Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa
File:                     5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa (raw, json)
Hash identifier:          A2z91PuVrED+oK42ObOnqmEGxeWI2tJPKpVNiSepKjE=
Subject key identifier:   C6:61:4A:6A:C0:58:7E:61:72:97:38:7F:56:16:83:3F:02:1D:7B:91
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D6724899C
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa
Signing time:             Wed 25 Sep 2019 06:38:30 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     397513
IP address blocks:        173.201.64.0/20 maxlen: 23
                          97.74.96.0/20 maxlen: 23
                          2603:5:2100::/40 maxlen: 44
                          2603:5:2200::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:67:24:89:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=7d288686-b963-4549-81f1-34172a484bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:e1:93:2d:f0:02:6f:69:10:13:da:21:8d:
                    fc:82:e9:7e:79:5a:64:9f:42:cd:81:ec:85:17:37:
                    6a:34:b2:58:0f:03:35:d4:9e:2a:65:8b:28:4b:95:
                    c6:cf:f7:4e:37:c7:8c:50:a3:a2:70:fa:fc:20:75:
                    54:9b:d0:83:03:2f:ac:11:4a:db:d5:77:0e:94:47:
                    29:15:ec:2a:72:60:24:20:90:31:08:6e:37:ab:e5:
                    c5:27:86:7b:9e:f9:e1:ff:82:38:c8:fa:bd:85:d1:
                    39:3d:e6:94:43:23:32:9a:89:79:2c:68:85:4f:09:
                    9b:77:ba:7f:7b:a7:25:26:ab:80:96:18:bd:75:1a:
                    19:1a:f6:00:ba:46:85:56:9b:95:9e:45:78:17:99:
                    73:44:bd:d3:b9:f5:55:40:e3:c3:ff:fb:c3:45:82:
                    6b:8d:d9:c3:9f:93:2e:da:b8:0a:20:43:b7:7e:cb:
                    33:3d:56:ea:d5:49:45:45:86:32:2f:0d:cb:c1:55:
                    ca:85:c9:d4:2d:da:9f:bf:90:a9:7d:82:5e:cb:0d:
                    3d:79:f1:4c:9e:ba:c4:24:aa:8a:c7:9f:8d:57:cb:
                    7a:19:35:fd:5d:eb:c2:18:73:09:59:2f:b4:a3:2a:
                    a5:77:fb:30:bb:72:a4:d2:75:7f:ef:ae:cc:f5:7c:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:61:4A:6A:C0:58:7E:61:72:97:38:7F:56:16:83:3F:02:1D:7B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/5f0a97ea-e207-38c5-b745-fa49a3739cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.74.96.0/20
                  173.201.64.0/20
                IPv6:
                  2603:5:2100::-2603:5:22ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:27:71:dc:25:af:ed:ba:d9:c6:92:82:63:96:a2:67:4d:ef:
         93:4b:b8:84:0d:99:8c:10:08:68:8f:55:22:c4:6d:f1:70:d6:
         4b:3c:2a:71:47:50:48:01:ca:15:f4:02:41:23:9e:f8:6e:42:
         d4:e4:ac:13:12:eb:15:63:8e:d8:d7:90:60:18:c7:44:04:90:
         91:e6:0f:17:ac:cc:7a:d7:cb:01:9c:b3:93:4a:6f:aa:e6:3a:
         3d:14:44:e3:6c:e6:c0:a4:57:9b:69:dc:02:74:9c:82:bf:db:
         bd:15:f5:be:0b:07:98:d3:b9:b4:1c:23:d2:31:86:b1:d7:d1:
         f8:df:d8:7c:bc:d3:87:f0:26:c2:c4:30:40:44:f5:67:20:ad:
         00:96:bd:a3:4b:97:7b:5a:2f:43:ed:ee:f1:26:24:dc:8f:3b:
         67:3a:a2:b3:3b:04:ad:14:c1:e0:5a:16:db:d9:34:71:97:cd:
         31:08:a5:6e:44:a8:1b:fe:ac:11:88:ba:5b:53:97:b3:06:61:
         42:ef:6d:0c:d4:5f:e6:9f:4d:b9:86:67:fd:00:21:b2:88:20:
         8d:a6:bf:4b:8f:e3:6c:5b:f9:ed:a7:77:b3:e6:aa:ab:87:a0:
         29:94:10:dc:06:c6:92:53:af:9a:76:b2:bb:5e:ac:b1:a8:4b:
         39:32:3a:74
-----BEGIN CERTIFICATE-----
MIIGXzCCBUmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbWckiZwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNjZjEz
ZjAeFw0xOTA3MzAwNDAwMDBaFw0yOTA3MzAwNDAwMDBaMC8xLTArBgNVBAMTJDdk
Mjg4Njg2LWI5NjMtNDU0OS04MWYxLTM0MTcyYTQ4NGJmZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJrs4ZMt8AJvaRAT2iGN/ILpfnlaZJ9CzYHshRc3
ajSyWA8DNdSeKmWLKEuVxs/3TjfHjFCjonD6/CB1VJvQgwMvrBFK29V3DpRHKRXs
KnJgJCCQMQhuN6vlxSeGe5754f+COMj6vYXROT3mlEMjMpqJeSxohU8Jm3e6f3un
JSargJYYvXUaGRr2ALpGhVablZ5FeBeZc0S907n1VUDjw//7w0WCa43Zw5+TLtq4
CiBDt37LMz1W6tVJRUWGMi8Ny8FVyoXJ1C3an7+QqX2CXssNPXnxTJ66xCSqisef
jVfLehk1/V3rwhhzCVkvtKMqpXf7MLtypNJ1f++uzPV8LC0CAwEAAaOCA3UwggNx
MB0GA1UdDgQWBBTGYUpqwFh+YXKXOH9WFoM/Ah17kTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNl
ODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2NmMTNmLzVmMGE5N2VhLWUyMDctMzhj
NS1iNzQ1LWZhNDlhMzczOWNkMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzllZDVjZTgwLTIyNGUtNDZhYi05NGYx
LTFhZmNlOGNjZjEzZi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2Yx
M2YuY3JsMB8GA1UdIwQYMBaAFDgdn6a6fMGoRK4J/loAlp07/OEPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4
Y2NmMTNmLmNlcjA/BggrBgEFBQcBBwEB/wQwMC4wEgQCAAEwDAMEBGFKYAMEBK3J
QDAYBAIAAjASMBADBgAmAwAFIQMGACYDAAUiMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IBAQB5J3HcJa/tutnGkoJj
lqJnTe+TS7iEDZmMEAhoj1UixG3xcNZLPCpxR1BIAcoV9AJBI574bkLU5KwTEusV
Y47Y15BgGMdEBJCR5g8XrMx618sBnLOTSm+q5jo9FETjbObApFebadwCdJyCv9u9
FfW+CweY07m0HCPSMYax19H439h8vNOH8CbCxDBARPVnIK0Alr2jS5d7Wi9D7e7x
JiTcjztnOqKzOwStFMHgWhbb2TRxl80xCKVuRKgb/qwRiLpbU5ezBmFC720M1F/m
n025hmf9ACGyiCCNpr9Lj+NsW/ntp3ez5qqrh6AplBDcBsaSU6+adrK7XqyxqEs5
Mjp0
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:03 2024 by rpki-client on console-ams.rpki-client.org