Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa
File:                     b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa (raw, json)
Hash identifier:          mlyc5IvfNbK/KSfGB6s9W4a88VzVyoIZnGvkNyFA8Ng=
Subject key identifier:   B5:76:A5:97:03:C7:28:B7:4E:74:8E:1D:E8:4B:C8:04:54:65:51:61
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F432858463EB172F2354DA8C8190E2780
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa
Signing time:             Mon 17 Jun 2024 21:30:40 +0000
ROA not before:           Mon 17 Jun 2024 21:30:40 +0000
ROA not after:            Sun 15 Sep 2024 21:30:40 +0000
asID:                     400686
IP address blocks:        64.146.166.0/24 maxlen: 24
                          66.119.196.0/24 maxlen: 24
                          66.119.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3e:b1:72:f2:35:4d:a8:c8:19:0e:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Jun 17 21:30:40 2024 GMT
            Not After : Sep 15 21:30:40 2024 GMT
        Subject: CN=eacd32c0-57ce-475f-9c04-4ba01c3d5e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:ec:84:08:64:90:59:b4:ca:ec:07:b0:ff:
                    1a:06:48:be:9e:ba:f1:12:31:ea:43:d2:68:e0:0c:
                    05:0b:be:53:24:e7:f4:59:67:99:f7:04:04:ae:d0:
                    5f:56:77:d0:00:37:19:18:05:a9:1f:98:6e:6a:20:
                    ec:ba:f7:b1:19:1a:6f:99:81:89:d5:67:e6:09:ba:
                    a0:7c:1a:bc:07:aa:85:3e:f9:cf:03:72:d1:da:23:
                    4a:6d:d7:fd:6b:47:b9:49:83:35:35:5d:7f:91:2d:
                    31:49:08:04:9c:fe:04:cd:2e:30:8b:cc:1c:e4:d2:
                    2a:ef:d5:b3:06:be:03:0f:bb:23:09:e7:26:57:82:
                    91:14:6e:b7:9b:37:55:38:96:d7:d2:1f:4e:24:bb:
                    77:d1:15:55:03:6f:e6:ae:3f:a8:44:89:8e:c8:71:
                    aa:47:47:26:47:4a:20:5d:a6:26:58:a8:59:de:e0:
                    08:3d:48:a5:09:a8:88:60:dc:2d:0a:ff:8f:f4:ad:
                    02:60:31:30:29:19:e5:4b:24:69:61:fa:d4:db:d3:
                    fb:25:ab:8a:60:ab:1a:de:a4:16:ab:ee:53:47:29:
                    eb:82:c8:ba:2d:c0:48:c4:dc:33:03:8d:df:dd:b9:
                    4b:49:10:89:94:6f:5f:ac:2d:f5:49:aa:7d:a1:89:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:76:A5:97:03:C7:28:B7:4E:74:8E:1D:E8:4B:C8:04:54:65:51:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.146.166.0/24
                  66.119.196.0/24
                  66.119.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:16:44:e5:99:95:90:3a:dc:98:08:38:b4:d9:c2:f9:f3:
         2d:c7:5c:87:ea:bc:7b:2f:59:3f:31:63:30:cf:69:fc:18:d6:
         8a:32:86:3d:54:26:90:12:4d:f4:02:62:ac:8c:5e:5e:ad:29:
         2a:0f:ec:89:eb:54:62:b1:2e:64:e3:8a:0b:8e:e4:e2:04:11:
         82:03:5f:ab:1a:9b:3e:f3:76:e3:46:ca:59:8f:25:ec:c9:e9:
         11:c6:44:f8:67:40:02:2d:2e:15:f3:3a:b7:5c:c6:c9:da:4f:
         6d:34:e3:58:07:34:e5:e9:1d:92:27:ed:8b:10:ff:65:fc:84:
         e4:4f:c4:aa:2f:df:8a:34:6a:c0:8f:88:65:ec:30:6c:c7:75:
         62:d0:75:b4:81:fb:3e:cb:67:cc:c9:7a:cd:10:ac:6c:43:9b:
         7b:91:ec:4e:59:b9:36:5d:8d:b3:db:9e:36:10:d0:b5:47:af:
         2f:83:02:dc:b1:df:35:9a:31:0c:e7:4b:00:5f:7f:ab:25:e5:
         c7:92:b4:ce:be:94:48:c3:f8:bf:5f:f2:71:11:bf:25:85:19:
         92:13:a6:37:bf:26:91:35:33:64:b8:5f:08:72:99:16:04:74:
         8f:2e:d1:ad:05:58:de:04:98:07:03:8c:70:52:33:ef:60:d3:
         6e:50:f3:29
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEY+sXLyNU2oyBkOJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy
YTFjMB4XDTI0MDYxNzIxMzA0MFoXDTI0MDkxNTIxMzA0MFowLzEtMCsGA1UEAxMk
ZWFjZDMyYzAtNTdjZS00NzVmLTljMDQtNGJhMDFjM2Q1ZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSnshAhkkFm0yuwHsP8aBki+nrrxEjHqQ9Jo
4AwFC75TJOf0WWeZ9wQErtBfVnfQADcZGAWpH5huaiDsuvexGRpvmYGJ1WfmCbqg
fBq8B6qFPvnPA3LR2iNKbdf9a0e5SYM1NV1/kS0xSQgEnP4EzS4wi8wc5NIq79Wz
Br4DD7sjCecmV4KRFG63mzdVOJbX0h9OJLt30RVVA2/mrj+oRImOyHGqR0cmR0og
XaYmWKhZ3uAIPUilCaiIYNwtCv+P9K0CYDEwKRnlSyRpYfrU29P7JauKYKsa3qQW
q+5TRynrgsi6LcBIxNwzA43f3blLSRCJlG9frC31Sap9oYk0LwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFLV2pZcDxyi3TnSOHehLyARUZVFhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3
NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvYjY4NmNlOGMtMzJmNi0z
Y2YzLWE3MjAtODhhODFlNWM5NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5
MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk
MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4
ZTQ1ZDJhMWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQJKmAwQA
QnfEAwQCQnfQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAI8BFkTlmZWQOtyYCDi02cL58y3HXIfqvHsvWT8x
YzDPafwY1ooyhj1UJpASTfQCYqyMXl6tKSoP7InrVGKxLmTjiguO5OIEEYIDX6sa
mz7zduNGylmPJezJ6RHGRPhnQAItLhXzOrdcxsnaT20041gHNOXpHZIn7YsQ/2X8
hORPxKov34o0asCPiGXsMGzHdWLQdbSB+z7LZ8zJes0QrGxDm3uR7E5ZuTZdjbPb
njYQ0LVHry+DAtyx3zWaMQznSwBff6sl5ceStM6+lEjD+L9f8nERvyWFGZITpje/
JpE1M2S4XwhymRYEdI8u0a0FWN4EmAcDjHBSM+9g025Q8yk=
-----END CERTIFICATE-----
Generated at Tue Jul 2 21:55:27 2024 by rpki-client on console-fra.rpki-client.org