Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File:                     4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier:          dTm/5KEzVAIgGXd/YtdegG+Yc3pbev5QVN4F9GT3S2c=
Subject key identifier:   67:F8:4A:BE:A2:89:82:4A:7F:C0:F8:D0:FF:9A:21:5C:FF:4A:57:B1
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285845D39E612F1C3463B4F87C2A4C
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     395092
IP address blocks:        172.96.136.0/22 maxlen: 24
                          64.28.236.0/23 maxlen: 24
                          2607:a680:3::/48 maxlen: 48
                          2607:a680:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:61:2f:1c:34:63:b4:f8:7c:2a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=dda5be8c-a841-40d8-95d3-be304682ebfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:ae:b9:f4:12:29:8f:16:7e:37:b3:15:bc:
                    ab:3a:dd:47:61:6e:fc:b4:26:cd:a1:9f:3a:9c:a9:
                    2f:9f:10:79:72:4e:3d:87:ba:83:d1:67:90:95:dc:
                    d0:c6:98:59:73:d6:d7:0e:3b:b1:a6:c8:18:a9:1e:
                    21:bd:9b:53:ee:11:6a:32:a6:f5:79:55:24:94:d4:
                    dc:80:ed:57:fd:15:b9:03:14:66:eb:01:1f:d6:16:
                    08:96:02:ac:84:9f:5b:71:60:c5:75:2b:83:56:8d:
                    ed:98:63:e6:22:e5:8c:ab:bc:5a:f7:ee:12:0a:41:
                    e4:04:e7:f7:65:6e:8d:75:75:5e:08:93:60:41:46:
                    10:54:d3:ea:e2:f9:41:0d:0c:49:f0:56:76:73:14:
                    1c:45:40:07:ca:9a:5d:02:ab:1f:16:a8:b4:51:b1:
                    37:72:ad:bf:47:09:a4:f0:52:a6:99:82:37:5d:cf:
                    47:2b:91:47:ec:8e:cd:ed:e5:08:ba:f6:73:d8:6f:
                    c9:91:21:40:2e:93:5b:c8:af:06:28:7a:b4:c3:6d:
                    89:e4:ef:17:b5:e6:30:96:f6:5b:5a:7d:83:ad:10:
                    43:10:3b:59:48:15:4d:9d:ae:1a:72:c4:a9:47:ff:
                    6d:6b:5b:77:67:f1:91:65:ad:d7:ab:43:2e:8d:9f:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:4A:BE:A2:89:82:4A:7F:C0:F8:D0:FF:9A:21:5C:FF:4A:57:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.236.0/23
                  172.96.136.0/22
                IPv6:
                  2607:a680:3::/48
                  2607:a680:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:7a:4f:23:a9:11:89:7e:ba:ab:a3:2d:06:2d:cb:75:fd:
         4b:fb:64:90:b2:48:b6:5f:38:ce:c8:71:d9:99:86:2d:f3:cd:
         61:be:d8:6a:eb:7b:8d:75:91:4e:6d:b3:f5:59:7b:ac:8f:64:
         71:0d:71:01:4c:77:45:6a:65:65:eb:b4:52:9e:b7:9b:06:a9:
         24:8b:f1:1c:e0:ca:6c:f4:14:4a:df:78:ed:58:51:5a:52:e4:
         9b:ff:60:75:bd:a9:a3:df:d5:2f:b2:e7:e6:ce:56:86:d9:88:
         76:1d:b9:20:e7:99:84:97:7a:84:1f:21:74:e1:a9:88:7e:2c:
         60:95:56:1e:9f:5f:5f:86:25:30:16:6f:10:54:b8:9e:dc:92:
         90:05:d2:72:86:55:66:64:c5:6d:b7:fe:4c:61:6c:91:5b:9b:
         ed:28:7e:94:d2:ea:b9:d5:5b:60:b3:25:b8:e4:48:d8:1d:cb:
         75:eb:55:65:07:8c:ae:59:d5:6f:eb:ec:05:2e:50:25:aa:25:
         59:41:32:15:28:57:16:8d:7f:46:c1:8f:69:11:6e:fc:82:6a:
         64:0d:7c:95:8f:bb:10:c6:db:0c:01:02:55:ff:a3:d9:67:da:
         aa:7e:34:23:37:07:7c:9a:e8:08:59:f6:9b:ba:99:2b:ef:86:
         cd:fb:43:9e
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEXTnmEvHDRjtPh8KkwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
ZGRhNWJlOGMtYTg0MS00MGQ4LTk1ZDMtYmUzMDQ2ODJlYmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCiuufQSKY8WfjezFbyrOt1HYW78tCbNoZ86
nKkvnxB5ck49h7qD0WeQldzQxphZc9bXDjuxpsgYqR4hvZtT7hFqMqb1eVUklNTc
gO1X/RW5AxRm6wEf1hYIlgKshJ9bcWDFdSuDVo3tmGPmIuWMq7xa9+4SCkHkBOf3
ZW6NdXVeCJNgQUYQVNPq4vlBDQxJ8FZ2cxQcRUAHyppdAqsfFqi0UbE3cq2/Rwmk
8FKmmYI3Xc9HK5FH7I7N7eUIuvZz2G/JkSFALpNbyK8GKHq0w22J5O8XteYwlvZb
Wn2DrRBDEDtZSBVNna4acsSpR/9ta1t3Z/GRZa3Xq0MujZ+v5wIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFGf4Sr6iiYJKf8D40P+aIVz/SlexMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGZjYjZlOTctNTM2OS0z
NWU0LTg0ZjktYjZlNTdjMTg1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQBzsAwQC
rGCIMBgEAgACMBIDBwAmB6aAAAMDBwAmB6aAAAcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPw96TyOpEYl+
uqujLQYty3X9S/tkkLJItl84zshx2ZmGLfPNYb7Yaut7jXWRTm2z9Vl7rI9kcQ1x
AUx3RWplZeu0Up63mwapJIvxHODKbPQUSt947VhRWlLkm/9gdb2po9/VL7Ln5s5W
htmIdh25IOeZhJd6hB8hdOGpiH4sYJVWHp9fX4YlMBZvEFS4ntySkAXScoZVZmTF
bbf+TGFskVub7Sh+lNLqudVbYLMluORI2B3LdetVZQeMrlnVb+vsBS5QJaolWUEy
FShXFo1/RsGPaRFu/IJqZA18lY+7EMbbDAECVf+j2Wfaqn40IzcHfJroCFn2m7qZ
K++GzftDng==
-----END CERTIFICATE-----
Generated at Wed May 22 16:41:47 2024 by rpki-client on console-ams.rpki-client.org