Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
File:                     6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa (raw, json)
Hash identifier:          g2ehtI3/OxJuc9tVRjB+X/0Avhw1fPTEFsPbx5bXPiM=
Subject key identifier:   00:F8:9B:55:7C:0A:AE:F4:F8:05:28:36:9F:80:8B:76:41:6A:B6:B5
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F43285845DEC90C8EB153FEC706417480
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     10958
IP address blocks:        208.68.56.0/22 maxlen: 32
                          208.80.144.0/21 maxlen: 32
                          162.216.208.0/21 maxlen: 32
                          198.62.181.0/24 maxlen: 32
                          208.91.176.0/21 maxlen: 32
                          147.161.4.0/22 maxlen: 32
                          162.216.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:0c:8e:b1:53:fe:c7:06:41:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=8cdff559-03cd-4c29-af1a-6a4f831b9957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:02:65:df:ab:24:85:6a:66:50:34:8a:f7:
                    58:09:0f:aa:e0:f8:ca:82:47:68:82:fa:65:18:9f:
                    a1:1a:26:62:b8:d8:b4:09:4a:26:00:60:07:73:6e:
                    1b:c8:29:23:e5:e9:44:7f:66:42:07:7a:c7:69:e0:
                    dd:a9:82:1d:13:b3:18:0d:2b:09:c0:e1:b1:9c:7c:
                    af:43:93:bb:5d:3d:30:2c:6e:14:5d:e8:68:30:f7:
                    38:bc:3f:bd:50:51:5f:87:d6:d1:fe:06:c4:6d:7c:
                    c4:02:16:5c:a8:04:98:eb:26:44:99:fb:d7:05:76:
                    f2:5c:f0:0a:43:eb:d0:56:bf:c9:25:69:37:a3:8a:
                    08:cf:70:58:2f:d7:08:0b:0b:62:c6:20:5a:68:20:
                    33:2d:56:6c:9c:52:fb:e2:5f:c3:12:ea:9f:b0:b1:
                    71:05:fd:d3:b6:f7:31:e4:38:61:8f:c7:c9:73:e0:
                    31:94:1d:4a:28:24:c2:a5:4d:48:82:d5:a8:28:9e:
                    38:e6:42:38:a8:ab:06:12:41:de:6c:20:2a:38:85:
                    b3:b4:7b:2c:20:31:ca:6e:26:85:88:2f:d7:76:91:
                    72:80:e2:df:40:3b:45:7a:54:7f:4c:87:30:7d:52:
                    f2:b6:ec:31:36:15:62:ac:81:17:1a:59:bc:5f:9d:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:9B:55:7C:0A:AE:F4:F8:05:28:36:9F:80:8B:76:41:6A:B6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:5f:19:c9:4b:0b:6b:17:cb:76:b1:0f:f1:2b:bc:06:1a:
         f8:66:36:01:b9:fc:30:88:3b:75:05:7c:5c:67:dc:bb:ca:e6:
         73:00:7f:80:f8:5d:c5:3d:69:13:e4:4a:2f:81:8c:70:01:19:
         0b:45:48:54:1f:55:b5:1a:51:90:63:09:2b:d1:60:c6:4e:a3:
         d6:ca:15:32:33:89:af:b7:e5:f1:ca:34:c7:42:c3:c4:7f:db:
         64:ac:c8:5e:ca:57:c8:58:31:26:5e:aa:5e:1c:86:57:b5:85:
         4c:b4:9d:e5:3e:03:e1:9e:eb:91:47:cf:29:12:e7:3e:de:9c:
         55:4b:eb:a4:35:9c:99:aa:57:ae:a2:7c:0d:10:e4:a8:c4:4a:
         38:90:fb:8b:d3:98:fa:a2:2d:0a:77:db:56:3d:6b:04:41:39:
         9d:0c:84:8e:3c:b1:45:0e:11:ac:a0:98:29:e1:5f:28:c2:b8:
         22:ec:fe:d2:61:90:f2:e8:55:53:c9:15:1c:83:cd:59:f7:f2:
         bf:81:c2:d8:5c:03:63:a7:7e:5b:18:c4:d7:a9:09:31:68:d4:
         da:bd:04:3d:36:58:d0:1c:aa:0e:b7:37:8d:fb:9b:1f:c1:68:
         8b:7f:7e:5d:f0:2d:7d:d1:1d:85:4f:ad:1b:7b:2e:dc:83:fc:
         de:8a:e9:1e
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEXeyQyOsVP+xwZBdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzMwOTdlMzYtY2VmMy00MThiLWE4OTUtY2FjYjc5N2Qx
ZWViMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
OGNkZmY1NTktMDNjZC00YzI5LWFmMWEtNmE0ZjgzMWI5OTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRQCZd+rJIVqZlA0ivdYCQ+q4PjKgkdogvpl
GJ+hGiZiuNi0CUomAGAHc24byCkj5elEf2ZCB3rHaeDdqYIdE7MYDSsJwOGxnHyv
Q5O7XT0wLG4UXehoMPc4vD+9UFFfh9bR/gbEbXzEAhZcqASY6yZEmfvXBXbyXPAK
Q+vQVr/JJWk3o4oIz3BYL9cICwtixiBaaCAzLVZsnFL74l/DEuqfsLFxBf3Ttvcx
5Dhhj8fJc+AxlB1KKCTCpU1IgtWoKJ445kI4qKsGEkHebCAqOIWztHssIDHKbiaF
iC/XdpFygOLfQDtFelR/TIcwfVLytuwxNhVirIEXGlm8X52CFwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFAD4m1V8Cq70+AUoNp+Ai3ZBara1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMzA5
N2UzNi1jZWYzLTQxOGItYTg5NS1jYWNiNzk3ZDFlZWIvNmJiYzg1ZmQtYzlhNi0z
ZmU2LWEwYWQtYWM4NzhiMjQzZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzMwOTdlMzYtY2VmMy00MThiLWE4
OTUtY2FjYjc5N2QxZWViLzMzMDk3ZTM2LWNlZjMtNDE4Yi1hODk1LWNhY2I3OTdk
MWVlYi5jcmwwHwYDVR0jBBgwFoAU89JWK3b/OzZxC0Wwx5lTFoanj/IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMzA5N2UzNi1jZWYzLTQxOGItYTg5NS1jYWNi
Nzk3ZDFlZWIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCk6EEAwQC
othsAwQDotjQAwQAxj61AwQC0EQ4AwQD0FCQAwQD0FuwMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEH1XxnJ
SwtrF8t2sQ/xK7wGGvhmNgG5/DCIO3UFfFxn3LvK5nMAf4D4XcU9aRPkSi+BjHAB
GQtFSFQfVbUaUZBjCSvRYMZOo9bKFTIzia+35fHKNMdCw8R/22SsyF7KV8hYMSZe
ql4chle1hUy0neU+A+Ge65FHzykS5z7enFVL66Q1nJmqV66ifA0Q5KjESjiQ+4vT
mPqiLQp321Y9awRBOZ0MhI48sUUOEaygmCnhXyjCuCLs/tJhkPLoVVPJFRyDzVn3
8r+BwthcA2OnflsYxNepCTFo1Nq9BD02WNAcqg63N437mx/BaIt/fl3wLX3RHYVP
rRt7LtyD/N6K6R4=
-----END CERTIFICATE-----
Generated at Sun May 19 01:58:18 2024 by rpki-client on console-ams.rpki-client.org