Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa
File:                     0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa (raw, json)
Hash identifier:          zboDCFuM1tc8JGZFteqZgY2Bhxy/7uPxwwJagpfF7EU=
Subject key identifier:   C5:8A:9E:E7:C9:02:30:4A:D1:CD:11:2C:FF:4A:AA:9A:6D:9A:0E:0B
Certificate issuer:       /CN=67961c8b-389c-46be-9541-ceac7d38b9aa
Certificate serial:       010D0C9F4328584733609AACD9A5957972B04E00
Authority key identifier: 29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     36105
IP address blocks:        159.117.48.0/20 maxlen: 24
                          204.80.112.0/20 maxlen: 24
                          216.243.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9a:ac:d9:a5:95:79:72:b0:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67961c8b-389c-46be-9541-ceac7d38b9aa
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=32312572-b25a-4605-bb41-9acbc66a29e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:7c:64:67:85:69:aa:ef:18:00:72:0b:fc:
                    0e:b8:be:c9:7f:7c:da:20:00:79:8d:2e:c8:7f:2c:
                    ca:af:a6:00:bd:d7:82:f0:ad:1f:18:9e:2c:1b:a4:
                    de:c2:ee:4f:4d:de:c1:ef:a9:6c:34:c0:0b:5a:bd:
                    01:e5:3e:2f:40:6d:70:b0:c4:7f:af:4f:e1:b9:06:
                    d8:5b:55:b3:7f:77:8d:95:c5:13:b9:7b:87:46:34:
                    19:3e:d9:de:88:6f:7a:a3:4b:98:68:d4:e0:04:b4:
                    b5:1a:f3:e2:ea:13:12:71:a5:f9:b5:f9:15:5e:22:
                    b8:12:b2:5d:78:8c:f9:8c:43:94:91:f7:12:95:7d:
                    da:71:da:53:dd:ae:f9:90:a3:af:18:0b:32:14:1a:
                    bb:a5:9c:87:7e:4e:f6:e7:5f:6a:38:b7:1a:d8:cf:
                    f2:3a:a3:04:61:18:2f:48:f2:9e:87:35:5f:c3:48:
                    0c:5e:55:99:1e:6e:dc:2c:9e:50:58:1c:fa:11:95:
                    14:42:ba:ce:c3:77:e8:ab:f7:4e:81:33:01:19:cb:
                    7c:38:64:6a:35:81:d9:8c:22:84:fc:76:7f:a3:14:
                    ec:bf:00:ca:b3:f2:39:1b:99:9e:2f:ec:49:ce:06:
                    8e:de:9c:bb:b8:4d:c3:4f:b7:44:f2:c9:c6:26:c3:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8A:9E:E7:C9:02:30:4A:D1:CD:11:2C:FF:4A:AA:9A:6D:9A:0E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl

            X509v3 Authority Key Identifier:
                keyid:29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.117.48.0/20
                  204.80.112.0/20
                  216.243.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:30:84:9b:5c:7e:e9:5a:cb:4e:e4:cd:46:6d:73:41:ef:87:
         4e:6c:38:83:38:c3:6a:6c:39:c6:f1:66:6b:51:fc:6b:3c:63:
         ee:ec:a4:bc:00:ff:b3:6f:e9:e2:be:97:5a:61:b4:48:63:db:
         3c:ab:c5:24:bd:78:4a:bf:b1:36:77:e4:99:7d:6f:39:fa:8a:
         7b:db:ca:5f:c1:bf:f6:e4:1f:cb:70:11:bf:14:fe:1f:b1:0b:
         cc:c6:c8:73:f2:4a:5d:7b:e7:cc:e2:3b:1c:e8:5d:bf:4a:7c:
         61:9a:d9:04:e8:6c:b2:85:2c:f9:55:f8:ec:12:cc:d2:b6:f0:
         0e:d5:4b:69:e7:95:5f:34:e9:06:45:50:a5:ce:b5:d2:1b:e1:
         6b:ea:05:59:f9:f7:97:d6:93:ca:24:76:e4:00:7d:34:ba:18:
         61:29:aa:cc:ff:ad:1d:77:f0:12:13:71:88:5e:c4:90:69:f0:
         b0:27:12:c5:2d:5f:d7:e8:8e:09:78:85:ad:a9:86:34:af:07:
         bf:f1:aa:2c:70:35:43:28:63:36:4a:23:c8:be:2e:cb:75:d2:
         a9:1e:a9:10:ee:7d:14:81:33:ce:06:a9:98:00:a5:a8:1d:c0:
         8d:72:ce:d8:6a:60:00:31:94:bc:76:bb:40:c1:b8:da:29:ae:
         c2:1d:d0:a9
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEczYJqs2aWVeXKwTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc5NjFjOGItMzg5Yy00NmJlLTk1NDEtY2VhYzdkMzhi
OWFhMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
MzIzMTI1NzItYjI1YS00NjA1LWJiNDEtOWFjYmM2NmEyOWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4J8ZGeFaarvGAByC/wOuL7Jf3zaIAB5jS7I
fyzKr6YAvdeC8K0fGJ4sG6Tewu5PTd7B76lsNMALWr0B5T4vQG1wsMR/r0/huQbY
W1Wzf3eNlcUTuXuHRjQZPtneiG96o0uYaNTgBLS1GvPi6hMScaX5tfkVXiK4ErJd
eIz5jEOUkfcSlX3acdpT3a75kKOvGAsyFBq7pZyHfk72519qOLca2M/yOqMEYRgv
SPKehzVfw0gMXlWZHm7cLJ5QWBz6EZUUQrrOw3foq/dOgTMBGct8OGRqNYHZjCKE
/HZ/oxTsvwDKs/I5G5meL+xJzgaO3py7uE3DT7dE8snGJsOV2QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFMWKnufJAjBK0c0RLP9Kqpptmg4LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Nzk2
MWM4Yi0zODljLTQ2YmUtOTU0MS1jZWFjN2QzOGI5YWEvMGE5OTBiMGUtNTVjMC0z
NmI0LWI2OGEtOGUxNTI5NjVjOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjc5NjFjOGItMzg5Yy00NmJlLTk1
NDEtY2VhYzdkMzhiOWFhLzY3OTYxYzhiLTM4OWMtNDZiZS05NTQxLWNlYWM3ZDM4
YjlhYS5jcmwwHwYDVR0jBBgwFoAUKUeUbce7w/Qg5Vgtj1rNN9wUu5AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82Nzk2MWM4Yi0zODljLTQ2YmUtOTU0MS1jZWFj
N2QzOGI5YWEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEn3UwAwQE
zFBwAwQE2PPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFwwhJtcfulay07kzUZtc0Hvh05sOIM4w2psOcbx
ZmtR/Gs8Y+7spLwA/7Nv6eK+l1phtEhj2zyrxSS9eEq/sTZ35Jl9bzn6invbyl/B
v/bkH8twEb8U/h+xC8zGyHPySl1758ziOxzoXb9KfGGa2QTobLKFLPlV+OwSzNK2
8A7VS2nnlV806QZFUKXOtdIb4WvqBVn595fWk8okduQAfTS6GGEpqsz/rR138BIT
cYhexJBp8LAnEsUtX9fojgl4ha2phjSvB7/xqixwNUMoYzZKI8i+Lst10qkeqRDu
fRSBM84GqZgApagdwI1yzthqYAAxlLx2u0DBuNoprsId0Kk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org