Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
File:                     3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa (raw, json)
Hash identifier:          uAc0q3yr/taYMVC37D8SdqkXkYvAkG9GIVjtr2j6Ol8=
Subject key identifier:   C2:01:AF:0F:5F:7A:CD:0C:97:C8:49:F7:74:27:45:21:CD:62:0D:9D
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285844F035525A4D31A3F42F6CD800
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        207.246.64.0/18 maxlen: 32
                          207.148.0.0/19 maxlen: 32
                          216.155.128.0/19 maxlen: 32
                          209.222.0.0/19 maxlen: 32
                          208.167.224.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:52:5a:4d:31:a3:f4:2f:6c:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=79111458-0dd5-45ac-9742-8c9f4e491771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:37:e7:26:5c:26:0c:85:45:64:19:1d:f7:
                    b9:e7:5f:3b:14:95:e3:f0:8b:05:30:ba:eb:42:44:
                    06:2d:79:08:f5:f3:a8:c4:f7:97:cb:18:65:c9:8f:
                    92:77:03:d8:5e:6a:7f:77:62:d4:8c:f3:8f:f4:87:
                    40:e5:01:53:61:11:a6:34:8e:b9:cb:2b:6a:c6:62:
                    75:dc:53:17:33:df:78:68:2b:45:d9:c3:22:92:f5:
                    ae:18:ec:68:71:e3:6a:17:de:94:0f:58:36:7a:08:
                    73:2d:4a:ba:85:7d:01:c1:75:07:60:b4:b2:51:b3:
                    d2:f6:4f:a8:d6:2d:78:a3:b7:d9:32:d0:db:e2:48:
                    51:38:60:d9:a6:74:07:e8:ef:0c:7c:04:8e:3b:bd:
                    43:bf:24:3a:59:43:4d:fa:2a:a5:ea:c5:89:be:23:
                    b9:cd:68:17:12:d2:35:a2:63:cd:5e:3d:ad:84:88:
                    b1:b6:56:43:17:d2:7f:c5:28:57:d6:21:71:a0:58:
                    81:b5:cb:c4:bd:22:bc:c8:b4:d4:d3:67:b0:d5:d6:
                    bd:12:a8:24:86:0f:10:03:0e:0a:27:6e:ea:4f:d3:
                    a7:4c:aa:a8:30:60:59:e7:93:b8:eb:2d:13:c2:a8:
                    b2:40:6e:d0:7c:62:73:60:30:7d:e1:e6:33:f5:b3:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:AF:0F:5F:7A:CD:0C:97:C8:49:F7:74:27:45:21:CD:62:0D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.148.0.0/19
                  207.246.64.0/18
                  208.167.224.0/19
                  209.222.0.0/19
                  216.155.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:59:84:a3:f4:8c:b0:a1:dd:2e:2d:ef:ad:97:99:35:a3:
         b3:b1:ff:2b:15:d4:bc:ab:b3:4f:4b:e0:fe:d6:f6:70:b6:14:
         82:ff:11:17:0d:76:c2:e3:d7:bd:98:98:61:2f:6f:9e:2a:7e:
         be:9e:08:e8:9e:55:63:f8:c4:e2:55:e2:e7:28:1f:5e:c1:62:
         8e:93:63:eb:4c:a7:1c:d7:37:e1:cf:bb:6f:71:8c:b4:cc:89:
         cb:ab:15:a8:fd:de:2c:38:9d:ad:9b:8d:35:97:0b:6d:4d:08:
         c6:2d:53:4c:91:1e:b7:49:92:53:86:c2:fb:b4:87:1e:3f:51:
         4d:12:05:69:37:a1:79:c6:11:cc:76:56:bb:3d:41:77:b5:15:
         2d:c6:f3:82:0e:0f:d4:c4:68:6a:1c:52:db:3a:c8:e9:e7:6c:
         68:bc:3b:71:0c:87:13:47:56:1b:b3:65:a4:5e:04:53:db:4e:
         73:13:e0:39:9c:53:30:8a:92:17:f9:32:36:77:4e:e2:42:5f:
         15:5b:76:0d:e4:e2:5f:2c:16:89:de:38:52:f4:2e:b8:45:f0:
         69:9e:5c:89:b9:f9:a6:ef:45:80:cb:82:00:4f:83:8a:7e:ac:
         82:2e:47:17:31:d2:8d:ce:19:07:a4:98:eb:32:27:f5:45:02:
         86:53:89:18
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWETwNVJaTTGj9C9s2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI0MDIxOTAyMDAyNVoXDTI0MDUxOTAxMDAyNVowLzEtMCsGA1UEAxMk
NzkxMTE0NTgtMGRkNS00NWFjLTk3NDItOGM5ZjRlNDkxNzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJE35yZcJgyFRWQZHfe55187FJXj8IsFMLrr
QkQGLXkI9fOoxPeXyxhlyY+SdwPYXmp/d2LUjPOP9IdA5QFTYRGmNI65yytqxmJ1
3FMXM994aCtF2cMikvWuGOxoceNqF96UD1g2eghzLUq6hX0BwXUHYLSyUbPS9k+o
1i14o7fZMtDb4khROGDZpnQH6O8MfASOO71DvyQ6WUNN+iql6sWJviO5zWgXEtI1
omPNXj2thIixtlZDF9J/xShX1iFxoFiBtcvEvSK8yLTU02ew1da9Eqgkhg8QAw4K
J27qT9OnTKqoMGBZ55O46y0TwqiyQG7QfGJzYDB94eYz9bO4ZQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFMIBrw9fes0Ml8hJ93QnRSHNYg2dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvM2ZjNDlkOGEtZmViOS0z
NWEwLThiYjUtYTc2NTVlODBkMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFz5QAAwQG
z/ZAAwQF0KfgAwQF0d4AAwQF2JuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGVuWYSj9Iywod0uLe+tl5k1
o7Ox/ysV1Lyrs09L4P7W9nC2FIL/ERcNdsLj172YmGEvb54qfr6eCOieVWP4xOJV
4ucoH17BYo6TY+tMpxzXN+HPu29xjLTMicurFaj93iw4na2bjTWXC21NCMYtU0yR
HrdJklOGwvu0hx4/UU0SBWk3oXnGEcx2Vrs9QXe1FS3G84IOD9TEaGocUts6yOnn
bGi8O3EMhxNHVhuzZaReBFPbTnMT4DmcUzCKkhf5MjZ3TuJCXxVbdg3k4l8sFone
OFL0LrhF8GmeXIm5+abvRYDLggBPg4p+rIIuRxcx0o3OGQekmOsyJ/VFAoZTiRg=
-----END CERTIFICATE-----
Generated at Mon May 6 11:58:33 2024 by rpki-client on console-fra.rpki-client.org