Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/da0440a7-5f70-3959-8f0b-85d69fe69731.roa
File:                     da0440a7-5f70-3959-8f0b-85d69fe69731.roa (raw, json)
Hash identifier:          kfk/mFipd62fELsOJN/s/mz6uNk1Z2N0riIe2sfXUjg=
Subject key identifier:   22:A5:6A:8B:74:7B:7B:68:F7:57:D4:26:D5:D8:DD:39:8A:5B:00:9B
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858456E250F2D83B9DD17F3C3AD00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/da0440a7-5f70-3959-8f0b-85d69fe69731.roa
Signing time:             Thu 04 Apr 2024 04:39:40 +0000
ROA not before:           Thu 04 Apr 2024 04:39:40 +0000
ROA not after:            Wed 03 Jul 2024 04:39:40 +0000
asID:                     7018
IP address blocks:        45.58.250.0/24 maxlen: 24
                          45.58.212.0/22 maxlen: 22
                          45.58.252.0/22 maxlen: 22
                          45.58.240.0/22 maxlen: 22
                          45.58.210.0/23 maxlen: 23
                          45.58.208.0/24 maxlen: 24
                          45.58.245.0/24 maxlen: 24
                          69.91.139.0/24 maxlen: 24
                          69.91.140.0/24 maxlen: 24
                          69.91.143.0/24 maxlen: 24
                          69.91.144.0/24 maxlen: 24
                          69.91.147.0/24 maxlen: 24
                          69.91.148.0/24 maxlen: 24
                          69.91.150.0/24 maxlen: 24
                          69.91.151.0/24 maxlen: 24
                          69.91.152.0/24 maxlen: 24
                          69.91.154.0/24 maxlen: 24
                          69.91.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6e:25:0f:2d:83:b9:dd:17:f3:c3:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr  4 04:39:40 2024 GMT
            Not After : Jul  3 04:39:40 2024 GMT
        Subject: CN=ce2b6386-8e77-4f82-81ea-467f620cad63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:27:d6:68:0d:5f:86:ff:b2:f0:db:bd:b2:
                    f3:cd:d6:ab:29:6c:cb:f5:9c:20:82:80:37:07:30:
                    63:31:e6:07:33:2a:55:2c:f7:9a:cf:4a:45:1d:e4:
                    d6:0c:eb:94:27:75:e2:e0:a4:38:29:dd:9f:f3:75:
                    8b:71:9b:77:81:b2:bc:e0:a5:78:64:24:f9:ff:57:
                    38:91:51:e2:28:12:c3:34:67:ce:72:da:0f:9c:d3:
                    68:a7:02:4d:67:21:ce:3b:38:5a:45:91:69:61:a9:
                    d1:3f:31:92:06:12:57:56:bd:05:0c:ce:43:55:f2:
                    cd:85:21:1e:4d:80:b6:97:f1:af:4d:35:83:59:28:
                    e2:f7:ad:d7:8e:96:65:01:2e:4b:81:75:85:3c:c4:
                    c9:6b:04:68:72:4d:76:e8:6a:52:6a:e0:60:bd:b7:
                    5d:81:aa:e8:75:ce:ab:1a:ce:28:35:b0:f9:02:71:
                    b3:4e:42:8c:c5:73:34:72:86:f6:01:36:2e:02:04:
                    5b:08:39:92:9e:5e:3c:d2:bc:41:a6:97:88:b8:47:
                    2c:9a:8f:18:57:de:ca:e5:26:ec:76:15:7c:e6:ea:
                    73:ea:ed:70:f8:7d:e2:f0:a3:c8:ab:d5:18:ca:b8:
                    58:7d:da:34:44:70:ef:14:94:22:19:4e:e7:3f:f6:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:6A:8B:74:7B:7B:68:F7:57:D4:26:D5:D8:DD:39:8A:5B:00:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/da0440a7-5f70-3959-8f0b-85d69fe69731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.208.0/24
                  45.58.210.0-45.58.215.255
                  45.58.240.0/22
                  45.58.245.0/24
                  45.58.250.0/24
                  45.58.252.0/22
                  69.91.139.0-69.91.140.255
                  69.91.143.0-69.91.144.255
                  69.91.147.0-69.91.148.255
                  69.91.150.0-69.91.152.255
                  69.91.154.0/24
                  69.91.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:03:be:54:72:1e:49:1d:6a:cf:9f:1b:91:a5:98:d4:3b:d5:
         2c:fc:00:de:9b:72:9e:5b:07:f3:f1:c4:c5:7f:94:1c:6a:67:
         d1:46:af:29:96:6c:86:a6:64:12:f7:05:d6:7b:bc:d7:f4:a6:
         d0:9a:a7:95:b0:f0:d3:ef:64:9b:42:49:ae:68:41:b2:da:fd:
         f8:f6:ee:3b:08:9d:9a:c2:8c:8d:87:f1:96:14:02:e8:f8:cc:
         a8:41:b3:28:47:a7:9b:bf:b7:30:03:fb:d2:f1:11:14:80:03:
         5c:78:0c:18:85:f1:6a:15:35:3d:c0:ad:da:2f:dc:bf:c8:80:
         f1:10:4f:dc:13:ab:25:49:50:30:ed:27:c6:8e:28:c8:0f:a3:
         99:81:2b:92:38:85:bc:00:63:08:79:0f:58:7c:ae:3f:68:ad:
         6d:84:cf:5d:56:98:2b:85:12:74:08:55:17:32:9f:6a:23:25:
         c1:46:02:c6:16:00:0e:8c:7b:e3:db:2b:ce:fb:23:0d:34:04:
         2d:5d:66:c5:36:c1:b8:a2:b3:3d:c6:92:6f:52:64:36:28:bf:
         9b:e1:98:a0:6d:c3:45:9c:58:21:2d:fa:b7:88:05:03:cb:ed:
         3e:b5:a7:a9:84:18:65:6e:11:60:8a:71:04:a7:52:a1:a6:bc:
         1d:ec:53:6f
-----BEGIN CERTIFICATE-----
MIIGrjCCBZagAwIBAgIUAQ0Mn0MoWEVuJQ8tg7ndF/PDrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDQwNDA0Mzk0MFoXDTI0MDcwMzA0Mzk0MFowLzEtMCsGA1UEAxMk
Y2UyYjYzODYtOGU3Ny00ZjgyLTgxZWEtNDY3ZjYyMGNhZDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNsn1mgNX4b/svDbvbLzzdarKWzL9ZwggoA3
BzBjMeYHMypVLPeaz0pFHeTWDOuUJ3Xi4KQ4Kd2f83WLcZt3gbK84KV4ZCT5/1c4
kVHiKBLDNGfOctoPnNNopwJNZyHOOzhaRZFpYanRPzGSBhJXVr0FDM5DVfLNhSEe
TYC2l/GvTTWDWSji963XjpZlAS5LgXWFPMTJawRock126GpSauBgvbddgarodc6r
Gs4oNbD5AnGzTkKMxXM0cob2ATYuAgRbCDmSnl480rxBppeIuEcsmo8YV97K5Sbs
dhV85upz6u1w+H3i8KPIq9UYyrhYfdo0RHDvFJQiGU7nP/YVkwIDAQABo4IDwDCC
A7wwHQYDVR0OBBYEFCKlaot0e3to91fUJtXY3TmKWwCbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZGEwNDQwYTctNWY3MC0z
OTU5LThmMGItODVkNjlmZTY5NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAC060DAM
AwQBLTrSAwQDLTrQAwQCLTrwAwQALTr1AwQALTr6AwQCLTr8MAwDBABFW4sDBABF
W4wwDAMEAEVbjwMEAEVbkDAMAwQARVuTAwQARVuUMAwDBAFFW5YDBABFW5gDBABF
W5oDBABFW7AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAVAO+VHIeSR1qz58bkaWY1DvVLPwA3ptynlsH8/HE
xX+UHGpn0UavKZZshqZkEvcF1nu81/Sm0JqnlbDw0+9km0JJrmhBstr9+PbuOwid
msKMjYfxlhQC6PjMqEGzKEenm7+3MAP70vERFIADXHgMGIXxahU1PcCt2i/cv8iA
8RBP3BOrJUlQMO0nxo4oyA+jmYErkjiFvABjCHkPWHyuP2itbYTPXVaYK4USdAhV
FzKfaiMlwUYCxhYADox749srzvsjDTQELV1mxTbBuKKzPcaSb1JkNii/m+GYoG3D
RZxYIS36t4gFA8vtPrWnqYQYZW4RYIpxBKdSoaa8HexTbw==
-----END CERTIFICATE-----
Generated at Sat May 4 02:56:47 2024 by rpki-client on console-fra.rpki-client.org