Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b832924a-a7ba-3773-826c-75daa7e6e427.roa
File:                     b832924a-a7ba-3773-826c-75daa7e6e427.roa (raw, json)
Hash identifier:          0J5Cm7it0dYWK4rfeoeGg5PyXBBFMByH7S7urOHQxhQ=
Subject key identifier:   E4:5D:69:FA:80:CF:07:59:81:9B:6C:01:31:4B:FB:79:0D:C1:09:7E
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858479AABECF4D98CC3B83B096300
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b832924a-a7ba-3773-826c-75daa7e6e427.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     398110
IP address blocks:        64.13.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          72.10.32.0/19 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ec:f4:d9:8c:c3:b8:3b:09:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=396cb771-8fea-47b5-be3a-a236a26a2805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:f6:7b:32:17:8c:92:62:e3:b8:d4:57:05:
                    16:ac:6f:fa:14:04:1d:b7:fc:ef:30:94:4f:c6:55:
                    0b:cb:7a:02:ab:cd:4a:04:34:1d:01:0c:10:e5:40:
                    0b:65:42:63:0c:9b:ce:e4:14:6c:90:88:ab:1f:5f:
                    b1:e6:10:2d:15:6b:13:ea:eb:16:27:0c:49:a9:a8:
                    5f:1f:b7:9e:d3:e2:9f:a9:f2:6a:29:fc:02:80:c7:
                    13:58:5d:6e:81:07:3d:30:3d:f3:1d:ce:7b:dd:38:
                    c4:26:0f:87:4d:4f:45:7e:58:c5:32:4c:b5:d5:87:
                    d2:bb:db:70:13:ad:e2:d1:7b:aa:12:0d:26:72:71:
                    97:e2:8a:cc:44:a7:cf:5d:83:cb:0b:04:bf:8a:c2:
                    98:9c:21:6f:c5:74:e4:5e:75:2e:06:cf:24:96:8c:
                    5a:20:1c:73:86:66:49:7c:ed:a2:9d:be:8c:89:cd:
                    53:1b:2e:18:9a:c4:f4:d1:80:94:93:07:19:45:59:
                    8d:79:bb:b9:bf:a5:e7:7b:3b:da:55:4a:32:09:ce:
                    b1:e1:a0:d6:17:0f:d9:b4:3a:d8:45:41:9f:a7:ba:
                    2f:e1:97:45:3d:76:c9:85:78:4b:0a:c8:a1:8a:5c:
                    ff:c8:48:40:3d:67:73:96:2d:76:3a:d5:4b:52:e0:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:69:FA:80:CF:07:59:81:9B:6C:01:31:4B:FB:79:0D:C1:09:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b832924a-a7ba-3773-826c-75daa7e6e427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:47:96:70:c8:49:5d:23:c3:e5:ad:a6:91:44:aa:3e:d6:4e:
         6e:98:dc:61:7b:23:7c:d3:1e:73:67:4a:c3:4f:b5:58:9b:76:
         b7:ea:36:cc:fa:e5:17:c0:fa:90:fc:ca:62:79:2a:49:8c:4f:
         a2:c9:34:c6:da:04:4a:7c:74:ef:50:b4:39:78:b6:51:49:1a:
         90:cb:ae:fa:fd:63:d0:9f:84:9f:be:b8:ab:ac:53:b4:5c:32:
         e3:e6:23:e4:28:e8:55:e1:ef:d7:ad:e6:78:37:d5:ca:bd:ff:
         9a:ad:00:28:59:5f:ed:5e:18:6d:6b:17:5f:5c:bf:ca:bb:3e:
         2f:a3:68:55:86:0d:88:ed:ce:ab:72:57:63:8c:8f:b3:f4:29:
         3a:d0:00:94:e4:ff:86:a1:5f:76:bb:f1:3a:8a:26:a8:f0:dd:
         c5:af:1b:c5:ab:de:f2:c8:e9:d5:08:be:5b:5a:f4:5d:20:48:
         15:52:b6:b4:39:23:45:9d:0f:08:18:85:ed:61:18:8c:0e:c5:
         a0:14:3e:bc:c5:a8:de:95:98:31:a0:10:2a:f9:2e:8d:88:0e:
         54:9d:fd:23:16:54:57:db:d7:c0:89:35:c7:07:d1:b5:7f:21:
         48:8d:33:7c:e7:cb:c2:8b:e9:cf:a4:0a:21:59:38:2c:7b:a1:
         31:74:d4:20
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEeaq+z02YzDuDsJYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
Mzk2Y2I3NzEtOGZlYS00N2I1LWJlM2EtYTIzNmEyNmEyODA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghP2ezIXjJJi47jUVwUWrG/6FAQdt/zvMJRP
xlULy3oCq81KBDQdAQwQ5UALZUJjDJvO5BRskIirH1+x5hAtFWsT6usWJwxJqahf
H7ee0+KfqfJqKfwCgMcTWF1ugQc9MD3zHc573TjEJg+HTU9FfljFMky11YfSu9tw
E63i0XuqEg0mcnGX4orMRKfPXYPLCwS/isKYnCFvxXTkXnUuBs8kloxaIBxzhmZJ
fO2inb6Mic1TGy4YmsT00YCUkwcZRVmNebu5v6XnezvaVUoyCc6x4aDWFw/ZtDrY
RUGfp7ov4ZdFPXbJhXhLCsihilz/yEhAPWdzli12OtVLUuCtRwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFORdafqAzwdZgZtsATFL+3kNwQl+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvYjgzMjkyNGEtYTdiYS0z
NzczLTgyNmMtNzVkYWE3ZTZlNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQGQA3AAwQG
QM+AAwQGRiBAAwQFSAogAwQGSC/AAwQGzbqAAwQG2EZAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACJHlnDI
SV0jw+WtppFEqj7WTm6Y3GF7I3zTHnNnSsNPtVibdrfqNsz65RfA+pD8ymJ5KkmM
T6LJNMbaBEp8dO9QtDl4tlFJGpDLrvr9Y9CfhJ++uKusU7RcMuPmI+Qo6FXh79et
5ng31cq9/5qtAChZX+1eGG1rF19cv8q7Pi+jaFWGDYjtzqtyV2OMj7P0KTrQAJTk
/4ahX3a78TqKJqjw3cWvG8Wr3vLI6dUIvlta9F0gSBVStrQ5I0WdDwgYhe1hGIwO
xaAUPrzFqN6VmDGgECr5Lo2IDlSd/SMWVFfb18CJNccH0bV/IUiNM3zny8KL6c+k
CiFZOCx7oTF01CA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:30 2024 by rpki-client on console-ams.rpki-client.org