Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/93e170ce-dc02-370e-8433-aca15b1b7a71.roa
File:                     93e170ce-dc02-370e-8433-aca15b1b7a71.roa (raw, json)
Hash identifier:          FlG7Sa0a0tsDzVizO5zu3BwV2hxjNVEWJjkC8lGhZ2I=
Subject key identifier:   F5:4E:C1:71:3C:B9:11:16:FD:79:CF:22:88:21:ED:9C:21:82:14:0D
Certificate issuer:       /CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af
Certificate serial:       010D0C9F432858477EC10AB1B303833615237400
Authority key identifier: A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/93e170ce-dc02-370e-8433-aca15b1b7a71.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     393916
IP address blocks:        65.110.32.0/21 maxlen: 32
                          74.119.4.0/22 maxlen: 32
                          162.254.128.0/22 maxlen: 32
                          209.131.232.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0a:b1:b3:03:83:36:15:23:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=ed4edf26-cc1c-435c-94ba-271cf4d8e164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:5c:64:c2:bb:39:98:23:73:23:a0:b9:d8:
                    38:11:c4:17:04:7a:60:6b:52:ec:af:a3:94:27:7f:
                    8a:6c:8d:de:14:7f:65:a4:02:94:21:ab:5e:21:f1:
                    9d:f8:e8:8d:e2:f0:8f:f0:da:5d:87:56:2b:4e:58:
                    0c:2c:32:57:a6:d0:34:42:7e:3b:53:cc:9b:27:57:
                    9f:3d:6c:5e:8e:05:fc:43:11:e7:4f:d6:ce:72:39:
                    9c:b9:49:0f:d4:14:86:b8:b6:f8:94:32:16:bd:c7:
                    e3:db:50:0d:db:65:1a:89:51:ae:e1:ad:52:67:ee:
                    cb:2e:c2:d2:59:0f:9c:1d:56:b0:73:2a:ff:ef:53:
                    eb:5e:b2:47:66:27:03:86:51:10:d1:75:d7:6d:ca:
                    1f:80:7c:cb:4b:cb:ea:88:8a:1f:54:68:12:22:7f:
                    80:58:7b:a6:39:30:49:f6:4a:49:99:27:9e:61:42:
                    fc:ca:e7:ee:d7:24:38:31:1f:41:12:62:4b:2d:a4:
                    98:e0:02:d8:ef:89:5d:ab:49:d5:d7:64:0d:a0:01:
                    a2:0b:61:17:ef:87:2f:af:ba:1a:61:bc:87:59:f9:
                    31:54:b0:6c:92:fa:e6:31:33:8e:7b:a6:40:fc:1c:
                    56:e0:06:18:b4:c1:20:b6:6d:49:72:b0:d3:8b:9d:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:C1:71:3C:B9:11:16:FD:79:CF:22:88:21:ED:9C:21:82:14:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/93e170ce-dc02-370e-8433-aca15b1b7a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.crl

            X509v3 Authority Key Identifier:
                keyid:A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.32.0/21
                  74.119.4.0/22
                  162.254.128.0/22
                  209.131.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:e2:a8:ad:e7:4c:d1:99:4c:19:40:7e:2f:28:3a:60:78:
         58:20:28:2b:35:a1:28:7b:46:e9:a2:6f:18:34:b8:0f:2b:30:
         55:99:f3:e7:ae:58:d0:a5:2c:dd:b6:78:f0:7c:96:3d:c4:ed:
         25:5e:38:84:ac:3f:3e:b2:37:fb:71:d6:c8:d3:0f:11:12:46:
         f4:10:0c:fb:69:09:ca:e0:fe:8f:cc:a0:df:12:48:b3:35:b7:
         b1:42:47:38:7d:ee:39:07:1e:dc:a4:06:c5:85:1c:2c:64:2f:
         10:93:db:d8:e3:84:bf:da:06:6f:5b:b1:72:7a:1a:74:8b:69:
         e4:57:2c:20:0c:55:15:51:03:55:d8:1d:f6:e6:68:28:20:9e:
         c2:dc:ab:9f:9c:40:76:69:a0:49:20:c5:13:c3:c4:d7:60:5f:
         d1:eb:ca:c4:e6:80:1d:57:70:04:dc:5e:55:34:21:1c:fa:be:
         15:03:8e:66:a3:c3:95:7d:ea:80:6e:79:75:e7:6f:6a:e7:d1:
         5e:d5:c5:0c:1e:32:13:7d:92:80:78:c2:8b:a3:b9:2a:a9:f1:
         52:56:72:91:fb:cb:95:ef:83:4c:b1:8a:da:e5:4e:25:3c:b5:
         86:61:b8:7c:2c:da:fb:f2:66:99:77:99:92:0e:6c:b9:98:14:
         5e:27:26:7a
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEd+wQqxswODNhUjdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2FiYjM4YmYtYmQwZi00Mzc0LTk3ZDUtMmI2MjJmYWZk
MGFmMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZWQ0ZWRmMjYtY2MxYy00MzVjLTk0YmEtMjcxY2Y0ZDhlMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBFcZMK7OZgjcyOgudg4EcQXBHpga1Lsr6OU
J3+KbI3eFH9lpAKUIateIfGd+OiN4vCP8Npdh1YrTlgMLDJXptA0Qn47U8ybJ1ef
PWxejgX8QxHnT9bOcjmcuUkP1BSGuLb4lDIWvcfj21AN22UaiVGu4a1SZ+7LLsLS
WQ+cHVawcyr/71PrXrJHZicDhlEQ0XXXbcofgHzLS8vqiIofVGgSIn+AWHumOTBJ
9kpJmSeeYUL8yufu1yQ4MR9BEmJLLaSY4ALY74ldq0nV12QNoAGiC2EX74cvr7oa
YbyHWfkxVLBskvrmMTOOe6ZA/BxW4AYYtMEgtm1JcrDTi50Q0wIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFPVOwXE8uREW/XnPIogh7ZwhghQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWJi
MzhiZi1iZDBmLTQzNzQtOTdkNS0yYjYyMmZhZmQwYWYvOTNlMTcwY2UtZGMwMi0z
NzBlLTg0MzMtYWNhMTViMWI3YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FiYjM4YmYtYmQwZi00Mzc0LTk3
ZDUtMmI2MjJmYWZkMGFmL2NhYmIzOGJmLWJkMGYtNDM3NC05N2Q1LTJiNjIyZmFm
ZDBhZi5jcmwwHwYDVR0jBBgwFoAUpvPH8Su4Z91uwqrQjc0+g3OJeRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWJiMzhiZi1iZDBmLTQzNzQtOTdkNS0yYjYy
MmZhZmQwYWYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDQW4gAwQC
SncEAwQCov6AAwQC0YPoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHYN4qit50zRmUwZQH4vKDpgeFggKCs1
oSh7Rumibxg0uA8rMFWZ8+euWNClLN22ePB8lj3E7SVeOISsPz6yN/tx1sjTDxES
RvQQDPtpCcrg/o/MoN8SSLM1t7FCRzh97jkHHtykBsWFHCxkLxCT29jjhL/aBm9b
sXJ6GnSLaeRXLCAMVRVRA1XYHfbmaCggnsLcq5+cQHZpoEkgxRPDxNdgX9HrysTm
gB1XcATcXlU0IRz6vhUDjmajw5V96oBueXXnb2rn0V7VxQweMhN9koB4woujuSqp
8VJWcpH7y5Xvg0yxitrlTiU8tYZhuHws2vvyZpl3mZIObLmYFF4nJno=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org