Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
File:                     68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa (raw, json)
Hash identifier:          VyYI75EW0wylO3Fhb92BEdQb87KfYblKuJ5UK8AMjb0=
Subject key identifier:   4C:EA:42:58:B6:29:9A:3F:96:7B:12:0B:1B:83:FB:94:E2:8F:31:03
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285847CE6F3560E54FFFB5AF71BD00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     46606
IP address blocks:        50.87.16.0/21 maxlen: 21
                          50.87.136.0/21 maxlen: 21
                          50.87.144.0/21 maxlen: 21
                          50.87.168.0/21 maxlen: 21
                          50.87.176.0/21 maxlen: 21
                          50.87.184.0/21 maxlen: 21
                          50.87.192.0/21 maxlen: 21
                          50.87.216.0/21 maxlen: 21
                          50.87.224.0/21 maxlen: 21
                          50.87.232.0/21 maxlen: 21
                          50.87.248.0/24 maxlen: 24
                          50.87.249.0/24 maxlen: 24
                          50.87.253.0/24 maxlen: 24
                          66.147.240.0/22 maxlen: 22
                          66.147.242.0/24 maxlen: 24
                          66.147.244.0/22 maxlen: 22
                          67.20.64.0/22 maxlen: 22
                          67.20.72.0/22 maxlen: 22
                          67.20.80.0/22 maxlen: 22
                          67.20.88.0/22 maxlen: 22
                          67.20.92.0/22 maxlen: 22
                          67.20.104.0/21 maxlen: 21
                          67.20.120.0/22 maxlen: 22
                          67.20.124.0/23 maxlen: 23
                          67.222.36.0/22 maxlen: 22
                          67.222.40.0/22 maxlen: 22
                          67.222.44.0/22 maxlen: 22
                          67.222.52.0/22 maxlen: 22
                          67.222.60.0/23 maxlen: 23
                          69.89.16.0/20 maxlen: 20
                          69.195.68.0/22 maxlen: 22
                          69.195.72.0/21 maxlen: 21
                          69.195.88.0/21 maxlen: 21
                          69.195.104.0/21 maxlen: 21
                          69.195.120.0/22 maxlen: 22
                          69.195.124.0/24 maxlen: 24
                          70.40.194.0/23 maxlen: 23
                          70.40.196.0/22 maxlen: 22
                          70.40.200.0/21 maxlen: 21
                          70.40.216.0/21 maxlen: 21
                          74.220.192.0/23 maxlen: 23
                          74.220.194.0/24 maxlen: 24
                          74.220.208.0/22 maxlen: 22
                          74.220.212.0/23 maxlen: 23
                          74.220.216.0/22 maxlen: 22
                          162.144.0.0/22 maxlen: 22
                          162.144.4.0/22 maxlen: 22
                          162.144.12.0/22 maxlen: 22
                          162.144.184.0/22 maxlen: 22
                          173.254.0.0/22 maxlen: 22
                          173.254.8.0/21 maxlen: 21
                          173.254.16.0/21 maxlen: 21
                          173.254.32.0/21 maxlen: 21
                          173.254.64.0/21 maxlen: 21
                          173.254.88.0/21 maxlen: 21
                          173.254.104.0/21 maxlen: 21
                          198.57.148.0/22 maxlen: 22
                          198.57.240.0/22 maxlen: 22
                          198.57.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:35:60:e5:4f:ff:b5:af:71:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=e3a41d08-bf9d-4aed-86a0-f42dd4119cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:eb:0c:f9:a8:a9:5d:a5:e8:a8:3a:33:f0:
                    51:f5:03:b2:db:91:f2:0c:b3:1a:b0:e8:bd:7b:fd:
                    9a:08:22:bb:d3:82:d5:15:8a:ad:3d:31:fd:4c:76:
                    a3:c6:e2:65:65:fe:56:f5:ad:b4:36:28:3e:02:a6:
                    00:ed:a2:f8:97:fa:5c:84:68:25:c4:63:81:36:39:
                    bc:1b:b5:66:c9:82:36:55:a2:b4:81:01:f4:8f:ce:
                    9a:68:e9:46:24:95:d9:64:cf:aa:eb:50:54:83:65:
                    76:89:3d:aa:3f:13:b9:fb:eb:a1:18:0b:18:b3:d5:
                    5e:fd:15:f1:65:7a:08:d4:fb:16:f3:5b:c7:79:5a:
                    00:79:67:3d:88:b5:58:14:68:33:ac:ee:24:1a:1d:
                    5d:27:d8:53:bb:98:8f:ec:6c:ce:2c:97:5f:f8:c2:
                    70:26:bc:a2:c7:c2:49:65:35:a8:b7:d9:d4:da:e4:
                    d3:38:a5:12:8a:05:16:94:5d:54:6c:8e:43:da:d1:
                    22:9f:71:41:c5:8e:92:c0:51:8c:93:1a:53:fa:12:
                    41:ef:01:81:3d:ac:21:d1:d3:d6:19:0c:92:09:a1:
                    42:8b:8a:b8:59:ab:be:c5:5e:f5:92:34:d8:c9:f2:
                    14:6e:84:bd:ea:03:6e:6a:fc:73:2b:ea:99:3f:8f:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:42:58:B6:29:9A:3F:96:7B:12:0B:1B:83:FB:94:E2:8F:31:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.16.0/21
                  50.87.136.0-50.87.151.255
                  50.87.168.0-50.87.199.255
                  50.87.216.0-50.87.239.255
                  50.87.248.0/23
                  50.87.253.0/24
                  66.147.240.0/21
                  67.20.64.0/22
                  67.20.72.0/22
                  67.20.80.0/22
                  67.20.88.0/21
                  67.20.104.0/21
                  67.20.120.0-67.20.125.255
                  67.222.36.0-67.222.47.255
                  67.222.52.0/22
                  67.222.60.0/23
                  69.89.16.0/20
                  69.195.68.0-69.195.79.255
                  69.195.88.0/21
                  69.195.104.0/21
                  69.195.120.0-69.195.124.255
                  70.40.194.0-70.40.207.255
                  70.40.216.0/21
                  74.220.192.0-74.220.194.255
                  74.220.208.0-74.220.213.255
                  74.220.216.0/22
                  162.144.0.0/21
                  162.144.12.0/22
                  162.144.184.0/22
                  173.254.0.0/22
                  173.254.8.0-173.254.23.255
                  173.254.32.0/21
                  173.254.64.0/21
                  173.254.88.0/21
                  173.254.104.0/21
                  198.57.148.0/22
                  198.57.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:08:d7:1e:0e:2e:20:56:55:00:ad:d1:a8:f0:da:ba:fc:
         63:d9:8a:21:8a:db:8c:d1:4e:64:ba:07:4a:9a:fc:0c:6e:de:
         fc:af:4b:05:5a:6d:e8:06:0b:7a:26:dd:be:7f:63:a3:36:3d:
         a0:61:b8:50:b9:bf:d2:8b:2b:d4:24:ad:40:c7:a9:d5:a5:94:
         e9:d6:4d:a1:66:f9:34:7e:ec:d9:93:77:18:04:de:05:d7:24:
         fe:a2:43:2e:12:ff:25:e7:bc:e9:41:54:3b:4a:f2:02:b1:8f:
         70:d9:68:32:74:73:0a:91:90:b0:42:f7:03:d2:f3:14:38:8c:
         21:8a:1a:90:b2:a5:8d:cd:60:5f:09:ac:b9:2e:51:0b:8b:dc:
         f9:de:e4:c8:7e:0d:1a:2a:3e:be:bc:a3:44:7f:5e:66:ea:c9:
         86:ab:c0:82:fe:e2:cc:e8:53:d3:d7:a3:d9:5e:d7:d2:0b:47:
         bb:3a:21:4d:e5:9f:de:5e:52:df:32:7e:3d:2e:bf:71:89:3a:
         74:6a:d1:01:5f:b8:48:b4:39:cf:60:33:e3:86:32:9d:5a:8f:
         79:de:c6:8a:0c:fe:19:bc:56:25:ee:a1:4e:ca:50:b2:9c:e9:
         58:f3:cd:5d:23:da:b9:1f:c0:64:4b:77:e9:3d:84:3e:ab:26:
         1f:f2:8a:5f
-----BEGIN CERTIFICATE-----
MIIHfTCCBmWgAwIBAgIUAQ0Mn0MoWEfObzVg5U//ta9xvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
ZTNhNDFkMDgtYmY5ZC00YWVkLTg2YTAtZjQyZGQ0MTE5Y2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFnrDPmoqV2l6Kg6M/BR9QOy25HyDLMasOi9
e/2aCCK704LVFYqtPTH9THajxuJlZf5W9a20Nig+AqYA7aL4l/pchGglxGOBNjm8
G7VmyYI2VaK0gQH0j86aaOlGJJXZZM+q61BUg2V2iT2qPxO5++uhGAsYs9Ve/RXx
ZXoI1PsW81vHeVoAeWc9iLVYFGgzrO4kGh1dJ9hTu5iP7GzOLJdf+MJwJryix8JJ
ZTWot9nU2uTTOKUSigUWlF1UbI5D2tEin3FBxY6SwFGMkxpT+hJB7wGBPawh0dPW
GQySCaFCi4q4Wau+xV71kjTYyfIUboS96gNuavxzK+qZP4/7VQIDAQABo4IEjzCC
BIswHQYDVR0OBBYEFEzqQli2KZo/lnsSCxuD+5TijzEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNjhkMTZkMDQtN2I1OC0z
YmVmLWE1YTctMDEyNWE3ZWZjZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCAT4EAgABMIIB
NgMEAzJXEDAMAwQDMleIAwQDMleQMAwDBAMyV6gDBAMyV8AwDAMEAzJX2AMEBDJX
4AMEATJX+AMEADJX/QMEA0KT8AMEAkMUQAMEAkMUSAMEAkMUUAMEA0MUWAMEA0MU
aDAMAwQDQxR4AwQBQxR8MAwDBAJD3iQDBARD3iADBAJD3jQDBAFD3jwDBARFWRAw
DAMEAkXDRAMEBEXDQAMEA0XDWAMEA0XDaDAMAwQDRcN4AwQARcN8MAwDBAFGKMID
BARGKMADBANGKNgwDAMEBkrcwAMEAErcwjAMAwQEStzQAwQBStzUAwQCStzYAwQD
opAAAwQCopAMAwQCopC4AwQCrf4AMAwDBAOt/ggDBAOt/hADBAOt/iADBAOt/kAD
BAOt/lgDBAOt/mgDBALGOZQDBAPGOfAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApQcI1x4OLiBWVQCt0ajw
2rr8Y9mKIYrbjNFOZLoHSpr8DG7e/K9LBVpt6AYLeibdvn9jozY9oGG4ULm/0osr
1CStQMep1aWU6dZNoWb5NH7s2ZN3GATeBdck/qJDLhL/Jee86UFUO0ryArGPcNlo
MnRzCpGQsEL3A9LzFDiMIYoakLKljc1gXwmsuS5RC4vc+d7kyH4NGio+vryjRH9e
ZurJhqvAgv7izOhT09ej2V7X0gtHuzohTeWf3l5S3zJ+PS6/cYk6dGrRAV+4SLQ5
z2Az44YynVqPed7Gigz+GbxWJe6hTspQspzpWPPNXSPauR/AZEt36T2EPqsmH/KK
Xw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:39 2024 by rpki-client on console-ams.rpki-client.org