Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b890a995-0406-39dc-9066-51457fabcd0d.roa
File:                     b890a995-0406-39dc-9066-51457fabcd0d.roa (raw, json)
Hash identifier:          HbQgT+C3j/4uFAI7fVH0YNYRbMjFyAG6J2bt+Yf3Yso=
Subject key identifier:   18:0C:AD:68:61:1E:75:8E:28:15:DA:9B:95:FF:F0:BF:4D:A8:5C:0F
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285844FCC56B2FBF77E3FDFF261300
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b890a995-0406-39dc-9066-51457fabcd0d.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     398101
IP address blocks:        72.10.32.0/19 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          64.13.192.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:6b:2f:bf:77:e3:fd:ff:26:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=09a18f39-4791-412a-90ca-07e9e9c48abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:59:80:06:f7:71:03:da:49:13:36:f6:dc:
                    1f:33:3e:3b:0e:c2:f1:e5:b0:76:54:32:d0:27:98:
                    d1:ce:01:7e:19:95:66:62:f1:7d:1d:97:62:f6:27:
                    16:6c:be:a3:81:e9:b1:0a:45:6a:f2:6d:45:58:5f:
                    15:e3:b8:39:21:ec:42:6e:5d:fc:f9:23:c9:b6:0e:
                    95:19:48:82:27:30:2d:66:a6:1f:9c:57:2b:b9:a0:
                    ec:84:8c:85:db:0d:65:d5:57:91:35:a8:40:54:3d:
                    1b:0b:44:de:13:7c:22:e8:68:4e:b4:33:bd:24:3e:
                    63:d6:f2:8b:37:1a:a7:65:91:bb:0a:d5:27:d9:4f:
                    e4:a2:2c:00:ff:bf:b5:42:c6:56:03:37:4b:42:e1:
                    30:a6:43:c7:ba:cf:6f:d0:12:68:29:83:31:3b:14:
                    cc:e0:ac:82:13:8b:44:61:17:20:a2:53:3e:b0:db:
                    12:20:4c:f7:aa:74:70:5d:30:f6:43:ea:dc:a2:82:
                    fe:7e:bb:63:be:94:9c:6e:8a:57:e2:a6:98:f6:76:
                    82:24:1a:54:29:53:3f:fd:dd:8a:5b:56:f1:e0:f4:
                    6f:c6:0d:16:f7:11:72:4f:74:72:49:53:c8:f1:b8:
                    b2:37:e4:21:51:33:54:da:49:84:fd:ba:ac:01:15:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:AD:68:61:1E:75:8E:28:15:DA:9B:95:FF:F0:BF:4D:A8:5C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b890a995-0406-39dc-9066-51457fabcd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:e3:13:65:52:f1:99:05:5a:7a:40:84:56:60:18:55:ff:
         00:f9:17:4a:37:b5:e1:ff:2e:ee:c1:74:0b:97:c0:1b:a7:74:
         95:2f:93:ab:25:1e:54:5a:06:b8:b0:57:6f:24:f1:3a:1f:f9:
         71:00:de:4f:c3:eb:40:ac:af:3d:31:f9:f6:72:1f:02:e5:f6:
         bd:60:a6:c8:59:c3:8c:d2:8c:f8:6b:13:92:c2:b1:03:e3:38:
         63:c8:98:f5:f5:1a:7d:a7:bd:b5:6b:68:f6:cf:7d:8b:a8:94:
         fa:8d:55:75:a4:fe:65:6b:d3:81:f8:89:cd:7f:03:71:b9:88:
         89:ab:6f:8f:1c:bf:4b:60:9c:3c:13:c8:12:1f:28:98:82:7f:
         46:e5:f7:3a:c6:0b:d9:74:f5:4b:24:c1:cd:7f:dd:1f:05:da:
         9b:1c:db:91:1f:8a:66:1b:9e:c7:e7:e8:63:05:02:2d:7a:3f:
         d1:df:73:9b:4b:07:5f:67:8b:1c:89:48:2d:d5:83:28:d8:05:
         a3:23:71:5e:e2:a0:56:aa:d9:53:b6:5c:76:a4:0b:c2:d8:6d:
         80:34:6d:5d:b0:27:a2:2b:59:54:06:db:f9:dd:62:0c:55:69:
         fe:66:91:76:52:fa:79:fd:36:fc:80:64:e7:79:d0:61:c2:b5:
         7b:8b:66:af
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWET8xWsvv3fj/f8mEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk
MDlhMThmMzktNDc5MS00MTJhLTkwY2EtMDdlOWU5YzQ4YWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou5ZgAb3cQPaSRM29twfMz47DsLx5bB2VDLQ
J5jRzgF+GZVmYvF9HZdi9icWbL6jgemxCkVq8m1FWF8V47g5IexCbl38+SPJtg6V
GUiCJzAtZqYfnFcruaDshIyF2w1l1VeRNahAVD0bC0TeE3wi6GhOtDO9JD5j1vKL
NxqnZZG7CtUn2U/koiwA/7+1QsZWAzdLQuEwpkPHus9v0BJoKYMxOxTM4KyCE4tE
YRcgolM+sNsSIEz3qnRwXTD2Q+rcooL+frtjvpScbopX4qaY9naCJBpUKVM//d2K
W1bx4PRvxg0W9xFyT3RySVPI8biyN+QhUTNU2kmE/bqsARVB0wIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFBgMrWhhHnWOKBXam5X/8L9NqFwPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvYjg5MGE5OTUtMDQwNi0z
OWRjLTkwNjYtNTE0NTdmYWJjZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQGQA3AAwQG
QM+AAwQGRiBAAwQFSAogAwQGSC/AAwQGzbqAAwQG2EZAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACyo4xNl
UvGZBVp6QIRWYBhV/wD5F0o3teH/Lu7BdAuXwBundJUvk6slHlRaBriwV28k8Tof
+XEA3k/D60Csrz0x+fZyHwLl9r1gpshZw4zSjPhrE5LCsQPjOGPImPX1Gn2nvbVr
aPbPfYuolPqNVXWk/mVr04H4ic1/A3G5iImrb48cv0tgnDwTyBIfKJiCf0bl9zrG
C9l09Uskwc1/3R8F2psc25EfimYbnsfn6GMFAi16P9Hfc5tLB19nixyJSC3VgyjY
BaMjcV7ioFaq2VO2XHakC8LYbYA0bV2wJ6IrWVQG2/ndYgxVaf5mkXZS+nn9NvyA
ZOd50GHCtXuLZq8=
-----END CERTIFICATE-----
Generated at Wed May 8 02:17:58 2024 by rpki-client on console-ams.rpki-client.org