Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa
File:                     4f491007-6945-3aff-aa86-fb79c499bcc0.roa (raw, json)
Hash identifier:          O1D4cDaBbUVHl9h+8PdPr7Q82Qfod8IbYaqZ0e7+YIE=
Subject key identifier:   B3:7D:58:BF:59:EC:91:97:16:B1:5E:B0:A8:66:16:AC:D7:E0:87:18
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285847E62A1CBDE8DD6242CBE87180
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     26337
IP address blocks:        50.87.0.0/16 maxlen: 24
                          66.147.240.0/20 maxlen: 24
                          67.20.64.0/18 maxlen: 24
                          69.195.64.0/18 maxlen: 24
                          70.40.192.0/19 maxlen: 24
                          74.220.192.0/19 maxlen: 24
                          162.144.0.0/16 maxlen: 24
                          162.214.0.0/15 maxlen: 24
                          162.240.0.0/15 maxlen: 24
                          173.254.0.0/17 maxlen: 24
                          198.57.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:1c:bd:e8:dd:62:42:cb:e8:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0b9a6191-8afc-47a0-a4ff-6e06e441afbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:08:55:93:03:1a:9b:db:5a:02:98:fd:38:
                    0c:19:b5:d4:4c:12:77:ee:f5:2a:cc:ac:bb:86:4b:
                    bb:0c:3b:c3:b5:31:f0:1e:2a:77:4a:c9:0a:12:58:
                    a4:90:c7:cc:ef:3e:af:4d:48:d3:32:98:5d:0f:df:
                    95:97:92:7b:df:62:50:47:ad:20:17:e4:ae:22:03:
                    70:3e:fe:06:e5:56:37:4d:6c:f7:17:25:98:8c:7a:
                    a7:8f:0e:f0:27:76:1a:aa:18:be:b5:b2:66:4e:99:
                    66:a7:7e:d8:05:51:bf:f1:e5:0a:d1:eb:f2:b2:ee:
                    96:f5:dc:e4:61:57:6d:15:6a:fa:f2:7c:00:8a:fc:
                    d7:7b:e3:b9:f7:ce:7d:c0:59:8e:22:df:27:e7:81:
                    c2:22:45:fe:64:46:ea:50:01:4c:84:2b:81:9c:66:
                    26:87:ba:22:a3:7f:7a:df:dd:da:fc:5d:2c:20:a8:
                    80:b1:21:79:26:8a:82:f3:5e:de:bb:8a:fd:ef:c4:
                    36:0e:11:c4:cb:a0:49:10:a3:bd:f8:14:f9:ff:95:
                    da:a5:04:6a:f2:5e:4f:97:78:9b:33:ca:ee:94:ae:
                    ce:a9:43:62:0e:bc:5b:1c:50:da:78:9b:f3:b3:41:
                    03:bc:f7:98:16:ec:02:fc:1a:e5:ce:9c:f2:42:cf:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:58:BF:59:EC:91:97:16:B1:5E:B0:A8:66:16:AC:D7:E0:87:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.0.0/16
                  66.147.240.0/20
                  67.20.64.0/18
                  69.195.64.0/18
                  70.40.192.0/19
                  74.220.192.0/19
                  162.144.0.0/16
                  162.214.0.0/15
                  162.240.0.0/15
                  173.254.0.0/17
                  198.57.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:17:74:a2:52:5c:ae:01:6c:dc:d7:1a:0e:7e:ee:0b:ef:bc:
         0c:0f:6d:22:91:a7:e1:ef:48:9b:c0:a6:44:4e:f4:bb:6f:e8:
         2c:d5:61:63:6e:c8:49:96:81:a1:74:72:e3:54:7e:16:a9:3f:
         34:98:e8:9c:2f:59:14:61:a5:ba:44:e2:49:96:56:3e:2e:91:
         2b:44:1d:3e:9b:ef:ce:82:f7:aa:de:6c:03:f1:9b:4e:61:20:
         1a:78:48:93:c2:3b:4c:3d:2e:c8:93:52:b4:45:06:cf:f0:a3:
         9d:51:be:28:0b:a2:66:36:bd:cf:75:f7:e4:e7:50:62:93:5e:
         fc:bc:71:1b:d5:88:9a:8a:5c:c3:d1:14:84:b7:01:1c:ff:37:
         91:91:8b:71:0d:d7:eb:23:75:a8:bf:83:45:1d:38:26:48:9d:
         c7:4b:75:d9:d3:7e:fc:7f:96:19:bc:cb:88:b9:7a:8a:14:73:
         7d:66:c5:d1:fc:9f:1c:10:a9:f2:a1:8f:4b:0d:d6:c5:95:43:
         c6:5a:58:63:48:8c:57:16:2f:ed:dd:cd:f5:53:6a:8b:8b:fa:
         3b:52:f3:e3:d0:33:20:c2:d5:5a:38:ef:6d:1b:1d:f7:41:5f:
         73:a1:a1:b5:fc:bd:4e:67:d7:fb:7b:60:2d:6a:43:1e:28:b8:
         c5:3d:8c:62
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEfmKhy96N1iQsvocYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MGI5YTYxOTEtOGFmYy00N2EwLWE0ZmYtNmUwNmU0NDFhZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls4IVZMDGpvbWgKY/TgMGbXUTBJ37vUqzKy7
hku7DDvDtTHwHip3SskKElikkMfM7z6vTUjTMphdD9+Vl5J732JQR60gF+SuIgNw
Pv4G5VY3TWz3FyWYjHqnjw7wJ3Yaqhi+tbJmTplmp37YBVG/8eUK0evysu6W9dzk
YVdtFWr68nwAivzXe+O59859wFmOIt8n54HCIkX+ZEbqUAFMhCuBnGYmh7oio396
393a/F0sIKiAsSF5JoqC817eu4r978Q2DhHEy6BJEKO9+BT5/5XapQRq8l5Pl3ib
M8rulK7OqUNiDrxbHFDaeJvzs0EDvPeYFuwC/BrlzpzyQs8+bwIDAQABo4IDjTCC
A4kwHQYDVR0OBBYEFLN9WL9Z7JGXFrFesKhmFqzX4IcYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNGY0OTEwMDctNjk0NS0z
YWZmLWFhODYtZmI3OWM0OTliY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwMAMlcDBARC
k/ADBAZDFEADBAZFw0ADBAVGKMADBAVK3MADAwCikAMDAaLWAwMBovADBAet/gAD
BAfGOYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAgRd0olJcrgFs3NcaDn7uC++8DA9tIpGn4e9Im8CmRE70
u2/oLNVhY27ISZaBoXRy41R+Fqk/NJjonC9ZFGGlukTiSZZWPi6RK0QdPpvvzoL3
qt5sA/GbTmEgGnhIk8I7TD0uyJNStEUGz/CjnVG+KAuiZja9z3X35OdQYpNe/Lxx
G9WImopcw9EUhLcBHP83kZGLcQ3X6yN1qL+DRR04Jkidx0t12dN+/H+WGbzLiLl6
ihRzfWbF0fyfHBCp8qGPSw3WxZVDxlpYY0iMVxYv7d3N9VNqi4v6O1Lz49AzIMLV
WjjvbRsd90Ffc6Ghtfy9TmfX+3tgLWpDHii4xT2MYg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:45 2024 by rpki-client on console-fra.rpki-client.org