Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
File:                     ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa (raw, json)
Hash identifier:          q4049sOsN6vD4COsNVGg2x4BP6aqV9MyOaPcwxXUaAc=
Subject key identifier:   75:A7:03:F3:B4:0D:B6:05:F7:64:54:C2:93:A0:77:0E:B3:72:57:5C
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F43285845A15E1A41AB970ED88A7E0C80
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     19108
IP address blocks:        69.59.82.0/24 maxlen: 24
                          24.224.56.0/24 maxlen: 24
                          69.59.104.0/24 maxlen: 24
                          24.224.60.0/22 maxlen: 24
                          208.91.57.0/24 maxlen: 24
                          24.245.72.0/22 maxlen: 24
                          64.234.74.0/24 maxlen: 24
                          64.234.8.0/24 maxlen: 24
                          64.234.78.0/24 maxlen: 24
                          24.224.58.0/23 maxlen: 24
                          67.21.185.0/24 maxlen: 24
                          24.224.36.0/23 maxlen: 24
                          69.59.64.0/24 maxlen: 24
                          24.224.44.0/24 maxlen: 24
                          69.59.73.0/24 maxlen: 24
                          24.224.55.0/24 maxlen: 24
                          64.234.34.0/24 maxlen: 24
                          64.234.47.0/24 maxlen: 24
                          64.234.55.0/24 maxlen: 24
                          64.234.67.0/24 maxlen: 24
                          64.234.68.0/24 maxlen: 24
                          64.234.0.0/23 maxlen: 24
                          64.234.16.0/24 maxlen: 24
                          64.234.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1a:41:ab:97:0e:d8:8a:7e:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=cfc791d8-8910-48d5-8132-72bc0dc3c14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:25:c7:a0:08:65:ea:1e:d3:76:0e:c5:ae:
                    25:8d:1c:f8:0a:00:06:ef:2b:0d:bc:5b:4e:29:14:
                    e1:82:76:7d:f6:55:dc:ae:eb:34:5e:ea:14:b9:dc:
                    2a:27:7e:01:c3:e0:d5:5b:a8:8b:38:f6:96:16:ea:
                    6f:4e:46:99:50:7f:57:a8:e1:09:9a:7b:dc:bf:5d:
                    19:03:c8:df:83:8e:41:e2:36:2b:3f:a8:b5:0d:28:
                    b6:fd:e0:c4:61:8e:61:6b:3a:a5:96:fc:93:10:41:
                    b7:eb:c8:3f:81:42:ee:c0:79:14:00:15:48:73:dd:
                    66:e1:4a:f1:d6:bc:69:e7:cb:9c:66:47:87:0e:c4:
                    4b:34:45:d4:f7:38:d8:51:cd:b6:d0:3e:db:f0:be:
                    cd:9a:a5:f2:3d:90:5a:42:c1:f1:3c:95:f5:99:96:
                    f0:68:06:9e:38:d8:3a:03:7b:63:1d:a3:83:be:20:
                    9e:11:76:3d:40:bb:bf:84:65:6a:61:90:72:72:b7:
                    bd:be:61:52:2f:82:ac:2d:7e:28:8e:12:c6:b6:17:
                    b9:a4:d4:01:7b:10:5b:f5:74:ae:40:cd:10:60:30:
                    b8:4c:23:d8:ba:8a:ab:93:68:c3:43:65:e8:13:54:
                    9a:08:61:c5:1b:00:5e:c8:8a:2d:69:fe:f3:c6:f3:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A7:03:F3:B4:0D:B6:05:F7:64:54:C2:93:A0:77:0E:B3:72:57:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.36.0/23
                  24.224.44.0/24
                  24.224.55.0-24.224.56.255
                  24.224.58.0-24.224.63.255
                  24.245.72.0/22
                  64.234.0.0/23
                  64.234.8.0/24
                  64.234.16.0/24
                  64.234.30.0/23
                  64.234.34.0/24
                  64.234.47.0/24
                  64.234.55.0/24
                  64.234.67.0-64.234.68.255
                  64.234.74.0/24
                  64.234.78.0/24
                  67.21.185.0/24
                  69.59.64.0/24
                  69.59.73.0/24
                  69.59.82.0/24
                  69.59.104.0/24
                  208.91.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:ee:79:08:04:24:ad:bd:c7:3c:20:08:eb:df:f0:76:ae:
         63:dc:d7:69:1e:c4:25:92:2d:73:53:9c:d7:70:2b:c6:a1:fa:
         cd:3d:f3:d3:43:38:ad:65:ae:96:48:9f:08:e5:e6:4f:ac:3e:
         ba:d4:79:1f:5c:3e:f6:d8:11:e0:7c:06:3d:11:fe:3e:02:f9:
         69:29:40:ca:c8:19:fa:be:58:7b:ac:bb:4f:f7:c0:8c:03:2c:
         de:1b:32:c0:d6:b9:f2:eb:9f:ea:9d:c3:30:c8:f5:50:9a:cd:
         99:55:ba:f4:06:40:6a:d4:23:a2:09:c9:0f:9a:b2:dd:f0:93:
         60:40:a0:54:cb:2e:a4:da:2a:ed:cd:61:cc:6f:9a:dc:77:60:
         bc:a7:e5:53:d9:9e:9b:34:cc:7f:b2:8f:bb:ca:4e:c4:72:79:
         03:7b:13:c6:36:72:1b:a2:9a:cb:e2:0e:3e:92:57:75:23:35:
         16:bf:9c:0b:e2:b2:ef:44:4e:2f:cb:ef:1b:0f:30:92:5d:23:
         02:c5:da:2f:27:f1:9a:f0:36:6f:c8:9d:d7:0c:78:e1:88:be:
         2c:1e:e4:cf:f1:fb:72:4d:78:54:c5:b9:d0:9f:d1:55:7f:25:
         ce:10:d5:a7:70:70:05:75:fe:62:fb:28:ab:65:8d:13:3e:84:
         54:15:12:30
-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWEWhXhpBq5cO2Ip+DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi
OGNjMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
Y2ZjNzkxZDgtODkxMC00OGQ1LTgxMzItNzJiYzBkYzNjMTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprglx6AIZeoe03YOxa4ljRz4CgAG7ysNvFtO
KRThgnZ99lXcrus0XuoUudwqJ34Bw+DVW6iLOPaWFupvTkaZUH9XqOEJmnvcv10Z
A8jfg45B4jYrP6i1DSi2/eDEYY5hazqllvyTEEG368g/gULuwHkUABVIc91m4Urx
1rxp58ucZkeHDsRLNEXU9zjYUc220D7b8L7NmqXyPZBaQsHxPJX1mZbwaAaeONg6
A3tjHaODviCeEXY9QLu/hGVqYZBycre9vmFSL4KsLX4ojhLGthe5pNQBexBb9XSu
QM0QYDC4TCPYuoqrk2jDQ2XoE1SaCGHFGwBeyIotaf7zxvPmswIDAQABo4ID6jCC
A+YwHQYDVR0OBBYEFHWnA/O0DbYF92RUwpOgdw6zcldcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh
YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvZWQyN2JkY2YtOWRiNy0z
OTZkLTlmNTAtNDc4NGVjMTJlOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw
NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx
YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm
MGJiMWI4Y2MuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAEY
4CQDBAAY4CwwDAMEABjgNwMEABjgODAMAwQBGOA6AwQGGOAAAwQCGPVIAwQBQOoA
AwQAQOoIAwQAQOoQAwQBQOoeAwQAQOoiAwQAQOovAwQAQOo3MAwDBABA6kMDBABA
6kQDBABA6koDBABA6k4DBABDFbkDBABFO0ADBABFO0kDBABFO1IDBABFO2gDBADQ
WzkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAiyzueQgEJK29xzwgCOvf8HauY9zXaR7EJZItc1Oc13ArxqH6
zT3z00M4rWWulkifCOXmT6w+utR5H1w+9tgR4HwGPRH+PgL5aSlAysgZ+r5Ye6y7
T/fAjAMs3hsywNa58uuf6p3DMMj1UJrNmVW69AZAatQjognJD5qy3fCTYECgVMsu
pNoq7c1hzG+a3HdgvKflU9memzTMf7KPu8pOxHJ5A3sTxjZyG6Kay+IOPpJXdSM1
Fr+cC+Ky70ROL8vvGw8wkl0jAsXaLyfxmvA2b8id1wx44Yi+LB7kz/H7ck14VMW5
0J/RVX8lzhDVp3BwBXX+Yvsoq2WNEz6EVBUSMA==
-----END CERTIFICATE-----
Generated at Sat May 18 01:40:49 2024 by rpki-client on console-fra.rpki-client.org