Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa
File:                     70dd68fe-7e33-3081-a8a1-918560928fca.roa (raw, json)
Hash identifier:          c5eGV+Ow/P6C6VpkJo8R1RUvFLBGXIcgN62w3mH39L0=
Subject key identifier:   BB:AE:C7:EF:3A:D4:DB:6C:CF:91:B5:ED:86:EF:3E:55:E2:F0:78:84
Certificate issuer:       /CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
Certificate serial:       010D0C9F43285846FA2577B0F6F1F0AD1A655900
Authority key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa
Signing time:             Sat 24 Aug 2024 01:00:31 +0000
ROA not before:           Sat 24 Aug 2024 01:00:31 +0000
ROA not after:            Fri 22 Nov 2024 02:00:31 +0000
asID:                     396872
IP address blocks:        23.132.224.0/24 maxlen: 24
                          23.132.225.0/24 maxlen: 24
                          142.202.24.0/22 maxlen: 24
                          155.254.200.0/22 maxlen: 24
                          170.205.44.0/22 maxlen: 24
                          216.39.236.0/22 maxlen: 24
                          2602:fe65::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fa:25:77:b0:f6:f1:f0:ad:1a:65:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
        Validity
            Not Before: Aug 24 01:00:31 2024 GMT
            Not After : Nov 22 02:00:31 2024 GMT
        Subject: CN=a899976a-c4d2-4931-99bb-9e171a301599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f8:7e:64:e5:54:f2:d2:6a:ae:58:b7:b6:55:
                    16:c1:4a:e0:04:82:57:95:cc:ab:15:45:bd:3d:bf:
                    63:f4:1a:cf:0e:c0:77:80:27:3f:3b:47:18:00:9e:
                    30:f0:4e:64:ac:c7:5c:bf:c3:5f:d5:7a:5f:8c:10:
                    68:d6:20:a6:c2:f0:30:8c:2e:8c:a8:e0:f0:36:ce:
                    07:77:3c:ef:54:4a:4f:97:34:61:6d:be:70:13:1b:
                    a6:d9:97:e1:ba:2a:64:2f:1e:6d:f0:1e:0a:98:5f:
                    da:e2:88:84:d1:93:c7:84:57:6b:ad:81:58:b0:9b:
                    c6:80:cd:76:4f:99:53:2b:f9:6d:c4:49:69:b0:93:
                    33:c4:2d:1d:bb:11:fe:fe:5e:9b:09:d3:14:dd:03:
                    8e:0a:02:85:27:3d:73:3d:12:0d:b7:da:33:51:5d:
                    d6:36:45:c8:12:4a:85:04:9b:19:e4:0a:62:ed:16:
                    79:c0:8c:79:de:0e:29:0b:1c:d7:cd:78:66:bc:85:
                    8c:d8:63:84:05:88:23:02:95:2c:7e:3e:0c:ea:f4:
                    6c:79:e0:85:f2:46:43:99:b2:16:f7:b3:61:6e:d9:
                    36:0c:d0:f2:7c:e8:0e:91:80:68:3c:df:91:77:e1:
                    95:79:cb:dd:ef:9d:99:19:a9:73:b3:38:0e:cc:aa:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AE:C7:EF:3A:D4:DB:6C:CF:91:B5:ED:86:EF:3E:55:E2:F0:78:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl

            X509v3 Authority Key Identifier:
                keyid:BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.224.0/23
                  142.202.24.0/22
                  155.254.200.0/22
                  170.205.44.0/22
                  216.39.236.0/22
                IPv6:
                  2602:fe65::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:43:17:f7:e2:3d:e1:4b:91:4e:11:63:70:b2:37:9a:91:00:
         2b:1d:a0:b2:6e:25:67:c1:8e:e6:9d:25:c1:9f:6d:5f:0d:46:
         bc:13:3c:be:7c:eb:1b:6c:c5:c9:d0:80:21:be:65:fd:cf:29:
         10:7e:f9:a7:92:13:53:9d:c6:85:74:03:eb:80:75:d4:1e:81:
         4b:7b:63:fb:2f:43:9b:a7:37:da:c7:3b:9c:a8:d8:5d:fb:7b:
         14:56:57:9d:aa:6d:13:c4:8c:b6:13:a9:ff:f3:3b:38:41:bb:
         33:c9:97:15:67:6e:bd:c8:06:db:23:97:cb:89:98:b9:39:c9:
         d6:ae:da:e0:18:05:db:d9:27:e5:65:af:6f:bb:41:30:f5:36:
         40:25:57:a6:0a:bf:6b:f0:03:dd:bb:c2:5f:a7:a1:7a:a2:c3:
         d8:e5:c4:a9:88:57:db:ab:0f:72:42:38:b5:0f:14:c3:ef:de:
         2e:06:61:5f:61:46:08:fe:4c:20:40:b1:c6:e7:24:01:d5:c1:
         30:5c:1b:9f:57:38:de:bf:0c:24:24:45:1b:bc:e4:93:f6:65:
         73:c7:84:61:b2:83:41:8e:25:65:83:4b:39:f7:66:35:0c:77:
         b7:51:cc:cf:88:19:a3:66:10:69:de:57:b1:84:70:de:a8:1d:
         2d:88:c6:a1
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEb6JXew9vHwrRplWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFiZDUtNzczMjllN2Rm
ZmQ1MB4XDTI0MDgyNDAxMDAzMVoXDTI0MTEyMjAyMDAzMVowLzEtMCsGA1UEAxMk
YTg5OTk3NmEtYzRkMi00OTMxLTk5YmItOWUxNzFhMzAxNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vh+ZOVU8tJqrli3tlUWwUrgBIJXlcyrFUW9
Pb9j9BrPDsB3gCc/O0cYAJ4w8E5krMdcv8Nf1XpfjBBo1iCmwvAwjC6MqODwNs4H
dzzvVEpPlzRhbb5wExum2ZfhuipkLx5t8B4KmF/a4oiE0ZPHhFdrrYFYsJvGgM12
T5lTK/ltxElpsJMzxC0duxH+/l6bCdMU3QOOCgKFJz1zPRINt9ozUV3WNkXIEkqF
BJsZ5Api7RZ5wIx53g4pCxzXzXhmvIWM2GOEBYgjApUsfj4M6vRseeCF8kZDmbIW
97Nhbtk2DNDyfOgOkYBoPN+Rd+GVecvd752ZGalzszgOzKqWLwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFLuux+861Ntsz5G17YbvPlXi8HiEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMDhk
ZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3ZGZmZDUvNzBkZDY4ZmUtN2UzMy0z
MDgxLWE4YTEtOTE4NTYwOTI4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFi
ZDUtNzczMjllN2RmZmQ1L2QwOGRlN2NiLWU2N2YtNGY2ZS1hYmQ1LTc3MzI5ZTdk
ZmZkNS5jcmwwHwYDVR0jBBgwFoAUuyRRy9dQ7hcsOzFdv4xB/fqWLMowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMy
OWU3ZGZmZDUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF4TgAwQC
jsoYAwQCm/7IAwQCqs0sAwQC2CfsMA4EAgACMAgDBgQmAv5lADBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi
Qxf34j3hS5FOEWNwsjeakQArHaCybiVnwY7mnSXBn21fDUa8Ezy+fOsbbMXJ0IAh
vmX9zykQfvmnkhNTncaFdAPrgHXUHoFLe2P7L0ObpzfaxzucqNhd+3sUVledqm0T
xIy2E6n/8zs4QbszyZcVZ269yAbbI5fLiZi5OcnWrtrgGAXb2SflZa9vu0Ew9TZA
JVemCr9r8APdu8Jfp6F6osPY5cSpiFfbqw9yQji1DxTD794uBmFfYUYI/kwgQLHG
5yQB1cEwXBufVzjevwwkJEUbvOST9mVzx4RhsoNBjiVlg0s592Y1DHe3UczPiBmj
ZhBp3lexhHDeqB0tiMah
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:52:28 2024 by rpki-client on console-fra.rpki-client.org