Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891c19b9-6b59-3af4-b607-757ff53c12ff.roa
File:                     891c19b9-6b59-3af4-b607-757ff53c12ff.roa (raw, json)
Hash identifier:          z/9nSWA5LKDmT1XqwHWx/7tGpzQ46y+QrwzS1M/HfUA=
Subject key identifier:   71:5C:67:04:41:7C:25:EA:C7:99:5E:E5:D7:1B:2B:D5:AC:57:37:FC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858424808A8539E638A42C012A800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891c19b9-6b59-3af4-b607-757ff53c12ff.roa
Signing time:             Mon 19 Jun 2023 12:00:00 +0000
ROA not before:           Mon 19 Jun 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.186.0/24 maxlen: 24
                          172.69.187.0/24 maxlen: 24
                          172.69.222.0/24 maxlen: 24
                          172.69.223.0/24 maxlen: 24
                          104.29.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:48:08:a8:53:9e:63:8a:42:c0:12:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 19 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=786ac8dc-4dd2-4ef9-9e45-f182db2971e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:5c:cc:29:90:a6:55:e7:47:13:d8:e7:2d:
                    42:b0:9a:60:8a:58:77:d4:63:b5:29:a0:62:aa:d5:
                    c6:63:d2:c0:0f:42:fb:07:13:77:4e:57:1d:a9:b1:
                    2e:4a:98:39:f3:21:d7:9e:4e:b3:ff:af:05:1e:22:
                    ec:06:12:87:32:d4:c3:f4:0f:c8:cf:64:04:cb:48:
                    77:d9:3d:5e:cc:d3:ae:98:27:3e:fb:9e:7c:19:d7:
                    16:27:1a:e0:95:56:35:01:88:85:6b:ee:ad:6c:e7:
                    5b:98:ee:ee:97:d6:95:42:9d:dc:e5:0f:32:4a:71:
                    c2:23:d2:be:a3:2d:6b:55:97:74:dc:cb:c6:e6:af:
                    5f:e6:2c:fa:7b:e8:aa:7c:71:c0:e8:dc:b5:6c:ca:
                    c2:32:7f:9a:5d:80:0c:ba:5a:30:3a:d5:ec:16:16:
                    2d:dd:b1:da:d8:f4:a3:7b:92:58:5c:34:60:71:26:
                    cc:e8:c1:71:69:9e:1b:ed:d2:20:9d:f7:e3:18:bd:
                    db:a6:ba:97:0d:eb:8c:37:89:83:f1:9c:a8:c5:c6:
                    aa:9b:d4:ce:45:5d:29:5c:cd:0e:10:f1:5c:50:7c:
                    11:74:15:29:1e:7e:b3:04:c3:ed:35:ae:b7:ce:ae:
                    71:a8:35:05:fe:d2:9c:57:7c:bd:ce:8c:99:7a:e1:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5C:67:04:41:7C:25:EA:C7:99:5E:E5:D7:1B:2B:D5:AC:57:37:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891c19b9-6b59-3af4-b607-757ff53c12ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.114.0/24
                  172.69.186.0/23
                  172.69.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:58:b9:79:00:f6:80:5e:5f:85:5c:1b:85:9f:7c:e2:4d:
         09:06:11:00:ef:ce:59:cd:21:f3:d4:42:f3:6c:dd:44:60:93:
         39:3c:be:57:10:be:72:e6:5d:74:58:36:fa:53:69:7e:7d:1d:
         22:8f:3c:13:62:78:1f:a4:ca:d8:8b:bf:5a:31:fe:38:b9:75:
         bd:e2:51:a4:9c:a7:d9:49:1c:9f:21:8b:d1:86:63:e7:c0:3d:
         36:0e:cc:4c:f0:bb:b3:06:ce:5e:d4:7e:f6:6b:fd:25:27:8b:
         09:0c:0c:9f:8c:89:70:e0:36:66:96:f6:08:ab:2f:29:4f:ad:
         7a:6a:66:9e:95:22:d6:69:ee:e0:48:f8:0d:da:c3:17:c8:46:
         aa:a3:fb:d4:a1:aa:ef:aa:0c:50:11:49:4c:9b:62:4e:4f:87:
         35:63:9b:36:a5:58:af:9e:61:77:1e:2f:22:86:3f:0a:f1:89:
         e2:ba:dd:a3:9a:9c:50:cc:99:5a:b7:e6:e0:88:2b:87:88:e8:
         be:ce:51:87:fb:c8:b4:0a:b3:33:c8:4f:8d:4a:64:87:a1:dc:
         2b:ca:bb:3d:d1:29:8d:76:0e:02:6a:5c:81:48:77:0b:b8:e0:
         e0:29:f2:ce:44:b8:0a:c5:e2:bc:a9:1a:3b:d6:9c:92:77:cf:
         99:1a:21:26
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEJICKhTnmOKQsASqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMDYxOTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
Nzg2YWM4ZGMtNGRkMi00ZWY5LTllNDUtZjE4MmRiMjk3MWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryxczCmQplXnRxPY5y1CsJpgilh31GO1KaBi
qtXGY9LAD0L7BxN3TlcdqbEuSpg58yHXnk6z/68FHiLsBhKHMtTD9A/Iz2QEy0h3
2T1ezNOumCc++558GdcWJxrglVY1AYiFa+6tbOdbmO7ul9aVQp3c5Q8ySnHCI9K+
oy1rVZd03MvG5q9f5iz6e+iqfHHA6Ny1bMrCMn+aXYAMulowOtXsFhYt3bHa2PSj
e5JYXDRgcSbM6MFxaZ4b7dIgnffjGL3bprqXDeuMN4mD8Zyoxcaqm9TORV0pXM0O
EPFcUHwRdBUpHn6zBMPtNa63zq5xqDUF/tKcV3y9zoyZeuHcEwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHFcZwRBfCXqx5le5dcbK9WsVzf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODkxYzE5YjktNmI1OS0z
YWY0LWI2MDctNzU3ZmY1M2MxMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaB1yAwQB
rEW6AwQBrEXeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAHj2WLl5APaAXl+FXBuFn3ziTQkGEQDvzlnNIfPU
QvNs3URgkzk8vlcQvnLmXXRYNvpTaX59HSKPPBNieB+kytiLv1ox/ji5db3iUaSc
p9lJHJ8hi9GGY+fAPTYOzEzwu7MGzl7UfvZr/SUniwkMDJ+MiXDgNmaW9girLylP
rXpqZp6VItZp7uBI+A3awxfIRqqj+9Shqu+qDFARSUybYk5PhzVjmzalWK+eYXce
LyKGPwrxieK63aOanFDMmVq35uCIK4eI6L7OUYf7yLQKszPIT41KZIeh3CvKuz3R
KY12DgJqXIFIdwu44OAp8s5EuArF4rypGjvWnJJ3z5kaISY=
-----END CERTIFICATE-----
Generated at Sun May 12 00:42:31 2024 by rpki-client on console-fra.rpki-client.org