Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/31ae1a91-bf27-3882-ad70-9fa0166219d8.roa
File:                     31ae1a91-bf27-3882-ad70-9fa0166219d8.roa (raw, json)
Hash identifier:          /k0ymZiCTnHxnyllLVnLsOEFVVeyzB79oNtkbYaxyGY=
Subject key identifier:   2A:B8:19:7C:8E:1A:DF:4A:D1:05:04:1A:19:0F:FA:8A:CA:93:22:81
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F432858454D9D7A2EBBEDDB5A48A0B880
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/31ae1a91-bf27-3882-ad70-9fa0166219d8.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     46606
IP address blocks:        192.254.128.0/17 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          50.116.64.0/18 maxlen: 24
                          216.172.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7a:2e:bb:ed:db:5a:48:a0:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=7c95d00b-dc97-4bae-809c-3e2f95cbce24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:42:ce:9d:21:9a:d0:79:31:05:1f:b7:ea:8b:
                    e9:ad:d7:cb:a3:67:61:99:23:d8:fc:d6:97:a1:72:
                    61:17:69:2c:c2:8c:7c:ad:92:7a:94:b4:93:c8:91:
                    c6:c4:df:bc:31:41:10:45:5e:61:3e:44:9f:a6:92:
                    f0:1e:1d:34:63:c3:97:25:28:1b:f9:78:f0:ed:1b:
                    f4:95:a4:e2:8f:e8:8c:e3:0c:35:d8:ad:c5:89:c4:
                    78:55:71:a8:8e:7b:15:4e:0b:31:4a:a6:b6:4c:c0:
                    09:d4:24:60:5e:9d:29:33:f0:0a:73:30:2a:34:4b:
                    d5:04:f6:79:8d:51:79:ef:d4:64:c4:ef:85:1f:c1:
                    f9:5c:8a:2f:f4:dc:c1:ad:fc:e8:44:5a:86:f0:5a:
                    68:25:dd:1f:7a:af:d8:1b:0c:fc:dd:5f:c5:d4:9b:
                    84:ef:99:37:bd:03:02:6b:75:0d:b1:a8:a2:de:cc:
                    13:f3:0d:da:87:27:d0:37:74:0a:2d:29:11:60:3a:
                    ff:fc:ec:49:60:59:2f:e5:8e:d2:13:7c:1f:ef:2a:
                    14:5a:05:80:09:d0:4f:5f:c4:e7:1f:0e:11:c0:d5:
                    97:72:d3:7d:e2:37:cd:6a:81:48:50:ff:58:d0:cd:
                    50:c0:0f:bd:57:95:f7:ad:a0:fb:5e:98:89:dc:e8:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B8:19:7C:8E:1A:DF:4A:D1:05:04:1A:19:0F:FA:8A:CA:93:22:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/31ae1a91-bf27-3882-ad70-9fa0166219d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:38:0a:ad:43:26:79:27:ae:6d:bc:e1:ae:18:ea:35:b6:af:
         58:88:0d:87:5f:c3:57:03:a2:67:e4:67:28:ee:24:98:81:45:
         27:12:9c:9b:98:63:ce:cd:62:ba:b9:b8:a0:73:8e:ef:73:64:
         d1:01:01:64:b8:6d:0b:13:a4:b2:c5:88:7b:b1:18:00:79:93:
         dc:91:d3:cd:b3:77:22:5b:8d:31:af:3a:09:4c:ec:3a:3f:4d:
         c6:78:ee:a4:89:5d:38:9f:f2:43:38:32:e1:35:ce:8b:3e:27:
         68:ea:9a:d3:aa:fd:15:b5:ea:0d:be:87:13:0c:65:a2:20:f3:
         f4:4e:bd:68:01:c1:d9:9d:13:37:d7:53:61:4f:c7:40:33:79:
         2d:63:97:45:ae:d6:ce:6f:f4:15:55:27:9a:31:41:59:7f:dc:
         2e:33:76:c0:f4:b7:a9:05:4a:f7:bf:4a:35:0f:e8:2a:45:f7:
         b5:fa:2e:55:19:a2:cf:0c:e6:2f:30:1e:db:ff:e3:98:ba:03:
         5e:5c:21:18:e4:e6:bb:e3:cc:ef:4e:cb:89:5b:dd:ba:ec:63:
         e3:87:9a:ae:25:f4:13:c4:c4:c9:ae:c6:b5:0c:8a:2b:04:f7:
         95:f6:38:d4:f1:2e:50:1a:f8:26:53:4a:89:e2:4f:1c:f4:6c:
         b4:08:13:e2
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWEVNnXouu+3bWkiguIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
N2M5NWQwMGItZGM5Ny00YmFlLTgwOWMtM2UyZjk1Y2JjZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70LOnSGa0HkxBR+36ovprdfLo2dhmSPY/NaX
oXJhF2kswox8rZJ6lLSTyJHGxN+8MUEQRV5hPkSfppLwHh00Y8OXJSgb+Xjw7Rv0
laTij+iM4ww12K3FicR4VXGojnsVTgsxSqa2TMAJ1CRgXp0pM/AKczAqNEvVBPZ5
jVF579RkxO+FH8H5XIov9NzBrfzoRFqG8FpoJd0feq/YGwz83V/F1JuE75k3vQMC
a3UNsaii3swT8w3ahyfQN3QKLSkRYDr//OxJYFkv5Y7SE3wf7yoUWgWACdBPX8Tn
Hw4RwNWXctN94jfNaoFIUP9Y0M1QwA+9V5X3raD7XpiJ3OiwFQIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFCq4GXyOGt9K0QUEGhkP+orKkyKBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMzFhZTFhOTEtYmYyNy0z
ODgyLWFkNzAtOWZhMDE2NjIxOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvAwQGMnRAAwQE
YH2gAwQGbKeAAwQGbLPAAwMAwLkDBAbA6MADBAfA/oADBAXYrKAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
yDgKrUMmeSeubbzhrhjqNbavWIgNh1/DVwOiZ+RnKO4kmIFFJxKcm5hjzs1iurm4
oHOO73Nk0QEBZLhtCxOkssWIe7EYAHmT3JHTzbN3IluNMa86CUzsOj9NxnjupIld
OJ/yQzgy4TXOiz4naOqa06r9FbXqDb6HEwxloiDz9E69aAHB2Z0TN9dTYU/HQDN5
LWOXRa7Wzm/0FVUnmjFBWX/cLjN2wPS3qQVK979KNQ/oKkX3tfouVRmizwzmLzAe
2//jmLoDXlwhGOTmu+PM707LiVvduuxj44eariX0E8TEya7GtQyKKwT3lfY41PEu
UBr4JlNKieJPHPRstAgT4g==
-----END CERTIFICATE-----
Generated at Fri May 17 22:00:42 2024 by rpki-client on console-ams.rpki-client.org