Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa
File:                     de598f48-d731-346b-a43b-97507f63c750.roa (raw, json)
Hash identifier:          F0QKEJx5F3t0RsP9W17T4B4DgSVr8a9fWLexpsc/LI8=
Subject key identifier:   E5:31:22:7C:BE:88:A8:F9:72:F0:23:AD:05:0F:5F:79:40:A8:72:99
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F432858455E5DA1DC64D0AD0FD790B600
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     7029
IP address blocks:        64.79.250.0/23 maxlen: 23
                          64.79.252.0/22 maxlen: 22
                          64.79.227.0/24 maxlen: 24
                          64.79.229.0/24 maxlen: 24
                          64.79.236.0/22 maxlen: 22
                          64.79.240.0/23 maxlen: 23
                          64.79.244.0/22 maxlen: 22
                          64.79.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a1:dc:64:d0:ad:0f:d7:90:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=14fe8f0f-5e6f-488d-816a-412ac43d909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:c2:b1:f4:d3:1d:98:00:dd:ee:3b:f4:64:
                    7c:7c:65:65:1b:7b:29:28:99:b1:9e:bd:5b:d7:7a:
                    8a:ba:0b:94:de:82:d7:be:c4:ce:6b:5f:23:af:c8:
                    d9:0e:43:ce:0d:5c:43:ae:db:ca:38:e5:cc:19:94:
                    c7:31:21:96:a5:31:ba:99:1d:f0:96:59:2e:0b:e5:
                    cb:66:83:ee:63:7d:ef:75:b0:4c:6c:2e:31:64:54:
                    ca:95:cd:e4:8f:58:56:c4:64:a1:50:ef:c8:7b:0e:
                    3c:e0:a1:15:e4:9d:26:0b:58:05:00:a7:44:94:2f:
                    a6:54:96:22:25:e7:ef:1d:b4:87:a7:60:58:88:b6:
                    95:f0:da:41:70:fc:55:8f:9b:ae:61:da:1a:45:4e:
                    c8:ad:30:f8:4c:24:05:d1:e5:b3:29:5a:32:b2:b3:
                    32:81:a5:50:5f:65:68:20:a4:eb:e4:10:5e:3c:32:
                    8c:6b:0f:e2:e9:65:70:07:cf:52:b1:10:d3:ef:48:
                    63:50:51:35:de:0e:3c:e0:81:7d:a6:d1:cf:dd:67:
                    17:4a:f9:45:cb:77:ac:aa:8a:67:37:4e:0d:c5:cd:
                    e1:73:ae:35:7f:61:9a:19:29:b0:4d:2d:51:94:1a:
                    59:ba:8e:83:41:1c:87:ff:1b:11:87:e8:15:ee:4a:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:31:22:7C:BE:88:A8:F9:72:F0:23:AD:05:0F:5F:79:40:A8:72:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.227.0/24
                  64.79.229.0/24
                  64.79.236.0-64.79.241.255
                  64.79.244.0/22
                  64.79.249.0-64.79.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:ec:90:9f:fc:86:e0:e2:c6:3a:74:cd:23:61:ff:89:2d:
         0b:6d:a5:a2:07:5d:4b:ac:9e:78:32:43:94:fe:42:6f:7e:ff:
         59:99:f1:0b:d0:10:6e:a0:07:65:da:47:ff:b2:18:96:c7:17:
         0b:d2:5b:79:0b:11:12:64:5c:6d:8e:de:7f:0c:93:cf:80:ae:
         fc:5c:00:35:aa:9d:7d:2d:bb:52:39:60:40:99:6d:e0:ca:d0:
         c2:23:70:aa:ad:9a:80:e3:b8:0a:a7:b8:29:41:7d:0d:5b:36:
         3a:df:fe:b3:da:60:73:85:a5:8c:b2:ef:f4:04:1c:08:72:df:
         9f:41:6a:b3:37:fe:7c:f7:b5:8b:e9:13:ed:a0:cd:76:a9:cb:
         8a:2b:be:d6:3b:64:46:69:0f:a9:cd:9b:e8:70:c8:88:06:7c:
         26:61:87:45:2c:86:3c:5c:92:6e:4e:d9:00:17:3c:cb:16:21:
         b1:98:a6:39:28:ea:82:5d:b3:27:9d:6f:cc:d2:33:d3:2b:5a:
         57:c3:92:e2:6e:d9:5c:70:e9:0c:ab:08:38:ab:d6:02:46:2f:
         5f:4f:7f:21:43:06:cc:fc:48:2f:ed:8f:a7:70:5f:6b:56:02:
         c3:45:88:79:75:db:8e:94:53:e0:44:ac:06:1b:0a:f7:9d:6d:
         c1:4b:87:0a
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEVeXaHcZNCtD9eQtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk
MTRmZThmMGYtNWU2Zi00ODhkLTgxNmEtNDEyYWM0M2Q5MDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXHCsfTTHZgA3e479GR8fGVlG3spKJmxnr1b
13qKuguU3oLXvsTOa18jr8jZDkPODVxDrtvKOOXMGZTHMSGWpTG6mR3wllkuC+XL
ZoPuY33vdbBMbC4xZFTKlc3kj1hWxGShUO/Iew484KEV5J0mC1gFAKdElC+mVJYi
JefvHbSHp2BYiLaV8NpBcPxVj5uuYdoaRU7IrTD4TCQF0eWzKVoysrMygaVQX2Vo
IKTr5BBePDKMaw/i6WVwB89SsRDT70hjUFE13g484IF9ptHP3WcXSvlFy3esqopn
N04Nxc3hc641f2GaGSmwTS1RlBpZuo6DQRyH/xsRh+gV7koJcQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFOUxIny+iKj5cvAjrQUPX3lAqHKZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvZGU1OThmNDgtZDczMS0z
NDZiLWE0M2ItOTc1MDdmNjNjNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAATAtAwQAQE/jAwQA
QE/lMAwDBAJAT+wDBAFAT/ADBAJAT/QwCwMEAEBP+QMDBEBAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKrA
7JCf/Ibg4sY6dM0jYf+JLQttpaIHXUusnngyQ5T+Qm9+/1mZ8QvQEG6gB2XaR/+y
GJbHFwvSW3kLERJkXG2O3n8Mk8+ArvxcADWqnX0tu1I5YECZbeDK0MIjcKqtmoDj
uAqnuClBfQ1bNjrf/rPaYHOFpYyy7/QEHAhy359BarM3/nz3tYvpE+2gzXapy4or
vtY7ZEZpD6nNm+hwyIgGfCZhh0Ushjxckm5O2QAXPMsWIbGYpjko6oJdsyedb8zS
M9MrWlfDkuJu2Vxw6QyrCDir1gJGL19PfyFDBsz8SC/tj6dwX2tWAsNFiHl1246U
U+BErAYbCvedbcFLhwo=
-----END CERTIFICATE-----
Generated at Sat May 4 05:43:10 2024 by rpki-client on console-ams.rpki-client.org