Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa
File:                     21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa (raw, json)
Hash identifier:          ZFCnnsDwETi8PFtgzHmkbMPfwVGsH62/d1Oe9irFgNk=
Subject key identifier:   AC:02:B9:6F:A9:28:A0:0D:EC:06:C7:D3:1D:90:49:B0:88:54:6E:CE
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858476E0108B119F947674A353060
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     400754
IP address blocks:        50.63.4.0/23 maxlen: 24
                          97.74.72.0/22 maxlen: 24
                          97.74.76.0/24 maxlen: 24
                          97.74.112.0/22 maxlen: 24
                          198.71.244.0/22 maxlen: 24
                          198.71.248.0/22 maxlen: 24
                          208.109.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:08:b1:19:f9:47:67:4a:35:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=ff1b97c7-3149-4924-8529-4dceeeeddd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:d1:96:45:cb:0f:ca:ee:1c:5b:d5:18:a0:
                    dd:08:8e:f7:3f:b8:23:48:c4:84:97:99:c2:28:fa:
                    aa:d9:3b:1a:ce:05:0b:48:1d:39:f2:69:16:55:80:
                    04:23:48:8f:cb:84:d4:9c:2e:f5:da:be:f4:8e:2f:
                    a3:b4:21:31:4a:7d:46:eb:11:85:b0:d7:18:14:21:
                    06:14:de:0d:6b:77:6d:fc:8d:80:aa:f1:26:34:72:
                    b6:bb:9a:74:3d:98:b5:3e:f8:2f:34:08:b4:5d:4b:
                    46:ad:d9:33:cf:b7:c0:c3:4f:f3:9e:c0:0c:31:4b:
                    e0:ba:72:0f:15:2c:ea:20:04:e1:7b:38:20:92:fc:
                    ec:55:c5:ac:b9:f3:9d:c9:77:95:4f:ba:dd:1f:34:
                    c6:f3:97:76:73:20:1b:a1:b8:3a:68:c1:33:3f:e1:
                    fa:6d:4b:4f:c6:5a:89:4b:ec:ec:20:44:a8:ec:2b:
                    bb:8b:00:cf:9b:88:2f:2f:0c:96:70:a6:d6:17:b5:
                    5c:0c:2e:04:d2:e2:9c:d3:ce:f0:fc:27:71:a4:d4:
                    de:ec:e2:dc:05:61:b7:87:ab:0b:f4:ad:68:c8:28:
                    69:08:43:d2:20:94:8f:c9:cd:92:1b:6f:62:44:54:
                    03:d6:eb:73:16:df:06:54:13:54:c6:a1:fa:ac:58:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:02:B9:6F:A9:28:A0:0D:EC:06:C7:D3:1D:90:49:B0:88:54:6E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.63.4.0/23
                  97.74.72.0-97.74.76.255
                  97.74.112.0/22
                  198.71.244.0-198.71.251.255
                  208.109.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:e4:6f:19:e9:2d:03:3b:b8:72:37:09:cb:02:ec:cb:f3:
         a3:34:d4:70:91:7f:00:f1:1e:b3:f6:08:0a:b6:0b:05:c5:10:
         14:27:b8:16:a5:07:74:7c:88:b9:05:3c:8f:77:38:53:73:48:
         db:cb:ef:62:e4:d9:c7:32:fd:e4:98:54:d7:c1:ca:bc:b8:7b:
         f9:61:b8:84:6c:e8:92:c9:67:57:3e:18:65:6f:61:9c:fa:9e:
         79:87:17:fa:6d:a9:db:05:70:22:6f:0d:0c:a1:e5:eb:36:22:
         46:c0:4b:a6:4e:f2:cd:18:ef:ae:b8:f7:e0:bb:c5:39:27:a2:
         b7:e6:c0:ac:43:a8:52:b1:e2:17:d8:26:3e:7f:5f:76:de:40:
         e5:6f:6d:dc:50:3c:26:14:d3:c3:41:84:03:1e:79:f8:71:5f:
         97:9d:53:46:22:5f:7f:35:9a:fb:70:4e:a1:12:02:87:d6:b0:
         6a:b4:08:1f:bf:b2:09:f9:39:12:7b:1a:da:81:6f:fa:91:e5:
         38:e9:2e:fd:6a:b3:5f:f8:86:81:d6:a1:1a:72:a8:f2:ff:95:
         81:97:39:8a:7b:1b:da:fe:74:31:f7:cf:1c:b6:ec:f3:b1:4f:
         a0:dd:ab:46:3f:1e:da:3f:a6:ff:d9:4f:00:c6:2d:bc:ee:11:
         33:9f:94:59
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEduAQixGflHZ0o1MGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk
ZmYxYjk3YzctMzE0OS00OTI0LTg1MjktNGRjZWVlZWRkZDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbRlkXLD8ruHFvVGKDdCI73P7gjSMSEl5nC
KPqq2TsazgULSB058mkWVYAEI0iPy4TUnC712r70ji+jtCExSn1G6xGFsNcYFCEG
FN4Na3dt/I2AqvEmNHK2u5p0PZi1PvgvNAi0XUtGrdkzz7fAw0/znsAMMUvgunIP
FSzqIAThezggkvzsVcWsufOdyXeVT7rdHzTG85d2cyAbobg6aMEzP+H6bUtPxlqJ
S+zsIESo7Cu7iwDPm4gvLwyWcKbWF7VcDC4E0uKc087w/CdxpNTe7OLcBWG3h6sL
9K1oyChpCEPSIJSPyc2SG29iRFQD1utzFt8GVBNUxqH6rFgR8wIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFKwCuW+pKKAN7AbH0x2QSbCIVG7OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvMjFmNGZkODAtMTc3OS0z
NzVlLThlM2MtOWI1MGE5ZTFlMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBMj8EMAwD
BANhSkgDBABhSkwDBAJhSnAwDAMEAsZH9AMEAsZH+AMEAdBthDBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa
MuRvGektAzu4cjcJywLsy/OjNNRwkX8A8R6z9ggKtgsFxRAUJ7gWpQd0fIi5BTyP
dzhTc0jby+9i5NnHMv3kmFTXwcq8uHv5YbiEbOiSyWdXPhhlb2Gc+p55hxf6banb
BXAibw0MoeXrNiJGwEumTvLNGO+uuPfgu8U5J6K35sCsQ6hSseIX2CY+f1923kDl
b23cUDwmFNPDQYQDHnn4cV+XnVNGIl9/NZr7cE6hEgKH1rBqtAgfv7IJ+TkSexra
gW/6keU46S79arNf+IaB1qEacqjy/5WBlzmKexva/nQx988ctuzzsU+g3atGPx7a
P6b/2U8Axi287hEzn5RZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:03 2024 by rpki-client on console-ams.rpki-client.org