Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa
File:                     e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa (raw, json)
Hash identifier:          wBGNblXHXazreopTT0hp/+DEAc9PzNcZmhx/I7/OzyY=
Subject key identifier:   13:FA:8C:3B:1A:8C:86:F0:C7:7C:CB:E4:2B:77:B5:7C:16:A1:D5:68
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C530A84FEB0270CAAEC6C40
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     4181
IP address blocks:        24.56.180.0/23 maxlen: 24
                          24.56.188.0/23 maxlen: 24
                          24.54.160.0/22 maxlen: 24
                          24.54.164.0/23 maxlen: 24
                          24.56.176.0/22 maxlen: 24
                          24.54.184.0/21 maxlen: 24
                          209.169.202.0/23 maxlen: 24
                          24.56.160.0/22 maxlen: 24
                          209.169.196.0/23 maxlen: 24
                          24.56.170.0/23 maxlen: 24
                          209.169.220.0/22 maxlen: 24
                          209.169.216.0/23 maxlen: 24
                          209.169.204.0/22 maxlen: 24
                          64.17.72.0/23 maxlen: 24
                          24.52.32.0/22 maxlen: 24
                          24.52.20.0/22 maxlen: 24
                          24.236.52.0/22 maxlen: 24
                          50.21.192.0/20 maxlen: 24
                          24.52.0.0/21 maxlen: 24
                          64.17.68.0/22 maxlen: 24
                          24.52.8.0/22 maxlen: 24
                          24.52.18.0/23 maxlen: 24
                          24.40.80.0/20 maxlen: 24
                          24.54.148.0/23 maxlen: 24
                          24.49.96.0/20 maxlen: 24
                          24.49.128.0/20 maxlen: 24
                          67.217.16.0/23 maxlen: 24
                          24.54.168.0/22 maxlen: 24
                          67.217.8.0/21 maxlen: 24
                          24.54.128.0/20 maxlen: 24
                          74.211.64.0/19 maxlen: 24
                          24.49.160.0/20 maxlen: 24
                          24.54.144.0/22 maxlen: 24
                          74.211.0.0/18 maxlen: 24
                          64.17.80.0/20 maxlen: 24
                          208.117.112.0/20 maxlen: 24
                          24.54.180.0/22 maxlen: 24
                          64.17.76.0/22 maxlen: 24
                          24.75.192.0/21 maxlen: 24
                          24.236.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0a:84:fe:b0:27:0c:aa:ec:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=17dc1af8-7b0e-478d-acb3-7e8d6e51a2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:bc:d1:37:73:79:3f:d6:0c:3e:bf:3f:e4:58:
                    b8:20:a5:b5:eb:95:de:a0:ec:be:f5:b7:b9:60:5e:
                    f2:61:80:33:49:9e:8e:0a:a2:39:ff:05:8d:34:10:
                    c0:cb:3f:3f:13:0d:aa:5c:e0:d2:59:32:ba:20:fb:
                    f6:eb:d4:ce:8a:4e:d4:4c:32:b2:a4:ae:a9:7b:d0:
                    3a:e8:8d:33:b7:33:35:c1:1e:18:18:1a:b4:9f:be:
                    11:27:5c:3c:95:7f:8a:38:fc:12:87:36:7e:0d:14:
                    0b:1e:78:44:39:5c:54:c6:aa:9e:6d:c1:b2:e9:ec:
                    93:d8:0b:46:c5:6a:23:5a:2b:f6:cc:0d:6e:e4:9e:
                    2a:33:14:2b:56:36:03:c5:f7:ae:3c:f0:ad:f4:3e:
                    49:2c:9a:b5:ab:c8:d8:8d:bd:f8:03:d8:b9:c3:d5:
                    1b:b2:82:86:bf:f6:8a:93:23:87:bf:cd:06:60:b0:
                    c8:3f:10:99:23:14:f8:ea:5b:85:68:6b:39:a9:78:
                    ad:34:86:08:d8:e8:f1:94:07:07:2b:77:11:d8:59:
                    d7:7b:48:a1:3f:6d:78:ce:24:b9:eb:8c:55:7d:42:
                    06:5a:3f:28:3d:11:f5:c3:5d:cb:d5:7b:b3:e8:06:
                    fe:c0:47:50:8a:7c:05:9f:1c:42:95:6d:a7:ef:d4:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:8C:3B:1A:8C:86:F0:C7:7C:CB:E4:2B:77:B5:7C:16:A1:D5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.80.0/20
                  24.49.96.0/20
                  24.49.128.0/20
                  24.49.160.0/20
                  24.52.0.0-24.52.11.255
                  24.52.18.0-24.52.23.255
                  24.52.32.0/22
                  24.54.128.0-24.54.149.255
                  24.54.160.0-24.54.165.255
                  24.54.168.0/22
                  24.54.180.0-24.54.191.255
                  24.56.160.0/22
                  24.56.170.0/23
                  24.56.176.0-24.56.181.255
                  24.56.188.0/23
                  24.75.192.0/21
                  24.236.32.0/21
                  24.236.52.0/22
                  50.21.192.0/20
                  64.17.68.0-64.17.73.255
                  64.17.76.0-64.17.95.255
                  67.217.8.0-67.217.17.255
                  74.211.0.0-74.211.95.255
                  208.117.112.0/20
                  209.169.196.0/23
                  209.169.202.0-209.169.207.255
                  209.169.216.0/23
                  209.169.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:33:2c:b7:18:b6:94:32:7c:7a:85:20:21:26:67:6f:41:50:
         56:53:cd:3c:5e:8c:c8:5d:c4:40:5b:2e:c1:07:00:36:a3:9f:
         e5:99:8b:99:56:ac:fc:45:6b:37:96:09:6e:c6:a2:3d:16:36:
         f7:93:97:d6:75:70:4b:15:14:77:64:4a:b6:8f:0c:a9:bb:e0:
         d1:55:0d:9e:4d:a8:b8:cf:30:15:2d:c7:29:0a:ca:74:c3:56:
         95:20:87:9e:5f:5e:2e:40:3e:69:51:b6:25:9e:30:73:08:79:
         1f:29:19:58:be:88:e9:5f:5d:a4:00:43:73:03:ce:ba:d5:da:
         ab:fd:72:5b:9a:a3:c6:e1:32:4f:27:5c:76:cc:b2:d7:a0:b4:
         e9:eb:ff:f8:df:99:be:9c:27:7b:fc:74:32:80:a7:c7:28:d3:
         28:7a:58:71:6b:ed:78:58:4e:24:45:07:db:bd:b4:c1:4d:f6:
         eb:46:ce:35:ee:e0:ef:94:ed:8c:24:dd:51:bb:30:83:27:ce:
         9d:a3:4d:b6:44:69:51:d5:2f:e2:c2:43:1f:ae:dc:61:27:2d:
         62:50:25:24:2a:b5:9c:8d:41:7b:73:17:24:2e:e5:5b:a7:ea:
         92:42:25:26:41:59:f7:10:d2:71:ec:48:ca:ad:94:d8:db:21:
         06:64:f5:f9
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEVsUwqE/rAnDKrsbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
MTdkYzFhZjgtN2IwZS00NzhkLWFjYjMtN2U4ZDZlNTFhMmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bzRN3N5P9YMPr8/5Fi4IKW165XeoOy+9be5
YF7yYYAzSZ6OCqI5/wWNNBDAyz8/Ew2qXODSWTK6IPv269TOik7UTDKypK6pe9A6
6I0ztzM1wR4YGBq0n74RJ1w8lX+KOPwShzZ+DRQLHnhEOVxUxqqebcGy6eyT2AtG
xWojWiv2zA1u5J4qMxQrVjYDxfeuPPCt9D5JLJq1q8jYjb34A9i5w9UbsoKGv/aK
kyOHv80GYLDIPxCZIxT46luFaGs5qXitNIYI2OjxlAcHK3cR2FnXe0ihP214ziS5
64xVfUIGWj8oPRH1w13L1Xuz6Ab+wEdQinwFnxxClW2n79Se9wIDAQABo4IEVjCC
BFIwHQYDVR0OBBYEFBP6jDsajIbwx3zL5Ct3tXwWodVoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvZTA0YjkxYjctYTI1NC0z
ZjAxLTlkNDktNGE2Y2Q2MDBhZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMIIBHgYIKwYBBQUHAQcBAf8EggENMIIBCTCCAQUEAgABMIH+
AwQEGChQAwQEGDFgAwQEGDGAAwQEGDGgMAsDAwIYNAMEAhg0CDAMAwQBGDQSAwQD
GDQQAwQCGDQgMAwDBAcYNoADBAEYNpQwDAMEBRg2oAMEARg2pAMEAhg2qDAMAwQC
GDa0AwQGGDaAAwQCGDigAwQBGDiqMAwDBAQYOLADBAEYOLQDBAEYOLwDBAMYS8AD
BAMY7CADBAIY7DQDBAQyFcAwDAMEAkARRAMEAUARSDAMAwQCQBFMAwQFQBFAMAwD
BAND2QgDBAFD2RAwCwMDAErTAwQFStNAAwQE0HVwAwQB0anEMAwDBAHRqcoDBATR
qcADBAHRqdgDBALRqdwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABzMstxi2lDJ8eoUgISZnb0FQVlPNPF6M
yF3EQFsuwQcANqOf5ZmLmVas/EVrN5YJbsaiPRY295OX1nVwSxUUd2RKto8Mqbvg
0VUNnk2ouM8wFS3HKQrKdMNWlSCHnl9eLkA+aVG2JZ4wcwh5HykZWL6I6V9dpABD
cwPOutXaq/1yW5qjxuEyTydcdsyy16C06ev/+N+Zvpwne/x0MoCnxyjTKHpYcWvt
eFhOJEUH2720wU3260bONe7g75TtjCTdUbswgyfOnaNNtkRpUdUv4sJDH67cYSct
YlAlJCq1nI1Be3MXJC7lW6fqkkIlJkFZ9xDScexIyq2U2NshBmT1+Q==
-----END CERTIFICATE-----
Generated at Sat May 11 02:50:38 2024 by rpki-client on console-ams.rpki-client.org