Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa
File:                     70dd68fe-7e33-3081-a8a1-918560928fca.roa (raw, json)
Hash identifier:          em+RWn1TJk+2ZQm+3BI8xGxbRFvFKT3KO72K37kpPhM=
Subject key identifier:   6F:BC:D5:BB:0B:CA:86:DD:D9:2E:00:AA:A0:04:67:C0:25:3A:0F:98
Certificate issuer:       /CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
Certificate serial:       010D0C9F43285847DAFF5DB4E8149BC022947E80
Authority key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa
Signing time:             Tue 12 Nov 2024 14:00:40 +0000
ROA not before:           Tue 12 Nov 2024 14:00:40 +0000
ROA not after:            Mon 10 Feb 2025 14:00:40 +0000
asID:                     396872
IP address blocks:        23.132.224.0/24 maxlen: 24
                          23.132.225.0/24 maxlen: 24
                          142.202.24.0/22 maxlen: 24
                          155.254.200.0/22 maxlen: 24
                          170.205.44.0/22 maxlen: 24
                          216.39.236.0/22 maxlen: 24
                          2602:fe65::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:ff:5d:b4:e8:14:9b:c0:22:94:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
        Validity
            Not Before: Nov 12 14:00:40 2024 GMT
            Not After : Feb 10 14:00:40 2025 GMT
        Subject: CN=e84564f5-9d12-465f-b2a4-e1b956ad322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:14:ed:86:da:a4:48:d1:90:86:b6:97:ba:
                    ff:1c:68:14:7a:c9:08:5c:c2:2c:ca:4d:49:2e:23:
                    fe:19:d4:9c:e2:4f:fc:51:d2:92:2e:be:a5:f1:41:
                    f0:53:67:39:65:98:72:cb:9c:fa:cd:d4:84:a0:8d:
                    72:77:b3:50:bc:3b:27:4c:95:4a:0f:0d:b0:35:9e:
                    31:82:1b:be:87:13:ef:82:45:27:62:e1:68:aa:35:
                    80:b2:bb:65:d9:c5:c4:45:86:f6:4d:26:0f:54:5a:
                    85:3c:63:57:a5:bf:d0:b7:94:62:96:87:a3:1b:f7:
                    70:03:48:36:5c:ad:83:15:fe:96:b2:af:5f:0e:d6:
                    66:cb:ee:df:34:e1:74:af:bf:87:84:1e:43:88:b9:
                    8b:c1:d7:5b:5c:92:48:45:59:94:53:a3:fd:b5:15:
                    42:d7:00:38:a9:06:4f:72:cd:90:2b:49:64:55:d8:
                    29:bd:0d:e9:60:65:b1:23:59:db:3f:39:bb:9d:c3:
                    bd:20:ac:4c:74:03:32:51:61:58:7d:ed:62:91:34:
                    57:68:e9:15:9c:cf:6e:63:7d:cc:f4:99:ec:4c:6e:
                    76:4a:3e:50:46:c8:9b:56:a7:e6:dd:96:cf:d7:b1:
                    b1:20:8f:de:4e:a4:6c:3e:2f:2e:62:f8:0e:a7:b1:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:D5:BB:0B:CA:86:DD:D9:2E:00:AA:A0:04:67:C0:25:3A:0F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl

            X509v3 Authority Key Identifier:
                keyid:BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.224.0/23
                  142.202.24.0/22
                  155.254.200.0/22
                  170.205.44.0/22
                  216.39.236.0/22
                IPv6:
                  2602:fe65::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:14:11:32:54:ba:84:bd:fc:83:9f:34:68:73:32:2e:fc:
         9b:66:ae:bd:b6:9b:80:7b:c8:7c:9f:f0:6a:03:0b:e0:cc:dd:
         4f:c5:bf:00:c8:43:ea:39:22:ab:0c:13:be:99:24:04:78:7e:
         6a:74:5c:31:14:5b:15:76:13:d3:ac:6e:41:4e:b3:5c:9b:93:
         93:7c:0f:28:29:52:5f:bb:8f:66:65:ea:57:14:cc:44:58:e9:
         62:5d:bd:bd:6e:71:45:ad:0a:c3:f4:0b:ec:1a:f1:41:63:7a:
         6a:21:86:f3:86:e0:6f:02:f8:a4:1a:5d:04:30:81:48:24:60:
         b6:0a:c9:b8:65:da:b1:77:89:a7:4d:4c:88:52:1c:b0:7e:82:
         6f:de:e7:04:57:d7:8c:f4:f2:df:e4:07:10:f6:41:bf:87:2d:
         69:3e:be:73:7d:51:1a:81:17:7a:cd:d8:eb:c9:ef:83:05:5a:
         2a:28:14:b8:48:9b:de:80:98:1d:52:22:a4:ba:de:8b:df:45:
         b7:f5:35:4e:49:f7:ce:57:30:a3:87:1f:41:ec:09:cb:b5:aa:
         24:08:e2:f5:8e:54:ca:1f:38:42:ec:9a:18:39:de:6d:61:fb:
         e9:f7:b8:95:d2:3c:2e:be:0a:78:83:f2:52:8d:6d:8c:71:2d:
         9d:d8:d7:81
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEfa/1206BSbwCKUfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFiZDUtNzczMjllN2Rm
ZmQ1MB4XDTI0MTExMjE0MDA0MFoXDTI1MDIxMDE0MDA0MFowLzEtMCsGA1UEAxMk
ZTg0NTY0ZjUtOWQxMi00NjVmLWIyYTQtZTFiOTU2YWQzMjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hkU7YbapEjRkIa2l7r/HGgUeskIXMIsyk1J
LiP+GdSc4k/8UdKSLr6l8UHwU2c5ZZhyy5z6zdSEoI1yd7NQvDsnTJVKDw2wNZ4x
ghu+hxPvgkUnYuFoqjWAsrtl2cXERYb2TSYPVFqFPGNXpb/Qt5RiloejG/dwA0g2
XK2DFf6Wsq9fDtZmy+7fNOF0r7+HhB5DiLmLwddbXJJIRVmUU6P9tRVC1wA4qQZP
cs2QK0lkVdgpvQ3pYGWxI1nbPzm7ncO9IKxMdAMyUWFYfe1ikTRXaOkVnM9uY33M
9JnsTG52Sj5QRsibVqfm3ZbP17GxII/eTqRsPi8uYvgOp7GI8QIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFG+81bsLyobd2S4AqqAEZ8AlOg+YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMDhk
ZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3ZGZmZDUvNzBkZDY4ZmUtN2UzMy0z
MDgxLWE4YTEtOTE4NTYwOTI4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFi
ZDUtNzczMjllN2RmZmQ1L2QwOGRlN2NiLWU2N2YtNGY2ZS1hYmQ1LTc3MzI5ZTdk
ZmZkNS5jcmwwHwYDVR0jBBgwFoAUuyRRy9dQ7hcsOzFdv4xB/fqWLMowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMy
OWU3ZGZmZDUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF4TgAwQC
jsoYAwQCm/7IAwQCqs0sAwQC2CfsMA4EAgACMAgDBgQmAv5lADBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCc
dxQRMlS6hL38g580aHMyLvybZq69tpuAe8h8n/BqAwvgzN1Pxb8AyEPqOSKrDBO+
mSQEeH5qdFwxFFsVdhPTrG5BTrNcm5OTfA8oKVJfu49mZepXFMxEWOliXb29bnFF
rQrD9AvsGvFBY3pqIYbzhuBvAvikGl0EMIFIJGC2Csm4Zdqxd4mnTUyIUhywfoJv
3ucEV9eM9PLf5AcQ9kG/hy1pPr5zfVEagRd6zdjrye+DBVoqKBS4SJvegJgdUiKk
ut6L30W39TVOSffOVzCjhx9B7AnLtaokCOL1jlTKHzhC7JoYOd5tYfvp97iV0jwu
vgp4g/JSjW2McS2d2NeB
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:23 2024 by rpki-client on console-fra.rpki-client.org