Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa
File:                     e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa (raw, json)
Hash identifier:          mKyKkAaj+r8Nk3n6Nxfb793tGurRO2mI6mUq18hojVk=
Subject key identifier:   19:45:66:C1:63:8B:E8:4B:B5:6B:AC:6D:AC:F6:63:B9:C4:51:89:9B
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F43285845D503CA76E3A78D27935C68A0
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     30698
IP address blocks:        209.221.255.0/24 maxlen: 24
                          209.221.254.0/24 maxlen: 24
                          216.213.55.0/24 maxlen: 24
                          216.213.54.0/24 maxlen: 24
                          216.213.53.0/24 maxlen: 24
                          216.213.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ca:76:e3:a7:8d:27:93:5c:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=c3e51208-33df-4c38-9a13-7de8dee9b6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:1b:0d:29:e5:8d:28:09:d6:7b:b6:f0:fe:
                    6e:48:a9:5b:c8:8b:8c:c7:b8:01:ef:55:11:7e:44:
                    bb:71:c1:fc:5e:c5:df:cc:4d:f5:1a:80:90:9e:32:
                    a5:30:55:bd:d6:39:55:b2:fc:ed:7a:58:cc:a0:27:
                    c6:72:98:d1:54:4c:05:40:ce:fc:da:bb:4b:d8:fc:
                    ca:78:a0:56:cb:bb:c5:88:6e:04:4c:bc:6d:e1:88:
                    e7:61:cc:62:9e:04:c5:d9:31:e8:46:77:9d:bd:4b:
                    a6:87:76:fd:d7:5f:41:64:83:be:87:ba:18:89:2a:
                    8b:39:5f:c0:2b:ce:41:af:e3:c0:06:76:b9:9c:be:
                    69:6c:ad:7f:9f:72:41:09:73:6c:ee:15:97:e1:f6:
                    c7:71:1e:b0:b2:76:02:57:86:69:0c:76:d0:6d:34:
                    3c:8e:db:3e:ff:61:b6:7a:cb:98:85:07:97:12:e4:
                    31:6f:ae:0b:a1:cf:81:3d:42:7f:7d:4c:f9:c1:33:
                    57:f3:3d:4a:cc:54:d2:06:af:ad:eb:c1:79:6c:47:
                    c2:6e:b5:0b:eb:7f:30:34:79:49:0c:fe:8a:9d:cf:
                    de:26:a0:14:6c:df:af:a8:3e:97:c1:f7:f1:94:5f:
                    cb:5f:7b:54:5f:05:45:d1:1e:f7:6b:08:35:f6:8a:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:66:C1:63:8B:E8:4B:B5:6B:AC:6D:AC:F6:63:B9:C4:51:89:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.254.0/23
                  216.213.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:82:8a:c6:55:36:70:1b:b3:98:a9:16:ba:45:8e:33:3d:a6:
         a5:88:78:95:30:b1:b6:d3:1b:40:29:23:e8:af:b1:dd:eb:0d:
         bb:9f:3f:d9:cc:36:3a:e1:ff:a8:0b:4b:2e:ae:c4:49:43:cd:
         66:8d:b9:dc:8d:53:bb:a7:91:d5:53:b9:04:18:ce:c3:be:7b:
         a8:3b:9c:54:a2:a1:dc:3f:e3:e3:05:ce:ef:19:8f:3f:1c:ca:
         56:da:58:11:27:28:2f:7b:3e:44:9a:d5:91:07:db:d0:55:2d:
         1c:6d:fb:6e:f9:83:17:d8:1c:32:4e:2d:6d:5a:62:e6:fc:b3:
         53:87:fb:26:98:0e:f8:08:4e:2b:ba:a5:f2:34:99:62:bc:28:
         57:2b:20:64:55:43:e7:bf:93:3d:4c:07:ab:32:60:56:3c:83:
         83:36:1c:91:d5:aa:a0:5b:06:13:35:02:50:b6:29:9f:c9:5e:
         c6:10:9f:8d:ff:92:ce:f8:10:4a:67:5a:0f:53:d4:70:83:57:
         eb:82:11:97:51:f7:d4:af:5c:d2:2e:79:ca:39:61:4c:e0:93:
         bf:4f:0f:a2:42:d1:5b:e9:ce:bd:0f:bd:bd:d9:fe:37:cc:c8:
         78:0e:37:0f:b2:87:2b:7a:a0:21:7f:6c:74:ba:8c:67:ac:c1:
         6d:51:c8:47
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXVA8p246eNJ5NcaKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
YzNlNTEyMDgtMzNkZi00YzM4LTlhMTMtN2RlOGRlZTliNmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiukbDSnljSgJ1nu28P5uSKlbyIuMx7gB71UR
fkS7ccH8XsXfzE31GoCQnjKlMFW91jlVsvzteljMoCfGcpjRVEwFQM782rtL2PzK
eKBWy7vFiG4ETLxt4YjnYcxingTF2THoRnedvUumh3b9119BZIO+h7oYiSqLOV/A
K85Br+PABna5nL5pbK1/n3JBCXNs7hWX4fbHcR6wsnYCV4ZpDHbQbTQ8jts+/2G2
esuYhQeXEuQxb64Loc+BPUJ/fUz5wTNX8z1KzFTSBq+t68F5bEfCbrUL638wNHlJ
DP6Knc/eJqAUbN+vqD6XwffxlF/LX3tUXwVF0R73awg19orr+QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBlFZsFji+hLtWusbaz2Y7nEUYmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZTU5Yzg3Y2ItOWE3MS0z
MDM2LTgzYTgtNjBlMmQ4NGJjZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0d3+AwQC
2NU0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIGCisZVNnAbs5ipFrpFjjM9pqWIeJUwsbbTG0ApI+ivsd3r
DbufP9nMNjrh/6gLSy6uxElDzWaNudyNU7unkdVTuQQYzsO+e6g7nFSiodw/4+MF
zu8Zjz8cylbaWBEnKC97PkSa1ZEH29BVLRxt+275gxfYHDJOLW1aYub8s1OH+yaY
DvgITiu6pfI0mWK8KFcrIGRVQ+e/kz1MB6syYFY8g4M2HJHVqqBbBhM1AlC2KZ/J
XsYQn43/ks74EEpnWg9T1HCDV+uCEZdR99SvXNIueco5YUzgk79PD6JC0Vvpzr0P
vb3Z/jfMyHgONw+yhyt6oCF/bHS6jGeswW1RyEc=
-----END CERTIFICATE-----
Generated at Wed May 22 01:56:52 2024 by rpki-client on console-fra.rpki-client.org