Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
File:                     a8952ba0-0688-3408-8645-ab4893961008.roa (raw, json)
Hash identifier:          8dtV+qBYqx1FTiXCQGW+BcG1EtNnhrLR++2R8ha628Q=
Subject key identifier:   DF:6D:FE:00:31:7B:4F:25:C5:B5:67:6F:7A:AC:77:CB:5C:5E:B6:7E
Certificate issuer:       /CN=b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2
Certificate serial:       010D0C9F43285847697D815E3DB7B4F5D45B5900
Authority key identifier: AF:75:BF:33:66:F7:25:5C:A3:1D:D0:6B:5A:46:83:50:13:EA:77:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
Signing time:             Wed 02 Oct 2024 22:12:42 +0000
ROA not before:           Wed 02 Oct 2024 22:12:42 +0000
ROA not after:            Tue 31 Dec 2024 23:12:42 +0000
asID:                     25844
IP address blocks:        162.90.0.0/16 maxlen: 16
                          162.90.0.0/22 maxlen: 22
                          162.90.1.0/24 maxlen: 24
                          162.90.96.0/24 maxlen: 24
                          162.90.97.0/24 maxlen: 24
                          162.90.98.0/24 maxlen: 24
                          162.90.99.0/24 maxlen: 24
                          162.90.112.0/24 maxlen: 24
                          162.90.114.0/24 maxlen: 24
                          162.90.116.0/24 maxlen: 24
                          162.90.118.0/24 maxlen: 24
                          162.90.144.0/20 maxlen: 20
                          162.90.160.0/20 maxlen: 20
                          162.90.176.0/20 maxlen: 20
                          162.90.192.0/20 maxlen: 20
                          162.90.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:7d:81:5e:3d:b7:b4:f5:d4:5b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2
        Validity
            Not Before: Oct  2 22:12:42 2024 GMT
            Not After : Dec 31 23:12:42 2024 GMT
        Subject: CN=55df3c9d-e971-4772-b157-db98ea19f200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0b:be:e1:05:97:be:6b:01:27:46:6c:d7:18:
                    8b:52:77:2b:35:aa:2e:0a:d7:2e:b3:48:04:dc:d2:
                    2c:87:83:73:6d:aa:38:08:3b:4a:5a:b7:79:e6:2d:
                    2f:fa:22:ac:51:22:d9:be:79:8d:f4:1b:1b:a1:6d:
                    df:f6:b0:33:75:f8:71:a4:4a:ed:41:89:12:86:cd:
                    0c:79:a3:e3:2b:02:49:28:67:09:93:ea:0b:67:0b:
                    62:80:3b:6a:9c:57:93:33:e8:1f:97:e4:36:16:2d:
                    79:fa:7d:ce:00:74:fb:4d:2d:88:73:c3:7b:ab:1d:
                    6c:74:69:c8:77:fc:a8:8b:02:bc:eb:ea:95:17:7b:
                    7e:3d:a4:b6:21:ce:e1:39:2f:94:88:d6:1d:1d:5f:
                    4d:b9:d3:ef:6d:8b:bd:d2:8a:53:28:c8:a3:3c:8c:
                    36:ab:95:73:b7:2e:f3:78:11:b5:34:fe:5e:74:22:
                    43:eb:b7:68:e9:51:c3:26:46:2e:a2:59:13:f2:36:
                    9f:91:83:7d:91:24:3e:53:54:7b:9a:24:3d:fd:db:
                    e0:a7:56:db:2f:46:e6:fb:2f:ff:46:11:23:d7:58:
                    16:b7:10:19:b7:9a:e6:50:b1:34:68:87:14:0a:06:
                    ac:9b:a7:66:91:d5:2e:05:d1:c0:31:ef:16:c0:4c:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:FE:00:31:7B:4F:25:C5:B5:67:6F:7A:AC:77:CB:5C:5E:B6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:75:BF:33:66:F7:25:5C:A3:1D:D0:6B:5A:46:83:50:13:EA:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9f:25:ec:c9:1f:51:90:01:91:91:48:9a:11:ef:0f:f1:f8:
         0b:61:ef:f7:a2:65:0a:ac:4a:14:50:c0:cd:df:b5:bc:0b:ef:
         1a:14:68:56:0e:db:b7:80:15:b0:14:50:9f:07:8c:da:b9:0e:
         73:bb:2c:39:f2:f2:ad:8a:b8:18:a3:91:fb:a6:e4:d5:6d:7b:
         89:ed:dc:e5:74:ee:47:63:8e:4a:75:60:c1:34:a7:38:75:6f:
         8c:67:f6:ce:c8:f1:7a:3a:0c:e2:c2:77:e8:8c:81:54:b3:af:
         4b:fe:45:57:6f:ac:57:56:ba:2b:1b:7a:a4:9c:7c:85:e8:ce:
         13:b8:d4:8e:68:8d:03:44:d4:7d:29:a9:c1:da:ac:25:fb:ba:
         e6:17:0e:3f:61:af:04:a2:67:3b:9b:03:c5:f3:dd:eb:b0:18:
         b7:1d:fd:f2:01:02:02:d5:3c:ab:af:b6:c3:df:b0:3e:02:5b:
         83:f2:cd:8a:30:1d:fc:86:7b:43:42:ee:0d:48:73:78:b9:eb:
         68:ec:dd:85:03:f7:62:45:5a:4a:ae:2b:67:f9:ca:ee:86:9b:
         cc:1a:c5:c2:af:2e:8e:b0:76:9b:36:58:34:28:63:81:18:af:
         df:43:97:fa:2b:58:1f:c3:ca:dd:b2:b3:f3:4f:22:48:32:19:
         09:f2:c0:90
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdpfYFePbe09dRbWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc3ZWMyYTItNWI2OS00ZmRlLWE4M2UtZDVmOGFlMDIz
MWIyMB4XDTI0MTAwMjIyMTI0MloXDTI0MTIzMTIzMTI0MlowLzEtMCsGA1UEAxMk
NTVkZjNjOWQtZTk3MS00NzcyLWIxNTctZGI5OGVhMTlmMjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gu+4QWXvmsBJ0Zs1xiLUncrNaouCtcus0gE
3NIsh4Nzbao4CDtKWrd55i0v+iKsUSLZvnmN9BsboW3f9rAzdfhxpErtQYkShs0M
eaPjKwJJKGcJk+oLZwtigDtqnFeTM+gfl+Q2Fi15+n3OAHT7TS2Ic8N7qx1sdGnI
d/yoiwK86+qVF3t+PaS2Ic7hOS+UiNYdHV9NudPvbYu90opTKMijPIw2q5Vzty7z
eBG1NP5edCJD67do6VHDJkYuolkT8jafkYN9kSQ+U1R7miQ9/dvgp1bbL0bm+y//
RhEj11gWtxAZt5rmULE0aIcUCgasm6dmkdUuBdHAMe8WwEz5WwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN9t/gAxe08lxbVnb3qsd8tcXrZ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iNzdl
YzJhMi01YjY5LTRmZGUtYTgzZS1kNWY4YWUwMjMxYjIvYTg5NTJiYTAtMDY4OC0z
NDA4LTg2NDUtYWI0ODkzOTYxMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjc3ZWMyYTItNWI2OS00ZmRlLWE4
M2UtZDVmOGFlMDIzMWIyL2I3N2VjMmEyLTViNjktNGZkZS1hODNlLWQ1ZjhhZTAy
MzFiMi5jcmwwHwYDVR0jBBgwFoAUr3W/M2b3JVyjHdBrWkaDUBPqd54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iNzdlYzJhMi01YjY5LTRmZGUtYTgzZS1kNWY4
YWUwMjMxYjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAolowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYp8l7MkfUZABkZFImhHvD/H4C2Hv96JlCqxKFFDAzd+1vAvvGhRoVg7b
t4AVsBRQnweM2rkOc7ssOfLyrYq4GKOR+6bk1W17ie3c5XTuR2OOSnVgwTSnOHVv
jGf2zsjxejoM4sJ36IyBVLOvS/5FV2+sV1a6Kxt6pJx8hejOE7jUjmiNA0TUfSmp
wdqsJfu65hcOP2GvBKJnO5sDxfPd67AYtx398gECAtU8q6+2w9+wPgJbg/LNijAd
/IZ7Q0LuDUhzeLnraOzdhQP3YkVaSq4rZ/nK7oabzBrFwq8ujrB2mzZYNChjgRiv
30OX+itYH8PK3bKz808iSDIZCfLAkA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:30 2024 by rpki-client on console-ams.rpki-client.org