Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa
File:                     2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json)
Hash identifier:          H0PnPT9aOIBZsofJrNV84V1kTMYZ9Ny+0qBWPlrNP9s=
Subject key identifier:   28:D2:49:71:F2:DA:16:8D:2E:BF:12:25:D1:39:2D:31:B3:45:90:69
Certificate issuer:       /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e
Certificate serial:       010D0C9F43285845ADEE14E5CF674E4F95E812C0
Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     26223
IP address blocks:        199.192.124.0/22 maxlen: 24
                          192.64.2.0/23 maxlen: 24
                          204.8.60.0/22 maxlen: 24
                          199.66.104.0/22 maxlen: 24
                          192.243.36.0/24 maxlen: 24
                          192.187.62.0/23 maxlen: 24
                          199.19.112.0/21 maxlen: 24
                          162.248.128.0/23 maxlen: 24
                          217.147.184.0/21 maxlen: 24
                          207.183.160.0/19 maxlen: 24
                          204.8.68.0/22 maxlen: 24
                          216.128.224.0/20 maxlen: 24
                          216.21.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:14:e5:cf:67:4e:4f:95:e8:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=f486a360-8abf-4fc4-ae82-f7e69f662588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:9e:65:74:17:35:8e:9d:b9:e4:e1:3f:c1:
                    dc:0d:15:82:3d:6a:e8:1b:c1:21:e8:01:8a:cd:82:
                    cc:0c:2c:00:57:81:bd:b0:6c:84:dc:32:61:ac:ce:
                    31:96:5c:7d:13:68:88:d4:e5:16:37:48:07:c2:a1:
                    17:07:97:5c:65:b3:d8:c3:66:61:1a:9e:fd:11:46:
                    2f:83:77:7b:d6:65:a4:56:eb:3d:b7:df:9c:1a:6d:
                    2d:58:72:2f:15:5d:3c:3c:b2:59:eb:64:3b:21:51:
                    33:20:15:33:b3:88:8e:fb:1d:71:e6:27:08:98:ae:
                    b9:2d:c8:56:e6:23:ce:66:be:3c:a4:37:9a:2f:6c:
                    4d:30:bc:b8:e0:59:4f:69:e3:c5:76:b9:27:69:d9:
                    c9:12:0b:78:4f:44:45:4f:24:26:c4:af:2e:e7:34:
                    2c:6e:84:d9:15:24:8f:f7:75:48:f6:df:de:e5:77:
                    f2:11:1a:6e:b2:17:0e:53:65:8f:1d:c5:1b:28:d0:
                    e2:53:19:b4:6a:c7:57:36:7a:1e:fd:2e:39:c0:66:
                    20:b2:88:36:f1:c9:45:b9:bb:56:64:9c:4f:56:cd:
                    fd:d1:cc:d4:bd:36:e4:29:6f:b8:09:4a:6c:3c:29:
                    9c:6d:b4:49:88:ff:16:88:9a:64:89:59:77:2f:6d:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D2:49:71:F2:DA:16:8D:2E:BF:12:25:D1:39:2D:31:B3:45:90:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl

            X509v3 Authority Key Identifier:
                keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.128.0/23
                  192.64.2.0/23
                  192.187.62.0/23
                  192.243.36.0/24
                  199.19.112.0/21
                  199.66.104.0/22
                  199.192.124.0/22
                  204.8.60.0/22
                  204.8.68.0/22
                  207.183.160.0/19
                  216.21.208.0/22
                  216.128.224.0/20
                  217.147.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:b2:d9:11:57:c6:4e:4f:79:67:5f:1b:de:0e:38:09:ec:
         39:f4:40:01:8a:f2:19:55:b3:f1:6f:3b:af:c9:bb:76:b7:72:
         83:52:74:20:11:4f:4d:29:81:bd:08:21:30:98:f0:28:eb:5c:
         cf:4f:ee:19:3f:0c:58:bf:37:8d:53:6d:ff:1e:35:8c:26:52:
         1e:c5:4b:39:78:4c:2f:d6:26:08:18:1f:c1:cf:ba:54:34:6b:
         ea:dd:0c:23:39:94:41:e7:ed:b9:21:53:47:46:a6:99:14:70:
         e6:b5:e9:90:3b:fb:80:e0:94:01:53:e0:8a:c2:4c:99:f3:c0:
         e0:8f:01:e4:2c:7d:f3:5b:ad:e3:62:8b:89:37:ef:e7:b0:6a:
         cb:7a:11:ff:ce:1a:28:39:a2:98:68:89:38:21:33:e9:87:53:
         72:8a:ff:87:ff:96:81:f5:30:57:12:a5:42:12:89:5a:1f:18:
         93:76:42:b9:9d:da:ae:a0:5a:2d:15:ec:05:cb:6e:94:c1:9e:
         39:37:92:de:c6:ea:8e:bc:c5:6d:03:92:33:79:0e:ac:36:39:
         3f:4c:ba:a6:d1:94:d0:92:f8:25:f8:87:9f:fd:46:82:a6:f5:
         f2:d0:96:33:02:e7:93:95:42:f7:bd:8c:6d:2b:9c:10:d7:09:
         81:f1:12:39
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEWt7hTlz2dOT5XoEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm
ODJlMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
ZjQ4NmEzNjAtOGFiZi00ZmM0LWFlODItZjdlNjlmNjYyNTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK+eZXQXNY6dueThP8HcDRWCPWroG8Eh6AGK
zYLMDCwAV4G9sGyE3DJhrM4xllx9E2iI1OUWN0gHwqEXB5dcZbPYw2ZhGp79EUYv
g3d71mWkVus9t9+cGm0tWHIvFV08PLJZ62Q7IVEzIBUzs4iO+x1x5icImK65LchW
5iPOZr48pDeaL2xNMLy44FlPaePFdrknadnJEgt4T0RFTyQmxK8u5zQsboTZFSSP
93VI9t/e5XfyERpushcOU2WPHcUbKNDiUxm0asdXNnoe/S45wGYgsog28clFubtW
ZJxPVs390czUvTbkKW+4CUpsPCmcbbRJiP8WiJpkiVl3L210ewIDAQABo4IDnTCC
A5kwHQYDVR0OBBYEFCjSSXHy2haNLr8SJdE5LTGzRZBpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi
YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z
YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2
MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy
ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw
ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB
wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF
z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACtWstkRV8ZOT3lnXxveDjgJ
7Dn0QAGK8hlVs/FvO6/Ju3a3coNSdCART00pgb0IITCY8CjrXM9P7hk/DFi/N41T
bf8eNYwmUh7FSzl4TC/WJggYH8HPulQ0a+rdDCM5lEHn7bkhU0dGppkUcOa16ZA7
+4DglAFT4IrCTJnzwOCPAeQsffNbreNii4k37+ewast6Ef/OGig5ophoiTghM+mH
U3KK/4f/loH1MFcSpUISiVofGJN2Qrmd2q6gWi0V7AXLbpTBnjk3kt7G6o68xW0D
kjN5Dqw2OT9MuqbRlNCS+CX4h5/9RoKm9fLQljMC55OVQve9jG0rnBDXCYHxEjk=
-----END CERTIFICATE-----
Generated at Sat May 18 13:31:05 2024 by rpki-client on console-fra.rpki-client.org