Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
File:                     b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa (raw, json)
Hash identifier:          05Of1JnrHmTgzUKgWJHRRQEXirpL+rRQIcsdqjATNuA=
Subject key identifier:   0B:19:92:D4:76:B3:46:B1:8D:6B:2E:43:C9:BB:FD:22:40:81:02:87
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285845D39E50D2E2A1B8EB0963A000
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     395092
IP address blocks:        146.71.86.0/23 maxlen: 24
                          208.123.116.0/23 maxlen: 24
                          52.129.44.0/23 maxlen: 24
                          107.161.50.0/23 maxlen: 24
                          144.208.124.0/22 maxlen: 24
                          2607:a680::/48 maxlen: 48
                          2607:a680:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:50:d2:e2:a1:b8:eb:09:63:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=7411432e-fcf2-48ed-9ddc-9a4e1b41f215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:78:ab:d7:5d:c0:7d:f5:03:0d:e6:83:ba:
                    54:f0:f1:62:14:5a:f5:90:3d:bd:46:6e:36:d8:e9:
                    d1:34:f3:c5:5f:2a:4d:bc:e0:16:8b:aa:40:36:7e:
                    1e:08:c4:ac:47:0d:45:a7:fe:6c:b7:a8:d6:3e:1d:
                    90:43:fa:f3:49:66:14:4d:7a:f4:c6:bd:40:d0:34:
                    16:30:87:03:35:22:6f:d3:74:95:ef:ad:9f:42:56:
                    41:a8:f7:7c:c3:6e:a3:39:bf:1b:41:98:4e:cf:d6:
                    bf:68:ca:01:e0:7e:c0:e1:4b:cb:4e:25:0d:78:1c:
                    92:37:94:34:07:fa:46:c7:e3:3d:d8:17:ab:75:d1:
                    72:aa:15:c5:6e:28:b8:9c:03:a3:8d:15:92:5c:11:
                    9c:03:d2:66:8e:97:60:a4:42:b7:ae:2a:02:77:5a:
                    e0:af:ad:33:3e:f2:b7:26:eb:d2:38:ac:08:bf:6b:
                    a5:71:be:0d:34:5a:eb:d4:84:6f:f2:4b:5d:48:df:
                    6a:06:da:ee:11:a5:ed:97:ee:12:89:6c:09:c0:2b:
                    89:87:e3:6d:07:58:70:52:cd:3c:84:1b:8b:94:a3:
                    e9:ec:8d:a8:37:1d:ba:1a:a8:5e:b6:5c:9b:d8:ba:
                    59:49:5a:aa:5b:e9:ba:eb:78:01:aa:16:79:a2:b8:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:92:D4:76:B3:46:B1:8D:6B:2E:43:C9:BB:FD:22:40:81:02:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.44.0/23
                  107.161.50.0/23
                  144.208.124.0/22
                  146.71.86.0/23
                  208.123.116.0/23
                IPv6:
                  2607:a680::/48
                  2607:a680:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:28:cd:d2:36:a1:1b:22:c8:14:70:ef:00:12:27:45:8e:
         4f:e9:89:bc:95:a0:18:96:3e:d3:be:b6:ee:7c:f1:c5:97:ae:
         5d:83:f5:5b:37:90:7f:f7:f4:bb:6e:cb:fd:02:cc:76:d4:e8:
         b8:27:39:dd:db:6b:78:25:77:c5:7e:49:d5:e0:b2:77:07:c3:
         3c:03:0d:9d:36:27:50:4a:f2:5a:ca:4c:e2:a0:2b:80:7f:fe:
         f8:6e:20:f2:3f:9b:d0:3f:c2:00:a8:18:34:2d:b8:c1:93:26:
         44:84:40:5f:49:bb:31:4a:96:3b:67:5a:f7:64:f2:99:9b:59:
         b6:75:63:58:e7:f9:e5:e9:1f:74:79:bd:f9:02:f6:ee:a5:c6:
         c1:ca:4a:83:25:1a:a6:c6:a6:14:05:79:9f:3c:1e:eb:f7:b7:
         35:80:5f:8f:3c:c0:cb:76:36:18:83:72:2a:f1:a7:20:b6:68:
         96:29:67:92:f0:b1:78:96:16:be:23:f8:ed:d9:ad:51:c1:b8:
         04:42:b4:41:4c:10:c9:5f:6c:ef:85:14:41:8c:e0:20:37:80:
         77:95:35:81:58:85:24:f8:ee:47:41:9e:6a:d6:4f:b7:68:13:
         fa:a0:84:7e:da:50:78:00:d4:e7:59:22:d2:34:07:0f:25:50:
         27:a4:76:3a
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEXTnlDS4qG46wljoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
NzQxMTQzMmUtZmNmMi00OGVkLTlkZGMtOWE0ZTFiNDFmMjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kt4q9ddwH31Aw3mg7pU8PFiFFr1kD29Rm42
2OnRNPPFXypNvOAWi6pANn4eCMSsRw1Fp/5st6jWPh2QQ/rzSWYUTXr0xr1A0DQW
MIcDNSJv03SV762fQlZBqPd8w26jOb8bQZhOz9a/aMoB4H7A4UvLTiUNeBySN5Q0
B/pGx+M92BerddFyqhXFbii4nAOjjRWSXBGcA9JmjpdgpEK3rioCd1rgr60zPvK3
JuvSOKwIv2ulcb4NNFrr1IRv8ktdSN9qBtruEaXtl+4SiWwJwCuJh+NtB1hwUs08
hBuLlKPp7I2oNx26Gqhetlyb2LpZSVqqW+m663gBqhZ5oribmwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFAsZktR2s0axjWsuQ8m7/SJAgQKHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjI3ZDg4NWYtY2UxYi0z
ZmI1LWI5N2YtZjJhNTdiYjc1NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQBNIEsAwQB
a6EyAwQCkNB8AwQBkkdWAwQB0Ht0MBgEAgACMBIDBwAmB6aAAAADBwAmB6aAAAUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAD9UozdI2oRsiyBRw7wASJ0WOT+mJvJWgGJY+07627nzxxZeuXYP1
WzeQf/f0u27L/QLMdtTouCc53dtreCV3xX5J1eCydwfDPAMNnTYnUEryWspM4qAr
gH/++G4g8j+b0D/CAKgYNC24wZMmRIRAX0m7MUqWO2da92TymZtZtnVjWOf55ekf
dHm9+QL27qXGwcpKgyUapsamFAV5nzwe6/e3NYBfjzzAy3Y2GINyKvGnILZoliln
kvCxeJYWviP47dmtUcG4BEK0QUwQyV9s74UUQYzgIDeAd5U1gViFJPjuR0GeatZP
t2gT+qCEftpQeADU51ki0jQHDyVQJ6R2Og==
-----END CERTIFICATE-----
Generated at Thu May 23 02:59:18 2024 by rpki-client on console-ams.rpki-client.org