Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa
File:                     7172e1bb-e029-3c30-be5b-34e5b3610c59.roa (raw, json)
Hash identifier:          JTNBJjLAwhETzDfmDecpHoBJMoyFcYSp4LNe1wxo/Hw=
Subject key identifier:   73:B5:BA:8B:07:F6:36:86:A7:19:ED:17:08:F8:DB:C9:5C:41:2A:87
Certificate issuer:       /CN=576b0633-e844-4e36-85eb-6148d6321883
Certificate serial:       010D0C9F43285847C8D9E6C78AD3AAC0BC8ACB40
Authority key identifier: 2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     36012
IP address blocks:        66.178.160.0/20 maxlen: 24
                          69.9.128.0/19 maxlen: 24
                          74.51.16.0/20 maxlen: 24
                          139.60.24.0/21 maxlen: 24
                          162.244.36.0/22 maxlen: 24
                          162.247.40.0/21 maxlen: 24
                          216.115.0.0/20 maxlen: 24
                          2606:c800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e6:c7:8a:d3:aa:c0:bc:8a:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b0633-e844-4e36-85eb-6148d6321883
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=d6d13ae1-0301-48a6-b9df-4aff77925f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:f9:9e:3b:a4:11:47:1d:f5:26:72:35:4a:
                    b7:03:24:ab:54:f2:a5:7e:d6:65:29:07:89:3d:af:
                    a5:d7:ae:ee:87:e9:49:2e:fb:60:f0:97:b5:78:a7:
                    29:0f:77:55:09:b2:07:d3:bf:b5:48:8e:fc:ac:b2:
                    20:3a:3b:32:c7:91:7a:a0:9d:76:71:9a:cd:53:ad:
                    3c:ad:5d:35:83:e8:42:32:8a:b5:ca:86:39:19:a9:
                    7c:42:d3:ac:d4:71:dc:ad:b8:ea:99:cc:29:da:80:
                    ac:49:f6:d4:b7:77:53:ea:1b:d6:ee:dc:3c:68:ac:
                    f1:aa:3e:83:32:07:0e:22:cf:72:2f:95:15:1d:77:
                    e3:fa:2b:3f:82:57:a7:38:89:93:37:19:90:b1:e2:
                    ad:0c:15:22:37:01:37:90:db:f7:5a:49:66:94:25:
                    82:64:22:8b:09:80:01:63:8a:29:44:ea:00:a3:f3:
                    35:59:a8:f6:6b:93:8b:1f:44:af:0c:89:e9:20:6f:
                    07:85:3e:6e:38:2e:44:c3:7f:ed:10:51:9d:92:9e:
                    e5:5f:c2:75:10:0e:71:a3:63:1f:a9:1e:0e:9e:86:
                    8a:ec:28:e3:94:fc:1f:7d:73:19:85:4e:b1:95:16:
                    15:9a:31:23:12:e2:e0:a3:37:e1:bf:b5:ab:30:e9:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:BA:8B:07:F6:36:86:A7:19:ED:17:08:F8:DB:C9:5C:41:2A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.160.0/20
                  69.9.128.0/19
                  74.51.16.0/20
                  139.60.24.0/21
                  162.244.36.0/22
                  162.247.40.0/21
                  216.115.0.0/20
                IPv6:
                  2606:c800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:83:fd:9c:f5:d6:19:6f:68:d1:05:1b:ec:6a:73:ba:42:17:
         17:62:f1:5c:3b:a1:28:87:dd:1d:25:64:fa:d7:a4:71:51:80:
         8d:27:c4:94:a0:6b:43:f2:50:25:a5:2f:0e:c3:51:88:27:7c:
         d6:1d:aa:07:1e:4c:72:86:ac:86:1a:80:36:08:26:7b:bb:e1:
         1e:24:25:26:e6:2f:c8:18:d7:82:80:0c:fb:ec:dc:52:c8:f5:
         50:8c:bc:13:41:83:42:32:56:38:c5:2d:9a:44:6a:ca:51:02:
         d6:fc:4c:bb:cf:b3:bb:65:d3:0b:4d:da:74:54:c0:41:2c:7c:
         7b:df:0e:05:b1:0c:3f:0f:90:35:ac:74:b2:1b:a8:89:e4:09:
         88:bb:c6:9b:d2:00:e3:24:a6:b6:f5:6b:eb:0d:2d:2f:f5:65:
         ae:e7:fc:5a:e9:24:ee:9c:78:76:53:c5:34:fb:29:cc:35:38:
         02:0b:03:62:54:3a:77:53:30:ef:49:71:08:f7:c6:ca:a1:fd:
         64:8a:32:d7:8b:46:ab:a3:fc:54:fe:08:d1:b8:66:88:e3:dc:
         33:0e:6e:cc:a2:53:09:f4:c3:0c:72:2d:77:eb:bb:59:3b:c1:
         99:dd:f4:b9:31:7f:f5:35:a8:9c:f5:f7:8e:b7:a1:45:a5:32:
         d7:bf:d8:90
-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEfI2ebHitOqwLyKy0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc2YjA2MzMtZTg0NC00ZTM2LTg1ZWItNjE0OGQ2MzIx
ODgzMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
ZDZkMTNhZTEtMDMwMS00OGE2LWI5ZGYtNGFmZjc3OTI1ZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeP5njukEUcd9SZyNUq3AySrVPKlftZlKQeJ
Pa+l167uh+lJLvtg8Je1eKcpD3dVCbIH07+1SI78rLIgOjsyx5F6oJ12cZrNU608
rV01g+hCMoq1yoY5Gal8QtOs1HHcrbjqmcwp2oCsSfbUt3dT6hvW7tw8aKzxqj6D
MgcOIs9yL5UVHXfj+is/glenOImTNxmQseKtDBUiNwE3kNv3WklmlCWCZCKLCYAB
Y4opROoAo/M1Waj2a5OLH0SvDInpIG8HhT5uOC5Ew3/tEFGdkp7lX8J1EA5xo2Mf
qR4OnoaK7CjjlPwffXMZhU6xlRYVmjEjEuLgozfhv7WrMOkZdQIDAQABo4IDiDCC
A4QwHQYDVR0OBBYEFHO1uosH9jaGpxntFwj428lcQSqHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NzZi
MDYzMy1lODQ0LTRlMzYtODVlYi02MTQ4ZDYzMjE4ODMvNzE3MmUxYmItZTAyOS0z
YzMwLWJlNWItMzRlNWIzNjEwYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTc2YjA2MzMtZTg0NC00ZTM2LTg1
ZWItNjE0OGQ2MzIxODgzLzU3NmIwNjMzLWU4NDQtNGUzNi04NWViLTYxNDhkNjMy
MTg4My5jcmwwHwYDVR0jBBgwFoAULLXcVTZXq8SBeDNGYEmF2b1xG3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NzZiMDYzMy1lODQ0LTRlMzYtODVlYi02MTQ4
ZDYzMjE4ODMuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQrKgAwQF
RQmAAwQESjMQAwQDizwYAwQCovQkAwQDovcoAwQE2HMAMA0EAgACMAcDBQAmBsgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAiD/Zz11hlvaNEFG+xqc7pCFxdi8Vw7oSiH3R0lZPrXpHFRgI0n
xJSga0PyUCWlLw7DUYgnfNYdqgceTHKGrIYagDYIJnu74R4kJSbmL8gY14KADPvs
3FLI9VCMvBNBg0IyVjjFLZpEaspRAtb8TLvPs7tl0wtN2nRUwEEsfHvfDgWxDD8P
kDWsdLIbqInkCYi7xpvSAOMkprb1a+sNLS/1Za7n/FrpJO6ceHZTxTT7Kcw1OAIL
A2JUOndTMO9JcQj3xsqh/WSKMteLRquj/FT+CNG4Zojj3DMObsyiUwn0wwxyLXfr
u1k7wZnd9Lkxf/U1qJz19463oUWlMte/2JA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:22 2024 by rpki-client on console-ams.rpki-client.org