Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa
File:                     e71b9091-c42b-3d92-917c-921053cce2c2.roa (raw, json)
Hash identifier:          D7QtOsX3mUgrR4dAi45nyWD27GLwYHqAFQv1RYu1x3Q=
Subject key identifier:   98:E5:42:BB:DB:9D:AF:98:36:4E:01:B6:02:5B:2E:25:1A:10:C8:45
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F432858452952909FEDA7038C501CA6C0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     46606
IP address blocks:        162.214.88.0/21 maxlen: 21
                          162.214.48.0/21 maxlen: 21
                          162.214.120.0/21 maxlen: 21
                          162.214.112.0/21 maxlen: 21
                          162.214.168.0/21 maxlen: 21
                          162.214.160.0/21 maxlen: 21
                          162.240.0.0/20 maxlen: 20
                          162.241.88.0/21 maxlen: 21
                          162.214.224.0/21 maxlen: 21
                          162.241.96.0/21 maxlen: 21
                          162.240.208.0/20 maxlen: 20
                          198.57.192.0/19 maxlen: 19
                          162.240.16.0/20 maxlen: 20
                          198.57.160.0/19 maxlen: 19
                          162.240.32.0/20 maxlen: 20
                          198.1.96.0/19 maxlen: 19
                          162.240.64.0/20 maxlen: 20
                          198.1.64.0/19 maxlen: 19
                          162.241.32.0/21 maxlen: 21
                          192.163.224.0/19 maxlen: 19
                          162.240.48.0/20 maxlen: 20
                          192.163.192.0/19 maxlen: 19
                          162.214.208.0/21 maxlen: 21
                          162.214.184.0/21 maxlen: 21
                          162.241.72.0/21 maxlen: 21
                          162.241.48.0/21 maxlen: 21
                          162.241.128.0/21 maxlen: 21
                          162.241.104.0/21 maxlen: 21
                          162.241.192.0/23 maxlen: 23
                          162.241.176.0/21 maxlen: 21
                          162.241.232.0/21 maxlen: 21
                          162.214.104.0/21 maxlen: 21
                          162.241.40.0/21 maxlen: 21
                          162.214.144.0/21 maxlen: 21
                          162.214.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:90:9f:ed:a7:03:8c:50:1c:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=0c0694c3-d618-4c05-9413-3ca037dfff60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:24:ed:f2:14:83:35:b5:89:4b:c4:b4:ff:
                    0c:96:86:ea:00:8c:77:85:53:ae:c6:7a:63:cd:c9:
                    47:81:19:d4:a8:2a:79:1c:a1:55:d8:38:71:c2:a7:
                    21:02:13:50:60:21:0e:24:d6:45:e9:cf:25:f8:cf:
                    cc:b2:48:72:0a:43:9c:a1:9e:dc:1b:8a:59:a3:e0:
                    28:fc:ab:9c:f4:79:af:1a:5f:2b:d6:3d:9e:ad:04:
                    05:d9:da:5c:9a:06:29:8b:d5:ce:fc:f1:35:3c:4e:
                    2c:f7:4f:d3:36:c5:06:2f:48:72:ad:50:0f:3d:21:
                    d2:89:c9:9f:65:a5:a4:17:79:7f:e9:2c:0b:7f:6a:
                    10:7f:fd:fb:09:18:83:60:e6:61:6f:d3:d4:8c:dd:
                    d8:16:d2:21:84:eb:01:65:e0:55:55:a0:ab:54:e7:
                    31:14:26:ae:95:a7:7e:f8:f6:31:c2:af:cb:bd:c4:
                    60:9d:b8:bd:b1:40:3a:aa:ad:c1:59:0c:b4:b1:5d:
                    a7:3c:b9:d3:39:ee:fc:54:1a:47:73:c6:69:af:62:
                    70:22:0b:36:f9:b3:76:59:1a:66:47:2e:dd:97:be:
                    f3:ce:3d:06:51:f7:a9:fc:68:eb:7f:c7:8c:24:97:
                    01:16:5d:4d:cb:a0:ea:c2:bd:b0:37:9d:d4:32:22:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:42:BB:DB:9D:AF:98:36:4E:01:B6:02:5B:2E:25:1A:10:C8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.214.48.0/21
                  162.214.88.0/21
                  162.214.104.0-162.214.127.255
                  162.214.144.0/21
                  162.214.160.0/20
                  162.214.184.0-162.214.199.255
                  162.214.208.0/21
                  162.214.224.0/21
                  162.240.0.0-162.240.79.255
                  162.240.208.0/20
                  162.241.32.0-162.241.55.255
                  162.241.72.0/21
                  162.241.88.0-162.241.111.255
                  162.241.128.0/21
                  162.241.176.0/21
                  162.241.192.0/23
                  162.241.232.0/21
                  192.163.192.0/18
                  198.1.64.0/18
                  198.57.160.0-198.57.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:88:3b:d9:00:8f:f3:3c:d4:29:44:05:c7:e7:a9:c6:08:
         17:97:52:8c:58:db:81:c7:5f:f8:66:91:61:5d:cf:9d:dd:d0:
         60:0b:03:d1:1a:1d:60:9c:f1:fc:d0:24:20:84:a5:48:70:55:
         b4:b5:21:1b:01:43:50:d1:2e:09:70:ab:1c:f4:4c:d5:d1:b2:
         3f:32:dd:6e:ce:14:45:4d:ce:99:27:72:6a:f7:68:21:9e:fc:
         e8:9b:f0:b1:94:bd:25:39:74:2f:47:60:ed:fb:01:6a:5a:68:
         df:53:e6:4a:f4:9e:63:7d:23:2a:21:be:86:11:22:b6:ce:38:
         25:d7:e9:0c:0b:24:5b:f2:a1:e9:28:bf:21:f7:b6:13:3e:e3:
         d2:84:de:b0:08:99:ed:17:cb:01:4a:b4:40:2f:45:e9:c4:4b:
         91:15:69:24:ea:40:2c:16:71:e2:9a:7b:95:a3:7c:a9:1e:d0:
         e5:7e:e2:b7:50:84:cf:92:c0:ed:f3:b5:20:c8:6b:5f:71:92:
         95:8e:d5:20:74:dd:e3:72:c6:d7:01:ee:d7:1e:c8:f5:55:a7:
         33:f0:56:52:06:d4:b8:da:f5:80:88:b7:56:4e:cb:06:02:d4:
         de:55:90:0e:ac:7c:c3:ce:b7:78:73:34:16:fb:a5:d4:d5:2f:
         3a:55:6d:29
-----BEGIN CERTIFICATE-----
MIIG6TCCBdGgAwIBAgIUAQ0Mn0MoWEUpUpCf7acDjFAcpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk
MGMwNjk0YzMtZDYxOC00YzA1LTk0MTMtM2NhMDM3ZGZmZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYUk7fIUgzW1iUvEtP8MlobqAIx3hVOuxnpj
zclHgRnUqCp5HKFV2DhxwqchAhNQYCEOJNZF6c8l+M/MskhyCkOcoZ7cG4pZo+Ao
/Kuc9HmvGl8r1j2erQQF2dpcmgYpi9XO/PE1PE4s90/TNsUGL0hyrVAPPSHSicmf
ZaWkF3l/6SwLf2oQf/37CRiDYOZhb9PUjN3YFtIhhOsBZeBVVaCrVOcxFCaulad+
+PYxwq/LvcRgnbi9sUA6qq3BWQy0sV2nPLnTOe78VBpHc8Zpr2JwIgs2+bN2WRpm
Ry7dl77zzj0GUfep/Gjrf8eMJJcBFl1Ny6Dqwr2wN53UMiItFwIDAQABo4ID+zCC
A/cwHQYDVR0OBBYEFJjlQrvbna+YNk4BtgJbLiUaEMhFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvZTcxYjkwOTEtYzQyYi0z
ZDkyLTkxN2MtOTIxMDUzY2NlMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBrgQCAAEwgacDBAOi
1jADBAOi1lgwDAMEA6LWaAMEB6LWAAMEA6LWkAMEBKLWoDAMAwQDota4AwQDotbA
AwQDotbQAwQDotbgMAsDAwSi8AMEBKLwQAMEBKLw0DAMAwQFovEgAwQDovEwAwQD
ovFIMAwDBAOi8VgDBASi8WADBAOi8YADBAOi8bADBAGi8cADBAOi8egDBAbAo8AD
BAbGAUAwDAMEBcY5oAMEBcY5wDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbe4g72QCP8zzUKUQFx+epxggX
l1KMWNuBx1/4ZpFhXc+d3dBgCwPRGh1gnPH80CQghKVIcFW0tSEbAUNQ0S4JcKsc
9EzV0bI/Mt1uzhRFTc6ZJ3Jq92ghnvzom/CxlL0lOXQvR2Dt+wFqWmjfU+ZK9J5j
fSMqIb6GESK2zjgl1+kMCyRb8qHpKL8h97YTPuPShN6wCJntF8sBSrRAL0XpxEuR
FWkk6kAsFnHimnuVo3ypHtDlfuK3UITPksDt87UgyGtfcZKVjtUgdN3jcsbXAe7X
Hsj1Vacz8FZSBtS42vWAiLdWTssGAtTeVZAOrHzDzrd4czQW+6XU1S86VW0p
-----END CERTIFICATE-----
Generated at Sat May 11 21:43:38 2024 by rpki-client on console-ams.rpki-client.org