Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS142036.roa
File:                     AS142036.roa (raw, json)
Hash identifier:          GrdUlUxUZNdDsRPbBqYybJIonqsLVG9ekrbdcx6rrJo=
Subject key identifier:   29:DE:75:23:9E:77:4B:78:C1:6A:FB:3A:B6:57:11:F5:AC:5C:7B:41
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       26A50068087C4ADCB2C37358DFD390EDFE7FB14A
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS142036.roa
Signing time:             Sat 16 Nov 2024 06:15:29 +0000
ROA not before:           Sat 16 Nov 2024 06:10:29 +0000
ROA not after:            Sat 15 Nov 2025 06:15:29 +0000
asID:                     142036
IP address blocks:        66.225.226.0/24 maxlen: 24
                          66.225.228.0/24 maxlen: 24
                          66.225.246.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.51.0/24 maxlen: 24
                          204.93.164.0/24 maxlen: 24
                          204.93.186.0/24 maxlen: 24
                          204.93.201.0/24 maxlen: 24
                          205.234.146.0/24 maxlen: 24
                          205.234.156.0/24 maxlen: 24
                          205.234.157.0/24 maxlen: 24
                          205.234.170.0/24 maxlen: 24
                          205.234.171.0/24 maxlen: 24
                          205.234.200.0/24 maxlen: 24
                          205.234.201.0/24 maxlen: 24
                          205.234.232.0/24 maxlen: 24
                          205.234.244.0/24 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          205.234.253.0/24 maxlen: 24
                          216.246.20.0/24 maxlen: 24
                          216.246.21.0/24 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/24 maxlen: 24
                          216.246.67.0/24 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a5:00:68:08:7c:4a:dc:b2:c3:73:58:df:d3:90:ed:fe:7f:b1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 16 06:10:29 2024 GMT
            Not After : Nov 15 06:15:29 2025 GMT
        Subject: CN=29DE75239E774B78C16AFB3AB65711F5AC5C7B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:9f:02:18:73:69:0f:ba:94:db:37:76:a4:
                    eb:df:5b:97:29:e3:c7:c1:eb:79:6d:21:63:6d:58:
                    51:54:2d:73:82:e9:cf:e3:f7:44:b2:cb:f0:ac:4a:
                    a5:1b:73:9d:e3:ff:f3:c6:85:a1:60:b1:4b:5b:85:
                    53:6a:2f:08:a0:8f:15:8b:e2:49:98:8c:83:de:a4:
                    2e:c6:bf:ba:33:13:e4:d0:c8:95:21:35:f4:cd:e8:
                    23:27:d1:6e:3f:72:44:a0:40:60:bd:a7:ef:52:09:
                    78:b4:3f:6a:d4:f0:9a:85:28:8b:7d:15:e9:9c:ef:
                    3f:eb:c1:ca:b1:b8:5b:8c:1e:a2:e1:08:7a:24:d6:
                    db:a3:2b:d9:0e:93:f0:f1:6e:b1:61:a8:63:42:dc:
                    b3:46:f7:43:0f:92:c0:96:d5:32:ad:15:84:5e:b9:
                    b9:47:55:11:eb:03:1c:45:aa:c0:3e:28:33:3d:36:
                    b6:31:ab:35:6d:92:68:91:e8:c1:b1:9c:69:55:05:
                    b2:92:44:dc:89:f9:14:53:a7:03:ee:0b:5f:e3:e3:
                    94:19:46:56:54:0e:fa:e9:14:06:14:23:e6:10:00:
                    13:21:54:e8:e7:24:b3:2a:6d:a6:6b:2d:e0:63:b1:
                    97:96:f6:f4:b0:00:29:8a:f0:0c:e4:88:9d:61:78:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DE:75:23:9E:77:4B:78:C1:6A:FB:3A:B6:57:11:F5:AC:5C:7B:41
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS142036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  66.225.228.0/24
                  66.225.246.0/24
                  75.102.49.0/24
                  75.102.51.0/24
                  204.93.164.0/24
                  204.93.186.0/24
                  204.93.201.0/24
                  205.234.146.0/24
                  205.234.156.0/23
                  205.234.170.0/23
                  205.234.200.0/23
                  205.234.232.0/24
                  205.234.244.0/24
                  205.234.252.0/23
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:c6:ba:bd:7f:fb:e5:60:0b:f8:23:5f:06:45:74:10:2b:
         b9:36:0d:a9:6d:62:d6:91:1d:fa:1f:b1:9f:00:27:a2:81:54:
         8b:21:17:9e:f6:46:dd:6a:b1:c2:7b:41:d2:12:de:33:d4:05:
         ba:1d:7f:18:84:fc:7f:90:54:c4:db:84:29:0e:4a:82:99:cf:
         4d:2d:f9:e6:7c:6d:24:1d:8e:3c:7b:68:ab:64:ad:a5:24:fa:
         67:d5:6d:b1:ef:7a:9e:db:d3:86:97:b1:77:7b:19:01:57:20:
         cf:d5:64:b9:7c:72:6e:16:08:0a:a7:ad:f7:09:85:77:ac:ea:
         15:54:e7:6b:d5:09:e9:d9:14:2b:6b:17:60:e9:44:97:3e:ea:
         f3:9a:de:a5:b8:cf:56:14:eb:2b:1c:91:bb:26:cf:a2:e0:aa:
         3f:21:d4:09:4e:8f:39:c1:cd:00:37:24:6f:03:1d:48:13:80:
         8e:77:b2:23:48:82:68:c5:9f:b8:15:e0:4c:1b:96:e8:cd:15:
         60:d5:39:02:c8:e0:11:c2:7e:44:b5:b9:ce:60:43:da:0d:dd:
         3e:dd:34:ff:07:ba:f9:8b:57:a4:4b:2b:63:21:e3:df:50:5c:
         98:f0:78:64:60:d1:72:81:98:4b:5d:88:39:3f:81:fd:11:e8:
         a2:b8:cd:8c
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIUJqUAaAh8Styyw3NY39OQ7f5/sUowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE2MDYxMDI5WhcNMjUxMTE1MDYxNTI5
WjAzMTEwLwYDVQQDEygyOURFNzUyMzlFNzc0Qjc4QzE2QUZCM0FCNjU3MTFGNUFD
NUM3QjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllWfAhhzaQ+6
lNs3dqTr31uXKePHwet5bSFjbVhRVC1zgunP4/dEssvwrEqlG3Od4//zxoWhYLFL
W4VTai8IoI8Vi+JJmIyD3qQuxr+6MxPk0MiVITX0zegjJ9FuP3JEoEBgvafvUgl4
tD9q1PCahSiLfRXpnO8/68HKsbhbjB6i4Qh6JNbboyvZDpPw8W6xYahjQtyzRvdD
D5LAltUyrRWEXrm5R1UR6wMcRarAPigzPTa2Mas1bZJokejBsZxpVQWykkTcifkU
U6cD7gtf4+OUGUZWVA766RQGFCPmEAATIVTo5ySzKm2may3gY7GXlvb0sAApivAM
5IidYXgRPwIDAQABo4IC9DCCAvAwHQYDVR0OBBYEFCnedSOed0t4wWr7OrZXEfWs
XHtBMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzE0MjAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
kwYIKwYBBQUHAQcBAf8EgYMwgYAwfgQCAAEweAMEAELh4gMEAELh5AMEAELh9gME
AEtmMQMEAEtmMwMEAMxdpAMEAMxdugMEAMxdyQMEAM3qkgMEAc3qnAMEAc3qqgME
Ac3qyAMEAM3q6AMEAM3q9AMEAc3q/AMEAdj2FAMEANj2GQMEAdj2QgMEANj2ZwME
ANj2ezANBgkqhkiG9w0BAQsFAAOCAQEAiczGur1/++VgC/gjXwZFdBAruTYNqW1i
1pEd+h+xnwAnooFUiyEXnvZG3WqxwntB0hLeM9QFuh1/GIT8f5BUxNuEKQ5KgpnP
TS355nxtJB2OPHtoq2StpST6Z9Vtse96ntvThpexd3sZAVcgz9VkuXxybhYICqet
9wmFd6zqFVTna9UJ6dkUK2sXYOlElz7q85repbjPVhTrKxyRuybPouCqPyHUCU6P
OcHNADckbwMdSBOAjneyI0iCaMWfuBXgTBuW6M0VYNU5AsjgEcJ+RLW5zmBD2g3d
Pt00/we6+YtXpEsrYyHj31BcmPB4ZGDRcoGYS12IOT+B/RHoorjNjA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org