Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/f4560b97-b273-336e-9c35-13fbb0e8a799.roa
File:                     f4560b97-b273-336e-9c35-13fbb0e8a799.roa (raw, json)
Hash identifier:          84B15GTFYkDQRRiE9HviGpZjFXbsFaV4fglaPsNXW4U=
Subject key identifier:   DF:10:AF:A6:22:2D:C8:B1:9D:28:08:4F:37:11:7C:1D:AF:7D:35:23
Certificate issuer:       /CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
Certificate serial:       010D0C9F4328584566BDB19262381286B972BD00
Authority key identifier: 9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/f4560b97-b273-336e-9c35-13fbb0e8a799.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        173.195.211.0/24 maxlen: 24
                          173.195.215.0/24 maxlen: 24
                          173.195.210.0/24 maxlen: 24
                          173.195.209.0/24 maxlen: 24
                          173.195.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b1:92:62:38:12:86:b9:72:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=e74fdc53-239e-49f4-b274-508da637518f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:bd:a8:cf:44:dc:2b:5f:ee:51:77:39:d1:
                    e7:92:fe:5e:a9:bb:47:e4:a8:9e:e2:d7:66:d4:99:
                    19:24:96:be:ff:15:b5:2f:21:18:6d:55:ec:3d:82:
                    c6:c3:92:b0:dc:fe:fa:8d:08:0f:18:12:40:5d:67:
                    c6:58:8f:20:27:f3:e8:d4:d4:c7:fe:fc:bc:de:b2:
                    b6:a5:3a:c3:38:8a:21:48:4d:bd:6e:87:59:5b:a3:
                    a8:39:b9:a8:f4:80:37:e2:a6:97:94:92:fa:40:d4:
                    ad:c9:cd:8b:0f:32:1b:e9:95:26:66:5f:d4:99:c5:
                    84:57:e9:56:b2:e1:9e:6a:ad:1b:0e:ea:37:61:a8:
                    45:f2:70:11:a5:16:7a:dd:93:86:bf:1b:6b:47:1e:
                    a9:79:b3:63:df:70:9e:0a:8b:d8:06:b2:b7:91:ee:
                    b0:85:a1:f4:58:86:3e:84:35:64:ea:6d:c6:7d:23:
                    ae:ea:f3:da:8b:1b:17:68:09:5b:8a:0d:c3:27:49:
                    da:41:91:d1:3d:0a:dd:a5:a7:bc:9e:cf:89:f3:e8:
                    6b:27:65:a8:af:15:86:68:4b:d8:45:8a:16:44:37:
                    9f:ee:a8:f5:1f:d3:71:30:d2:f4:1b:73:e3:26:a5:
                    6d:5b:40:56:12:5d:f4:e1:31:4a:26:f7:8f:8a:39:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:10:AF:A6:22:2D:C8:B1:9D:28:08:4F:37:11:7C:1D:AF:7D:35:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/f4560b97-b273-336e-9c35-13fbb0e8a799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.209.0-173.195.211.255
                  173.195.215.0-173.195.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:a0:4f:ce:41:33:84:6a:36:60:13:ca:c5:4f:8e:6b:05:
         5a:be:af:de:ac:58:65:f7:98:18:86:db:0a:75:e2:53:ba:0c:
         a8:66:2c:76:65:c9:50:e6:dd:da:2c:95:b7:05:2a:e5:11:39:
         c2:70:d2:b2:84:a2:bb:81:c2:c2:c4:23:88:b0:b7:67:61:9b:
         7e:ce:2c:b7:af:2f:b3:4e:7c:5a:f9:75:3a:ff:1d:d0:23:21:
         b7:e6:fb:01:9e:d9:b4:32:ed:ac:46:a3:39:2f:81:6f:27:4d:
         da:a2:8c:de:02:56:61:37:05:ed:cf:45:01:da:26:fd:8a:ae:
         7f:94:89:7e:d7:ee:8a:01:6c:82:d0:2a:2f:df:b1:f5:92:9a:
         27:5f:6d:68:66:27:05:47:01:18:53:23:49:fc:09:d5:26:06:
         cb:a4:eb:0a:f3:76:b8:26:97:11:c5:0d:cc:ae:d4:2d:89:1e:
         b2:9c:34:b9:fc:97:67:57:3d:45:3a:55:a7:94:29:48:d7:db:
         ce:3a:cd:bb:db:48:8e:c2:ad:7e:75:22:01:92:a8:69:f7:b3:
         fc:85:c1:9a:4d:9d:d8:8a:a2:03:d7:65:e0:6a:70:e7:10:3d:
         02:61:01:9a:4a:b3:18:bf:42:8c:f7:bd:3b:c4:6c:ab:1b:07:
         cd:54:67:5c
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEVmvbGSYjgShrlyvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAxMGI1MDktYWVkZi00ZGE1LWJiZDgtOGM2NTA3ZDNh
MzFjMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
ZTc0ZmRjNTMtMjM5ZS00OWY0LWIyNzQtNTA4ZGE2Mzc1MThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02m9qM9E3Ctf7lF3OdHnkv5eqbtH5Kie4tdm
1JkZJJa+/xW1LyEYbVXsPYLGw5Kw3P76jQgPGBJAXWfGWI8gJ/Po1NTH/vy83rK2
pTrDOIohSE29bodZW6OoObmo9IA34qaXlJL6QNStyc2LDzIb6ZUmZl/UmcWEV+lW
suGeaq0bDuo3YahF8nARpRZ63ZOGvxtrRx6pebNj33CeCovYBrK3ke6whaH0WIY+
hDVk6m3GfSOu6vPaixsXaAlbig3DJ0naQZHRPQrdpae8ns+J8+hrJ2WorxWGaEvY
RYoWRDef7qj1H9NxMNL0G3PjJqVtW0BWEl304TFKJvePijnmqwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFN8Qr6YiLcixnSgITzcRfB2vfTUjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDEw
YjUwOS1hZWRmLTRkYTUtYmJkOC04YzY1MDdkM2EzMWMvZjQ1NjBiOTctYjI3My0z
MzZlLTljMzUtMTNmYmIwZThhNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTAxMGI1MDktYWVkZi00ZGE1LWJi
ZDgtOGM2NTA3ZDNhMzFjL2UwMTBiNTA5LWFlZGYtNGRhNS1iYmQ4LThjNjUwN2Qz
YTMxYy5jcmwwHwYDVR0jBBgwFoAUn9r8xzYNXuONenRAQV4MffF4zpMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDEwYjUwOS1hZWRmLTRkYTUtYmJkOC04YzY1
MDdkM2EzMWMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACtw9ED
BAKtw9AwDAMEAK3D1wMEBa3DwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBl1aBPzkEzhGo2YBPKxU+OawVa
vq/erFhl95gYhtsKdeJTugyoZix2ZclQ5t3aLJW3BSrlETnCcNKyhKK7gcLCxCOI
sLdnYZt+ziy3ry+zTnxa+XU6/x3QIyG35vsBntm0Mu2sRqM5L4FvJ03aoozeAlZh
NwXtz0UB2ib9iq5/lIl+1+6KAWyC0Cov37H1kponX21oZicFRwEYUyNJ/AnVJgbL
pOsK83a4JpcRxQ3MrtQtiR6ynDS5/JdnVz1FOlWnlClI19vOOs2720iOwq1+dSIB
kqhp97P8hcGaTZ3YiqID12XganDnED0CYQGaSrMYv0KM9707xGyrGwfNVGdc
-----END CERTIFICATE-----
Generated at Wed May 1 15:54:02 2024 by rpki-client on console-ams.rpki-client.org