Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/651a84ba-9235-3d65-b237-d7133529cd22.roa
File:                     651a84ba-9235-3d65-b237-d7133529cd22.roa (raw, json)
Hash identifier:          eZyQCXHuFPCiV7bkD4DV7oIOLgOA2YJGSnqkH5Gzn1c=
Subject key identifier:   65:0A:FD:D8:29:9B:36:6D:D8:FA:B0:F8:C0:F8:80:43:F9:DD:BD:71
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AAE1D83046F01795233D2580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/651a84ba-9235-3d65-b237-d7133529cd22.roa
Signing time:             Thu 25 Apr 2024 22:48:33 +0000
ROA not before:           Thu 25 Apr 2024 22:48:33 +0000
ROA not after:            Wed 24 Jul 2024 22:48:33 +0000
asID:                     212238
IP address blocks:        104.164.44.0/24 maxlen: 24
                          104.164.120.0/24 maxlen: 24
                          104.164.171.0/24 maxlen: 24
                          104.164.172.0/24 maxlen: 24
                          104.165.13.0/24 maxlen: 24
                          104.165.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:e1:d8:30:46:f0:17:95:23:3d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:48:33 2024 GMT
            Not After : Jul 24 22:48:33 2024 GMT
        Subject: CN=e72218b0-225f-4ab6-9296-4b5599cb0268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:65:1c:ff:a0:76:d1:f6:9e:93:00:d7:ca:
                    a1:33:68:60:56:27:4d:66:7c:c0:b6:89:6f:38:de:
                    32:94:17:c5:08:3a:3c:8f:88:c9:17:00:7d:0d:ac:
                    03:e0:cd:53:67:9f:87:0f:5b:74:9c:d0:bb:08:18:
                    67:54:d4:3e:f3:ed:2c:05:b8:eb:5f:af:78:fd:d5:
                    20:63:35:b4:26:44:0c:ac:e0:c0:49:71:30:ba:9e:
                    7b:92:49:10:67:03:4b:5e:5f:d3:1a:37:68:ba:59:
                    58:ec:69:a7:35:fc:10:06:1f:16:e2:04:dd:19:37:
                    0e:5b:9a:0d:bb:b8:89:11:9b:fd:0a:ba:57:9c:b3:
                    ed:29:fa:a1:b7:80:4c:5f:0a:0a:0b:5f:bb:07:36:
                    ee:2f:4a:b4:e4:25:fe:d9:e8:79:9c:54:94:5e:a5:
                    56:86:d4:44:31:6e:e8:0e:01:84:e4:25:75:8f:8e:
                    74:ca:59:4c:c9:d0:3a:ae:37:f1:5e:82:b9:33:8f:
                    3e:00:4d:d9:2c:4a:63:5c:70:7d:0e:4d:44:cf:5c:
                    b0:6a:17:49:ea:51:43:c7:71:75:44:10:c5:38:9d:
                    62:a2:f7:96:24:f9:38:a0:07:7b:c6:d8:e4:e2:e1:
                    44:35:ba:e1:9a:3c:75:ad:3d:ca:51:fc:9c:99:02:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:FD:D8:29:9B:36:6D:D8:FA:B0:F8:C0:F8:80:43:F9:DD:BD:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/651a84ba-9235-3d65-b237-d7133529cd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.44.0/24
                  104.164.120.0/24
                  104.164.171.0-104.164.172.255
                  104.165.13.0/24
                  104.165.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:d6:59:eb:7c:85:e5:fc:33:ac:07:9b:00:43:c2:b4:c0:
         b9:62:03:63:3c:8a:5d:03:ad:e5:7c:05:a8:c4:2e:ea:c2:4a:
         e8:b7:37:4b:0a:ba:2e:62:56:9a:23:b8:6d:9f:07:2b:25:98:
         34:aa:c4:2d:c5:ab:7a:a2:82:b4:ff:1b:e6:a2:d5:a4:4d:1c:
         0a:97:28:f5:28:92:3f:1c:6c:39:80:88:d8:cb:29:5d:c1:68:
         fd:ac:bf:0e:80:98:c2:0d:f5:49:52:79:78:c5:76:3c:e0:90:
         8b:b8:9a:0c:33:27:01:e4:1f:86:1a:ca:eb:04:cd:92:a9:22:
         de:74:43:cb:c6:d3:70:89:a1:e2:4b:dd:54:3b:e0:a9:64:60:
         1c:35:b5:88:50:70:a1:65:01:15:39:fc:30:20:ac:f0:61:cf:
         bd:42:ca:fc:1a:7d:2a:3c:24:12:47:20:55:f3:aa:f4:ad:cb:
         d1:88:9e:05:0a:2d:9a:59:fc:f3:b3:79:cf:78:a2:3a:c4:74:
         b2:4f:e1:01:11:b1:f6:0f:ab:87:09:ad:78:ac:cf:83:f0:b8:
         06:1f:dd:5d:bb:dd:29:46:45:36:76:09:ee:1f:60:8d:53:da:
         24:7b:d3:60:1b:ab:40:7e:c9:55:9e:bf:26:fb:8b:eb:25:1f:
         d4:83:54:45
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEWq4dgwRvAXlSM9JYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQyNTIyNDgzM1oXDTI0MDcyNDIyNDgzM1owLzEtMCsGA1UEAxMk
ZTcyMjE4YjAtMjI1Zi00YWI2LTkyOTYtNGI1NTk5Y2IwMjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ltlHP+gdtH2npMA18qhM2hgVidNZnzAtolv
ON4ylBfFCDo8j4jJFwB9DawD4M1TZ5+HD1t0nNC7CBhnVNQ+8+0sBbjrX694/dUg
YzW0JkQMrODASXEwup57kkkQZwNLXl/TGjdoullY7GmnNfwQBh8W4gTdGTcOW5oN
u7iJEZv9CrpXnLPtKfqht4BMXwoKC1+7BzbuL0q05CX+2eh5nFSUXqVWhtREMW7o
DgGE5CV1j450yllMydA6rjfxXoK5M48+AE3ZLEpjXHB9Dk1Ez1ywahdJ6lFDx3F1
RBDFOJ1ioveWJPk4oAd7xtjk4uFENbrhmjx1rT3KUfycmQIStQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFGUK/dgpmzZt2Pqw+MD4gEP53b1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjUxYTg0YmEtOTIzNS0z
ZDY1LWIyMzctZDcxMzM1MjljZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAaKQsAwQA
aKR4MAwDBABopKsDBABopKwDBABopQ0DBABopRQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATTHWWet8heX8
M6wHmwBDwrTAuWIDYzyKXQOt5XwFqMQu6sJK6Lc3Swq6LmJWmiO4bZ8HKyWYNKrE
LcWreqKCtP8b5qLVpE0cCpco9SiSPxxsOYCI2MspXcFo/ay/DoCYwg31SVJ5eMV2
POCQi7iaDDMnAeQfhhrK6wTNkqki3nRDy8bTcImh4kvdVDvgqWRgHDW1iFBwoWUB
FTn8MCCs8GHPvULK/Bp9KjwkEkcgVfOq9K3L0YieBQotmln887N5z3iiOsR0sk/h
ARGx9g+rhwmteKzPg/C4Bh/dXbvdKUZFNnYJ7h9gjVPaJHvTYBurQH7JVZ6/JvuL
6yUf1INURQ==
-----END CERTIFICATE-----
Generated at Sat May 25 06:27:14 2024 by rpki-client on console-fra.rpki-client.org