Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
File:                     5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa (raw, json)
Hash identifier:          7Cmhogi+bRDfY8BEsWCYuqvBHaoLOK2lrXiTg3Xe4J0=
Subject key identifier:   24:46:96:E1:2C:F6:54:00:3E:94:94:77:0E:59:EF:21:F8:06:0F:BB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285848F65BD08E94C1F77171B151C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     21859
IP address blocks:        23.91.96.0/20 maxlen: 24
                          23.236.96.0/20 maxlen: 24
                          23.236.112.0/20 maxlen: 24
                          23.248.160.0/19 maxlen: 24
                          23.251.96.0/19 maxlen: 24
                          45.40.48.0/20 maxlen: 24
                          45.43.32.0/19 maxlen: 24
                          45.43.59.0/24 maxlen: 24
                          65.255.32.0/20 maxlen: 24
                          69.28.48.0/20 maxlen: 24
                          104.218.160.0/21 maxlen: 24
                          104.254.112.0/21 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.113.0/24 maxlen: 24
                          107.151.128.0/18 maxlen: 24
                          107.155.0.0/18 maxlen: 24
                          128.1.0.0/16 maxlen: 24
                          128.1.42.0/24 maxlen: 24
                          128.14.0.0/16 maxlen: 24
                          162.221.4.0/22 maxlen: 24
                          162.221.192.0/21 maxlen: 24
                          169.197.96.0/19 maxlen: 24
                          172.81.120.0/21 maxlen: 24
                          172.96.112.0/20 maxlen: 24
                          192.254.80.0/20 maxlen: 24
                          199.91.72.0/22 maxlen: 24
                          199.190.44.0/22 maxlen: 24
                          199.245.56.0/21 maxlen: 24
                          208.81.200.0/22 maxlen: 24
                          209.177.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d0:8e:94:c1:f7:71:71:b1:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=f77fc84d-a3db-45c8-b155-3e59a3bcf603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:20:ac:72:f8:19:9e:cf:d4:40:95:67:33:
                    8b:1c:53:3e:6f:0d:44:f2:d6:b0:45:a9:1f:f3:86:
                    d6:00:a4:ea:db:ee:d8:cf:db:44:95:de:b5:9e:9e:
                    32:fc:49:83:58:b4:7a:a0:83:b1:86:a3:ce:8c:7c:
                    66:71:91:f4:26:71:06:01:b9:44:0c:f8:4d:cb:81:
                    a0:24:65:51:ed:73:3c:4f:67:4e:98:16:8a:aa:63:
                    6e:f7:93:ae:bf:65:ae:78:e1:49:84:e5:e9:d6:5c:
                    7c:aa:33:80:01:07:04:2f:6c:7f:48:0b:9e:fa:c7:
                    92:8f:92:55:85:32:bf:05:48:b9:2a:1a:77:bf:d1:
                    14:11:ba:f6:ae:4a:e9:ff:24:3a:6d:a6:68:c3:68:
                    95:4f:fb:97:87:c1:6d:de:91:0a:a8:eb:88:15:8a:
                    cc:e8:86:12:b3:34:e6:fc:dc:66:0f:41:7f:d5:35:
                    87:92:57:71:33:66:24:45:4c:7c:9c:a3:93:16:8b:
                    18:30:2e:2e:59:20:41:09:73:b8:fd:f4:41:a8:0c:
                    31:06:60:a4:83:b0:fb:7a:81:b8:29:5e:54:65:bc:
                    22:c2:6b:d1:db:c1:2e:51:20:fe:68:ac:64:a5:4b:
                    6a:b9:4f:65:8a:b8:b0:fe:63:76:a3:f6:51:b7:e9:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:96:E1:2C:F6:54:00:3E:94:94:77:0E:59:EF:21:F8:06:0F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0/20
                  23.236.96.0/19
                  23.248.160.0/19
                  23.251.96.0/19
                  45.40.48.0/20
                  45.43.32.0/19
                  65.255.32.0/20
                  69.28.48.0/20
                  104.218.160.0/21
                  104.254.112.0/21
                  107.150.96.0/19
                  107.151.128.0/18
                  107.155.0.0/18
                  128.1.0.0/16
                  128.14.0.0/16
                  162.221.4.0/22
                  162.221.192.0/21
                  169.197.96.0/19
                  172.81.120.0/21
                  172.96.112.0/20
                  192.254.80.0/20
                  199.91.72.0/22
                  199.190.44.0/22
                  199.245.56.0/21
                  208.81.200.0/22
                  209.177.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:27:47:34:c6:ee:42:58:77:3c:d0:7c:3b:25:73:8f:ce:
         71:f1:a2:08:51:91:8d:81:ad:c0:75:4c:55:15:6e:d0:0e:0a:
         b3:75:fc:28:03:cc:27:25:f7:33:3f:5f:ca:f2:15:2e:bc:30:
         ec:58:54:48:d5:c3:a8:5c:77:96:aa:ff:0c:16:bc:a8:98:fa:
         bd:1d:4e:1e:98:72:8e:e0:da:1d:ea:57:71:42:14:21:8d:b3:
         11:2d:4b:30:55:95:b1:0d:f9:14:ad:b4:ad:dd:82:23:bf:00:
         e4:0e:17:a5:b8:e4:99:14:3a:d5:f6:06:ed:b3:9f:49:cc:77:
         01:f6:f9:1d:de:ba:fd:e6:c5:e1:86:a9:fa:94:7e:97:8f:25:
         a1:4c:0c:67:2c:4c:d2:89:bf:1d:ce:56:ba:14:31:ad:29:86:
         d2:fa:4d:47:80:6b:32:8b:90:a4:6a:f7:ac:72:00:c2:8e:bf:
         ac:af:87:68:67:32:bb:54:61:16:b8:b8:b0:b5:2e:cf:0b:9f:
         99:35:e8:16:d2:a6:18:9b:fc:8e:fa:ba:84:23:14:a6:fd:33:
         e8:34:c9:f1:ad:c9:1c:ba:3e:94:15:0a:81:fa:ca:f5:15:64:
         82:d0:a7:dd:6d:9c:64:7e:3e:95:0b:4c:b4:1d:69:9f:8c:0d:
         91:48:ea:33
-----BEGIN CERTIFICATE-----
MIIG3DCCBcSgAwIBAgIUAQ0Mn0MoWEj2W9COlMH3cXGxUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
Zjc3ZmM4NGQtYTNkYi00NWM4LWIxNTUtM2U1OWEzYmNmNjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna4grHL4GZ7P1ECVZzOLHFM+bw1E8tawRakf
84bWAKTq2+7Yz9tEld61np4y/EmDWLR6oIOxhqPOjHxmcZH0JnEGAblEDPhNy4Gg
JGVR7XM8T2dOmBaKqmNu95Ouv2WueOFJhOXp1lx8qjOAAQcEL2x/SAue+seSj5JV
hTK/BUi5Khp3v9EUEbr2rkrp/yQ6baZow2iVT/uXh8Ft3pEKqOuIFYrM6IYSszTm
/NxmD0F/1TWHkldxM2YkRUx8nKOTFosYMC4uWSBBCXO4/fRBqAwxBmCkg7D7eoG4
KV5UZbwiwmvR28EuUSD+aKxkpUtquU9liriw/mN2o/ZRt+nE3QIDAQABo4ID7jCC
A+owHQYDVR0OBBYEFCRGluEs9lQAPpSUdw5Z7yH4Bg+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNWRjYjJiYmMtZGU3Mi0z
YzQzLWFjOTQtYzU0OTYwMGYxZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAQX
W2ADBAUX7GADBAUX+KADBAUX+2ADBAQtKDADBAUtKyADBARB/yADBARFHDADBANo
2qADBANo/nADBAVrlmADBAZrl4ADBAZrmwADAwCAAQMDAIAOAwQCot0EAwQDot3A
AwQFqcVgAwQDrFF4AwQErGBwAwQEwP5QAwQCx1tIAwQCx74sAwQDx/U4AwQC0FHI
AwQE0bFQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAJu+J0c0xu5CWHc80Hw7JXOPznHxoghRkY2BrcB1TFUV
btAOCrN1/CgDzCcl9zM/X8ryFS68MOxYVEjVw6hcd5aq/wwWvKiY+r0dTh6Yco7g
2h3qV3FCFCGNsxEtSzBVlbEN+RSttK3dgiO/AOQOF6W45JkUOtX2Bu2zn0nMdwH2
+R3euv3mxeGGqfqUfpePJaFMDGcsTNKJvx3OVroUMa0phtL6TUeAazKLkKRq96xy
AMKOv6yvh2hnMrtUYRa4uLC1Ls8Ln5k16BbSphib/I76uoQjFKb9M+g0yfGtyRy6
PpQVCoH6yvUVZILQp91tnGR+PpULTLQdaZ+MDZFI6jM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:26 2025 by rpki-client