Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa
File:                     df426ff0-9772-37ec-98f5-d774d3e25215.roa (raw, json)
Hash identifier:          XjdCrML/vEdN8rQMOgokCsmvN1+0NGq8SgfN/C9bYvw=
Subject key identifier:   DC:73:80:DA:E7:23:DE:8D:13:10:28:EA:45:68:8C:FD:1B:7F:56:1A
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F43285845DEC9426D3908F34D43259700
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     13979
IP address blocks:        204.228.186.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          198.177.182.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:42:6d:39:08:f3:4d:43:25:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=41af870c-cbd4-462e-904a-99bf0b41c79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:3d:56:34:7b:07:a2:64:81:34:04:73:24:
                    c6:f1:63:f2:90:13:53:21:67:2e:6e:e2:ff:e6:bb:
                    f7:a3:df:85:53:ec:21:e6:4d:68:33:6b:b7:a0:ce:
                    65:3b:5c:ac:bb:67:e3:d0:f1:f6:ee:d9:97:04:16:
                    48:9b:c4:1e:bc:6e:ba:34:70:e5:ee:10:83:b5:32:
                    7d:72:e6:ff:41:7b:fc:eb:b3:be:01:89:07:75:77:
                    df:d3:85:b3:87:6e:53:6e:cf:2e:b4:db:d0:fd:fe:
                    a0:c5:6b:27:8b:02:6e:bd:d9:dd:57:66:84:e8:02:
                    07:e2:aa:df:81:bf:ea:da:09:ed:64:1a:5e:ea:40:
                    b6:08:ac:20:08:d6:cb:47:61:03:2c:27:ee:60:4d:
                    39:e3:01:e9:75:7a:7d:95:1d:21:98:a2:e2:07:8b:
                    fb:67:e5:d4:ca:05:9f:f9:5d:69:f2:b7:7b:b3:e3:
                    34:0b:0a:dd:2f:49:13:41:f6:c6:22:21:f8:dc:79:
                    d7:ee:c7:14:47:69:a2:15:fe:84:1e:70:1b:5f:94:
                    15:df:e5:df:fa:28:80:f5:d9:03:7e:98:e7:0e:d6:
                    b3:29:2f:02:fd:78:1f:b9:60:42:c7:bb:f0:43:4f:
                    4f:2b:2c:c9:a9:9f:ae:18:a2:fc:48:d7:d7:63:ab:
                    d2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:73:80:DA:E7:23:DE:8D:13:10:28:EA:45:68:8C:FD:1B:7F:56:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:88:97:2a:14:16:a2:7b:ea:ff:c6:79:66:0b:cb:e6:b5:0d:
         fe:08:b3:30:96:d8:30:da:b6:02:93:81:1f:6b:ce:5e:a9:6c:
         63:a5:57:da:0a:dc:59:51:59:b5:12:30:8a:09:73:27:2f:6a:
         04:6d:39:92:99:a1:56:7e:c4:53:d5:81:29:6a:68:36:1a:67:
         d6:71:cc:1b:c5:7f:39:c5:c5:e6:04:49:52:a9:5b:c5:64:66:
         5a:64:b9:c5:20:3c:f8:10:59:2b:c8:34:c8:cc:ca:f5:47:ff:
         53:55:73:29:18:0e:b8:1a:26:d4:43:57:22:35:d3:2c:ca:fd:
         c7:e0:4f:41:e2:ff:be:24:ea:36:ea:3e:92:6e:12:ae:49:93:
         be:e8:f1:3f:b5:9e:e5:25:84:16:e0:e5:93:16:6d:af:9e:2b:
         e4:71:9d:c1:83:79:15:ea:84:92:28:99:1a:c9:ca:89:b4:c2:
         e1:37:3b:b2:33:df:b0:da:af:e8:e7:8d:33:16:e3:2a:6d:83:
         4f:c1:6c:14:66:13:95:2a:3a:2e:1d:50:b8:af:35:d2:65:e2:
         dd:9f:7c:79:a2:f3:28:85:98:cc:05:d9:a8:f6:6c:83:d7:5d:
         90:ae:e5:96:f5:bd:a2:89:32:e1:d8:3f:1e:c2:c7:81:b5:ab:
         2a:5c:e4:ba
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEXeyUJtOQjzTUMllwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMzOWVmYWEtMzEyMS00YTgyLThkZDgtMTkyZjU2YWI0
N2QxMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
NDFhZjg3MGMtY2JkNC00NjJlLTkwNGEtOTliZjBiNDFjNzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU89VjR7B6JkgTQEcyTG8WPykBNTIWcubuL/
5rv3o9+FU+wh5k1oM2u3oM5lO1ysu2fj0PH27tmXBBZIm8QevG66NHDl7hCDtTJ9
cub/QXv867O+AYkHdXff04Wzh25Tbs8utNvQ/f6gxWsniwJuvdndV2aE6AIH4qrf
gb/q2gntZBpe6kC2CKwgCNbLR2EDLCfuYE054wHpdXp9lR0hmKLiB4v7Z+XUygWf
+V1p8rd7s+M0CwrdL0kTQfbGIiH43HnX7scUR2miFf6EHnAbX5QV3+Xf+iiA9dkD
fpjnDtazKS8C/XgfuWBCx7vwQ09PKyzJqZ+uGKL8SNfXY6vSsQIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFNxzgNrnI96NExAo6kVojP0bf1YaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzM5
ZWZhYS0zMTIxLTRhODItOGRkOC0xOTJmNTZhYjQ3ZDEvZGY0MjZmZjAtOTc3Mi0z
N2VjLTk4ZjUtZDc3NGQzZTI1MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDMzOWVmYWEtMzEyMS00YTgyLThk
ZDgtMTkyZjU2YWI0N2QxLzAzMzllZmFhLTMxMjEtNGE4Mi04ZGQ4LTE5MmY1NmFi
NDdkMS5jcmwwHwYDVR0jBBgwFoAUt9QukUgCMxhaZGylKwyTt68f7LMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzM5ZWZhYS0zMTIxLTRhODItOGRkOC0xOTJm
NTZhYjQ3ZDEuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAxrG2AwQA
xsiXAwQBx2hoAwQAzJHKAwQAzOSqMAwDBADM5K8DBAbM5IADBADM7l4DBADM7nsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAY4iXKhQWonvq/8Z5ZgvL5rUN/gizMJbYMNq2ApOBH2vOXqlsY6VX
2grcWVFZtRIwiglzJy9qBG05kpmhVn7EU9WBKWpoNhpn1nHMG8V/OcXF5gRJUqlb
xWRmWmS5xSA8+BBZK8g0yMzK9Uf/U1VzKRgOuBom1ENXIjXTLMr9x+BPQeL/viTq
Nuo+km4SrkmTvujxP7We5SWEFuDlkxZtr54r5HGdwYN5FeqEkiiZGsnKibTC4Tc7
sjPfsNqv6OeNMxbjKm2DT8FsFGYTlSo6Lh1QuK810mXi3Z98eaLzKIWYzAXZqPZs
g9ddkK7llvW9ooky4dg/HsLHgbWrKlzkug==
-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org