Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
File:                     5a30a9fe-c741-3fe7-9896-4f516805f784.roa (raw, json)
Hash identifier:          N62aw0z4iibdPABCVHJPGxmFdDHOJCum6Sj8NpuPdH4=
Subject key identifier:   83:79:F9:F5:EE:E6:DB:2C:A9:A4:55:26:C6:E7:28:D6:D3:B8:74:DF
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F432858479AABE41119FC3B5BAAC42D00
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     1299
IP address blocks:        68.67.64.0/20 maxlen: 24
                          198.205.112.0/20 maxlen: 24
                          199.102.64.0/22 maxlen: 24
                          216.238.144.0/20 maxlen: 24
                          2605:d100::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e4:11:19:fc:3b:5b:aa:c4:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=590f5df0-e668-497d-8d38-70618dc44f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:e1:d4:a3:73:3d:48:69:c7:d8:11:dd:34:
                    8b:29:b2:8d:fd:ae:61:8e:f1:0c:95:2d:0e:80:22:
                    02:d0:da:30:7e:69:8c:d2:7b:25:93:ec:0f:c2:9b:
                    67:f8:e0:ab:8e:02:be:c5:95:28:7c:ba:44:a2:54:
                    e2:f7:4c:86:fe:1a:da:49:f7:6e:d7:35:56:c1:30:
                    ff:ad:03:39:48:a7:7b:cf:29:90:ce:95:98:99:dc:
                    85:1d:19:70:c2:40:63:fb:54:59:f8:1b:43:cb:9e:
                    86:34:2a:7c:a8:63:2b:b4:ac:41:ef:a6:c8:e8:eb:
                    00:d4:12:c3:13:ce:21:6d:e8:c6:44:78:b7:75:e8:
                    32:bb:18:05:0b:79:91:63:3b:90:dd:02:cc:45:3a:
                    25:06:5e:fe:5b:3a:04:d8:9d:6e:6c:8d:75:99:36:
                    b1:e9:e0:35:8d:fc:66:d7:0d:76:af:29:34:8b:b8:
                    6c:05:ff:d1:9a:a7:65:e2:94:a2:1b:e8:1a:6d:85:
                    b9:55:84:ad:89:7d:20:37:64:29:61:db:de:61:83:
                    fc:8b:c4:84:bf:d5:d3:78:ba:88:95:58:ce:7c:59:
                    03:a1:be:7b:34:8e:f3:6c:d8:b1:ac:43:e2:e1:7c:
                    49:af:f1:5a:78:39:18:15:9d:2f:08:ff:cf:c3:25:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:79:F9:F5:EE:E6:DB:2C:A9:A4:55:26:C6:E7:28:D6:D3:B8:74:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.64.0/20
                  198.205.112.0/20
                  199.102.64.0/22
                  216.238.144.0/20
                IPv6:
                  2605:d100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:75:2a:82:57:29:77:42:55:d1:b3:9d:15:4a:4a:f6:df:
         86:33:a2:3d:b4:4b:18:8a:dd:17:b7:f4:e7:d6:69:89:01:e7:
         c7:b6:08:a8:f5:4f:87:11:e1:3e:27:c3:39:e9:1c:26:be:e7:
         65:f0:c6:76:75:b8:3b:86:e2:c7:c8:55:d4:58:a0:58:90:cf:
         8b:8a:e2:64:33:9d:30:bd:45:1d:b9:d8:9a:ea:7f:e7:40:15:
         93:bc:6f:f6:b1:d2:b8:be:79:02:69:d1:ed:b9:d1:af:c8:2a:
         7d:a1:9d:b4:c3:7f:02:2e:40:48:e0:7c:1e:89:92:79:80:cb:
         fe:03:00:dd:c7:80:8a:b3:5a:d0:ad:09:06:35:da:7a:4c:b4:
         bc:f7:bb:a9:14:dd:94:05:8f:7f:e2:54:f9:c0:d9:e2:00:84:
         fa:02:0a:fa:72:ba:51:a6:f7:b9:87:82:f6:04:c2:52:70:00:
         78:e5:8c:e0:c0:4e:f1:04:f0:f2:ce:1f:35:ba:a3:3a:17:b6:
         04:4d:43:b3:28:f8:ca:c1:ab:f3:4c:2e:7c:46:6b:24:d9:c5:
         ea:8c:fb:70:ae:c0:f8:8f:d3:0f:91:a4:66:8f:23:a5:c4:48:
         81:ac:ed:77:9d:37:1f:51:24:dd:c7:b2:01:99:ef:57:4f:26:
         52:19:8a:a2
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEeaq+QRGfw7W6rELQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4
ZWY1MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
NTkwZjVkZjAtZTY2OC00OTdkLThkMzgtNzA2MThkYzQ0Zjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucHh1KNzPUhpx9gR3TSLKbKN/a5hjvEMlS0O
gCIC0NowfmmM0nslk+wPwptn+OCrjgK+xZUofLpEolTi90yG/hraSfdu1zVWwTD/
rQM5SKd7zymQzpWYmdyFHRlwwkBj+1RZ+BtDy56GNCp8qGMrtKxB76bI6OsA1BLD
E84hbejGRHi3degyuxgFC3mRYzuQ3QLMRTolBl7+WzoE2J1ubI11mTax6eA1jfxm
1w12ryk0i7hsBf/Rmqdl4pSiG+gabYW5VYStiX0gN2QpYdveYYP8i8SEv9XTeLqI
lVjOfFkDob57NI7zbNixrEPi4XxJr/FaeDkYFZ0vCP/PwyVQGQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFIN5+fXu5tssqaRVJsbnKNbTuHTfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0
Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNWEzMGE5ZmUtYzc0MS0z
ZmU3LTk4OTYtNGY1MTY4MDVmNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3
MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz
OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj
MzQzMzhlZjUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQERENAAwQE
xs1wAwQCx2ZAAwQE2O6QMA0EAgACMAcDBQAmBdEAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKljdSqCVyl3
QlXRs50VSkr234Yzoj20SxiK3Re39OfWaYkB58e2CKj1T4cR4T4nwznpHCa+52Xw
xnZ1uDuG4sfIVdRYoFiQz4uK4mQznTC9RR252Jrqf+dAFZO8b/ax0ri+eQJp0e25
0a/IKn2hnbTDfwIuQEjgfB6JknmAy/4DAN3HgIqzWtCtCQY12npMtLz3u6kU3ZQF
j3/iVPnA2eIAhPoCCvpyulGm97mHgvYEwlJwAHjljODATvEE8PLOHzW6ozoXtgRN
Q7Mo+MrBq/NMLnxGayTZxeqM+3CuwPiP0w+RpGaPI6XESIGs7XedNx9RJN3HsgGZ
71dPJlIZiqI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:29 2024 by rpki-client on console-fra.rpki-client.org