Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/aab3d6f9-48f6-3307-b84a-93f7c0538486.roa
File:                     aab3d6f9-48f6-3307-b84a-93f7c0538486.roa (raw, json)
Hash identifier:          U66wydOFujMNv4QZISx6wD4jc5Y2Q3O1Ug6DXy829aQ=
Subject key identifier:   BD:AA:A4:97:BB:3F:CF:97:13:6A:E2:91:B0:C2:5E:53:E7:E0:84:5B
Certificate issuer:       /CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
Certificate serial:       010D0C9F43285845E72926647C9198128A8269C0
Authority key identifier: 00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/aab3d6f9-48f6-3307-b84a-93f7c0538486.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     26271
IP address blocks:        107.181.192.0/19 maxlen: 24
                          207.241.128.0/20 maxlen: 24
                          162.249.112.0/22 maxlen: 24
                          138.229.32.0/19 maxlen: 24
                          162.250.24.0/21 maxlen: 24
                          107.161.128.0/20 maxlen: 24
                          64.25.192.0/20 maxlen: 24
                          2606:e400::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:26:64:7c:91:98:12:8a:82:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=ce8b4d65-4cd5-4926-bf02-22570b26caad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:ad:44:6c:88:4b:8e:31:22:81:0c:69:f6:
                    70:ed:d4:0b:7d:b1:a4:67:35:26:e0:65:c9:e2:b3:
                    b4:39:d0:81:17:2b:75:f5:15:30:86:15:a9:8c:33:
                    2d:98:3b:86:e0:ad:59:23:26:fa:55:dc:ec:87:dc:
                    ca:20:03:f0:05:bd:3f:c9:2b:10:32:32:8b:00:a3:
                    50:e5:72:22:3f:8d:42:d0:7e:0c:e1:d9:30:00:f1:
                    3d:bb:6c:48:63:8f:ba:ff:d0:14:ae:80:55:4e:70:
                    96:ef:14:22:5d:3a:5b:5c:42:00:9a:71:fb:25:7e:
                    34:a7:88:c3:c2:bc:c3:b4:db:d8:38:11:bf:3c:a8:
                    43:6a:0f:80:16:35:79:b0:b0:74:5e:28:5e:90:5c:
                    37:57:50:25:54:91:5d:da:90:3e:11:cf:1c:47:cb:
                    42:05:5f:d0:89:35:c7:cb:76:19:c6:a0:3e:f7:c8:
                    df:a9:5e:19:ae:e0:95:d4:56:8a:88:58:ec:bb:52:
                    3a:cb:39:b6:96:fd:85:ad:2d:f0:c4:2c:0a:75:18:
                    f3:f9:81:61:cf:15:a1:01:47:d3:1c:63:bb:99:e9:
                    9f:00:85:7b:6b:db:8a:ba:fb:42:7c:47:37:c2:2a:
                    3e:c3:d0:4f:09:d3:f5:19:66:47:e3:e0:b2:36:c2:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:A4:97:BB:3F:CF:97:13:6A:E2:91:B0:C2:5E:53:E7:E0:84:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/aab3d6f9-48f6-3307-b84a-93f7c0538486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.crl

            X509v3 Authority Key Identifier:
                keyid:00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.192.0/20
                  107.161.128.0/20
                  107.181.192.0/19
                  138.229.32.0/19
                  162.249.112.0/22
                  162.250.24.0/21
                  207.241.128.0/20
                IPv6:
                  2606:e400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:43:4e:fe:bf:03:3e:95:d4:23:7e:77:37:67:c0:8d:0b:1c:
         32:8f:81:ad:1b:f8:4c:a1:7b:17:05:b7:a6:87:bf:14:3b:01:
         9a:40:25:21:a8:b9:4e:d6:17:0d:cb:f9:7a:db:51:58:a8:25:
         b8:b7:ef:c5:e2:53:89:e6:e5:b4:06:f4:f8:ee:26:c9:c8:5a:
         80:69:f0:33:83:e1:d6:9c:1f:17:ff:a7:68:8d:fb:3b:ea:b0:
         99:8f:a7:36:fd:a2:a6:37:6b:58:d2:28:1d:11:1f:4f:0f:9b:
         5a:05:42:90:c0:e9:ff:62:3e:fe:7f:3f:d9:45:e8:ac:b2:e8:
         61:07:29:24:42:05:49:fb:b4:35:5a:b6:df:d7:bf:49:42:00:
         4e:c5:ed:65:34:91:21:5c:5c:14:1e:78:ef:67:ce:28:14:f6:
         87:de:4f:a1:0f:b5:1a:3a:9b:8b:18:59:e6:46:d7:b2:37:f6:
         d7:5b:07:c0:bc:14:3a:6b:de:a9:22:3d:47:b1:04:46:61:29:
         e7:8d:77:12:74:b1:d9:fa:c8:bf:81:3f:8a:78:bd:49:96:46:
         e0:7c:d5:a7:fc:5a:38:4a:7b:ba:f6:e1:a4:b5:b9:ea:1d:d1:
         ea:64:60:5f:aa:74:dd:ff:fa:97:cd:58:61:23:8d:42:60:2f:
         dd:a4:b3:1c
-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEXnKSZkfJGYEoqCacAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRmNzMyMmUtOGU0MS00Y2JiLTgwNWQtYWI2ZjY3MjI2
ZGVkMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk
Y2U4YjRkNjUtNGNkNS00OTI2LWJmMDItMjI1NzBiMjZjYWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpatRGyIS44xIoEMafZw7dQLfbGkZzUm4GXJ
4rO0OdCBFyt19RUwhhWpjDMtmDuG4K1ZIyb6Vdzsh9zKIAPwBb0/ySsQMjKLAKNQ
5XIiP41C0H4M4dkwAPE9u2xIY4+6/9AUroBVTnCW7xQiXTpbXEIAmnH7JX40p4jD
wrzDtNvYOBG/PKhDag+AFjV5sLB0XihekFw3V1AlVJFd2pA+Ec8cR8tCBV/QiTXH
y3YZxqA+98jfqV4ZruCV1FaKiFjsu1I6yzm2lv2FrS3wxCwKdRjz+YFhzxWhAUfT
HGO7memfAIV7a9uKuvtCfEc3wio+w9BPCdP1GWZH4+CyNsIjdwIDAQABo4IDiDCC
A4QwHQYDVR0OBBYEFL2qpJe7P8+XE2rikbDCXlPn4IRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZGY3
MzIyZS04ZTQxLTRjYmItODA1ZC1hYjZmNjcyMjZkZWQvYWFiM2Q2ZjktNDhmNi0z
MzA3LWI4NGEtOTNmN2MwNTM4NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGRmNzMyMmUtOGU0MS00Y2JiLTgw
NWQtYWI2ZjY3MjI2ZGVkL2RkZjczMjJlLThlNDEtNGNiYi04MDVkLWFiNmY2NzIy
NmRlZC5jcmwwHwYDVR0jBBgwFoAUACcrBhw1wzY7aZSNxCvM8E6Elw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZGY3MzIyZS04ZTQxLTRjYmItODA1ZC1hYjZm
NjcyMjZkZWQuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQBnAAwQE
a6GAAwQFa7XAAwQFiuUgAwQCovlwAwQDovoYAwQEz/GAMA0EAgACMAcDBQAmBuQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABNDTv6/Az6V1CN+dzdnwI0LHDKPga0b+EyhexcFt6aHvxQ7AZpA
JSGouU7WFw3L+XrbUVioJbi378XiU4nm5bQG9PjuJsnIWoBp8DOD4dacHxf/p2iN
+zvqsJmPpzb9oqY3a1jSKB0RH08Pm1oFQpDA6f9iPv5/P9lF6Kyy6GEHKSRCBUn7
tDVatt/Xv0lCAE7F7WU0kSFcXBQeeO9nzigU9ofeT6EPtRo6m4sYWeZG17I39tdb
B8C8FDpr3qkiPUexBEZhKeeNdxJ0sdn6yL+BP4p4vUmWRuB81af8WjhKe7r24aS1
ueod0epkYF+qdN3/+pfNWGEjjUJgL92ksxw=
-----END CERTIFICATE-----
Generated at Sat May 18 15:37:56 2024 by rpki-client on console-fra.rpki-client.org