6:98:89:DB:96:11:F1:4C:73:3F:19:F4
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F432858454D9D7B1E5521707BE29A3BC0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     46606
IP address blocks:        162.251.80.0/24 maxlen: 24
                          162.210.70.0/23 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          208.91.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7b:1e:55:21:70:7b:e2:9a:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=d8a58d1f-f33a-4d0e-91f7-17bf2b2036b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:e6:b3:ab:63:ff:49:03:0a:c5:69:7f:4e:
                    82:75:3a:7b:c0:ba:7a:58:ab:b0:9e:8f:01:93:41:
                    12:f4:a9:c5:bc:f5:59:97:b8:f1:42:92:fa:91:1f:
                    6e:87:c7:8e:2a:71:6c:ee:fb:e2:5f:5b:51:34:7a:
                    dd:dd:de:3e:8d:f4:dd:f9:17:00:0a:5b:ea:48:3f:
                    e6:d6:82:52:54:bf:21:2a:26:9e:31:ab:b2:a1:fe:
                    e0:f2:a6:a6:49:b8:fc:07:e7:cc:66:41:29:fa:91:
                    e2:c5:9d:2f:20:91:01:e0:f3:c7:72:37:22:7e:c7:
                    14:68:74:a8:37:e5:fd:d3:bd:49:65:1d:6b:df:a8:
                    25:31:75:8a:2e:b9:49:b9:a2:dc:71:12:90:f8:df:
                    2b:aa:94:57:6a:d5:a1:07:01:6a:90:f2:66:16:88:
                    95:3a:d7:7b:5f:89:a3:a6:58:8f:88:17:b7:50:e5:
                    48:1b:59:f5:cf:35:4a:dc:3a:82:7b:59:fa:05:ec:
                    2d:43:d5:9a:41:b7:95:13:48:13:de:45:5e:5e:b1:
                    eb:4a:c2:59:07:21:31:5e:95:92:2b:d2:e3:cb:27:
                    dd:c8:01:59:7f:be:d5:c8:79:1c:3a:29:1d:33:48:
                    8d:59:c5:cf:c6:45:a4:6b:09:bf:f9:08:db:e4:bd:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DF:F5:34:5C:FC:DC:83:A6:98:89:DB:96:11:F1:4C:73:3F:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:de:fc:b5:54:31:7c:f0:d0:be:ee:64:ce:9d:56:f4:29:96:
         c1:8d:6d:ac:1e:fb:c6:91:7d:a6:54:43:24:22:03:d1:68:37:
         c7:0b:60:10:4f:2f:3f:65:b1:99:ff:6e:1b:f1:05:a9:2e:59:
         cb:24:0e:d4:ea:b0:d1:53:37:68:45:fd:8a:80:16:12:ac:86:
         cc:62:70:e7:0b:48:91:c8:6f:0d:29:28:67:fc:2e:a8:a1:0d:
         35:15:77:29:4a:18:34:50:d3:35:e0:bd:a4:7a:8e:31:d7:34:
         36:6f:0c:5f:24:0f:fe:6a:73:57:45:6f:12:a1:36:70:99:3a:
         9e:b8:0f:b6:09:b4:d8:2b:94:b4:b8:9d:5b:15:d6:2a:04:20:
         94:69:45:90:b8:c6:af:17:77:68:6d:fb:01:fb:c7:fd:00:ca:
         24:0c:64:f8:37:77:89:0a:27:dc:76:49:39:50:d6:55:79:9a:
         a1:b5:b9:d8:2b:d7:fb:08:5f:6f:7c:df:59:e9:51:cd:f6:c6:
         e5:f7:09:8f:b0:b9:0e:28:0f:fb:bb:46:bf:62:fd:e2:f6:91:
         cd:e8:6b:53:b3:79:eb:18:22:c5:99:dc:ca:46:c1:0b:b2:c0:
         be:b5:c5:ae:87:2e:54:5d:a7:1b:36:bf:d6:6c:fc:36:39:f8:
         0b:c3:b9:4f
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEVNnXseVSFwe+KaO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw
NTM1MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
ZDhhNThkMWYtZjMzYS00ZDBlLTkxZjctMTdiZjJiMjAzNmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm//ms6tj/0kDCsVpf06CdTp7wLp6WKuwno8B
k0ES9KnFvPVZl7jxQpL6kR9uh8eOKnFs7vviX1tRNHrd3d4+jfTd+RcAClvqSD/m
1oJSVL8hKiaeMauyof7g8qamSbj8B+fMZkEp+pHixZ0vIJEB4PPHcjcifscUaHSo
N+X9071JZR1r36glMXWKLrlJuaLccRKQ+N8rqpRXatWhBwFqkPJmFoiVOtd7X4mj
pliPiBe3UOVIG1n1zzVK3DqCe1n6BewtQ9WaQbeVE0gT3kVeXrHrSsJZByExXpWS
K9LjyyfdyAFZf77VyHkcOikdM0iNWcXPxkWkawm/+Qjb5L1LjwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFNvf9TRc/NyDppiJ25YR8UxzPxn0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4
NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMDAyY2QyOTUtMDg0NS0z
ZTBiLThmYzYtNmJlMzc4Yjg4MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj
MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1
MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw
YTY1NTA1MzUuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBotJGMAwD
BACi3uEDBAKi3uADBACi+1ADBACi+1UDBAHHTz4DBAHMCzoDBALPrtQDBAHQW8Yw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARt78tVQxfPDQvu5kzp1W9CmWwY1trB77xpF9plRDJCID0Wg3xwtg
EE8vP2Wxmf9uG/EFqS5ZyyQO1Oqw0VM3aEX9ioAWEqyGzGJw5wtIkchvDSkoZ/wu
qKENNRV3KUoYNFDTNeC9pHqOMdc0Nm8MXyQP/mpzV0VvEqE2cJk6nrgPtgm02CuU
tLidWxXWKgQglGlFkLjGrxd3aG37AfvH/QDKJAxk+Dd3iQon3HZJOVDWVXmaobW5
2CvX+whfb3zfWelRzfbG5fcJj7C5DigP+7tGv2L94vaRzehrU7N56xgixZncykbB
C7LAvrXFrocuVF2nGza/1mz8Njn4C8O5Tw==
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org