Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f50808c-ebea-3d81-8232-241c3f705a1e.roa
File:                     5f50808c-ebea-3d81-8232-241c3f705a1e.roa (raw, json)
Hash identifier:          Lb4uHWwpFikif4mWXop+fDe8/IYOn4cH5OG6uyyNQvQ=
Subject key identifier:   D3:0C:A5:A8:C5:E9:32:E1:77:06:FF:B1:DF:B9:86:35:32:3A:50:A4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858458719D6ADA0C463E39042A2C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f50808c-ebea-3d81-8232-241c3f705a1e.roa
Signing time:             Sat 13 Apr 2024 03:12:16 +0000
ROA not before:           Sat 13 Apr 2024 03:12:16 +0000
ROA not after:            Fri 12 Jul 2024 03:12:16 +0000
asID:                     5650
IP address blocks:        107.164.145.0/24 maxlen: 24
                          104.165.134.0/24 maxlen: 24
                          50.118.255.0/24 maxlen: 24
                          23.230.29.0/24 maxlen: 24
                          23.230.67.0/24 maxlen: 24
                          50.117.96.0/24 maxlen: 24
                          104.164.180.0/24 maxlen: 24
                          104.165.29.0/24 maxlen: 24
                          104.165.120.0/24 maxlen: 24
                          104.253.106.0/24 maxlen: 24
                          104.253.132.0/24 maxlen: 24
                          104.253.139.0/24 maxlen: 24
                          104.253.144.0/24 maxlen: 24
                          104.253.146.0/24 maxlen: 24
                          104.253.150.0/24 maxlen: 24
                          107.164.85.0/24 maxlen: 24
                          107.164.199.0/24 maxlen: 24
                          107.164.200.0/24 maxlen: 24
                          107.165.138.0/24 maxlen: 24
                          107.165.161.0/24 maxlen: 24
                          107.165.194.0/24 maxlen: 24
                          107.186.35.0/24 maxlen: 24
                          142.252.51.0/24 maxlen: 24
                          142.252.52.0/24 maxlen: 24
                          172.120.14.0/24 maxlen: 24
                          172.252.25.0/24 maxlen: 24
                          172.252.28.0/24 maxlen: 24
                          172.252.54.0/24 maxlen: 24
                          172.252.55.0/24 maxlen: 24
                          172.252.135.0/24 maxlen: 24
                          172.252.137.0/24 maxlen: 24
                          172.252.139.0/24 maxlen: 24
                          172.252.168.0/24 maxlen: 24
                          172.252.215.0/24 maxlen: 24
                          173.245.84.0/24 maxlen: 24
                          205.164.9.0/24 maxlen: 24
                          205.164.32.0/24 maxlen: 24
                          205.164.59.0/24 maxlen: 24
                          209.73.132.0/24 maxlen: 24
                          209.73.136.0/24 maxlen: 24
                          209.73.137.0/24 maxlen: 24
                          216.172.135.0/24 maxlen: 24
                          216.172.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:87:19:d6:ad:a0:c4:63:e3:90:42:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 03:12:16 2024 GMT
            Not After : Jul 12 03:12:16 2024 GMT
        Subject: CN=64b7e157-91b5-48b7-abab-921f7f4c8675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:ef:e7:ad:80:2d:4f:b8:70:4e:e7:1c:47:
                    15:a4:e3:e9:25:d2:fb:a8:32:ed:df:88:2a:cf:1e:
                    82:be:b1:d5:8e:4b:34:b2:52:f7:17:bf:d3:75:27:
                    1a:0f:95:f0:e5:43:36:4e:9a:8b:29:67:45:2f:48:
                    62:ed:6e:b4:bd:71:4a:b1:1c:7f:02:8a:ef:9e:31:
                    ed:a7:64:e9:a2:00:f0:f8:3e:1a:05:c1:4e:0f:9a:
                    63:2f:d4:74:bd:50:51:c1:d8:03:66:b8:f5:62:ab:
                    57:3e:c9:0d:0a:ff:70:ca:1d:b2:a5:86:16:9e:a8:
                    51:d6:8c:11:35:7c:7a:03:09:f1:3b:e5:2b:c3:39:
                    02:fb:64:21:68:c6:e5:fa:8b:23:84:83:58:6a:98:
                    e2:0c:31:9a:ae:e0:d9:ce:8b:b6:50:12:ae:21:18:
                    e9:84:fa:9c:7a:90:0c:19:0e:ab:8b:5c:d0:8c:92:
                    a5:a5:48:03:e0:c9:ae:3d:da:eb:a1:22:1a:59:c3:
                    fe:6b:87:0d:2a:46:c9:8c:0f:29:ef:3e:59:76:5e:
                    58:c1:d8:3c:62:1b:bc:0d:5d:77:f8:53:82:4a:9a:
                    f6:1d:13:ef:cf:65:d3:f5:32:e1:96:dd:93:91:93:
                    cd:80:08:fd:cd:e7:18:78:4c:1f:12:9d:bb:59:3a:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:A5:A8:C5:E9:32:E1:77:06:FF:B1:DF:B9:86:35:32:3A:50:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f50808c-ebea-3d81-8232-241c3f705a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.29.0/24
                  23.230.67.0/24
                  50.117.96.0/24
                  50.118.255.0/24
                  104.164.180.0/24
                  104.165.29.0/24
                  104.165.120.0/24
                  104.165.134.0/24
                  104.253.106.0/24
                  104.253.132.0/24
                  104.253.139.0/24
                  104.253.144.0/24
                  104.253.146.0/24
                  104.253.150.0/24
                  107.164.85.0/24
                  107.164.145.0/24
                  107.164.199.0-107.164.200.255
                  107.165.138.0/24
                  107.165.161.0/24
                  107.165.194.0/24
                  107.186.35.0/24
                  142.252.51.0-142.252.52.255
                  172.120.14.0/24
                  172.252.25.0/24
                  172.252.28.0/24
                  172.252.54.0/23
                  172.252.135.0/24
                  172.252.137.0/24
                  172.252.139.0/24
                  172.252.168.0/24
                  172.252.215.0/24
                  173.245.84.0/24
                  205.164.9.0/24
                  205.164.32.0/24
                  205.164.59.0/24
                  209.73.132.0/24
                  209.73.136.0/23
                  216.172.135.0/24
                  216.172.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:88:9f:d8:d8:94:96:61:21:ed:ea:06:0c:46:e5:dc:93:69:
         51:2b:6b:a5:7b:22:d2:b7:5f:b2:5d:f9:3d:9d:4c:8e:58:d1:
         ed:2b:61:28:2b:b8:19:a4:c2:bd:7d:8c:8b:0c:6d:42:75:4a:
         6b:05:2f:68:57:6b:41:9c:4f:09:0c:c8:e6:80:60:3f:b1:05:
         73:8f:b1:40:ad:b9:56:a0:c9:00:79:a3:93:e0:73:84:fa:85:
         ca:a6:87:13:b1:05:34:a2:5d:43:6b:60:7d:af:a1:72:94:12:
         58:cb:61:21:66:06:51:3a:74:47:c1:51:2a:0d:f1:ce:55:b8:
         bc:b6:dd:9b:83:a0:ac:f2:03:53:1b:e3:f4:a3:f2:77:e6:c6:
         0d:f7:f4:96:0a:83:c9:aa:fb:c1:ba:68:24:57:28:b8:0b:21:
         5c:f3:77:5e:7b:6b:b5:75:a5:7b:4e:3e:fa:23:8f:de:34:b8:
         0b:5f:71:e5:ab:67:6a:d9:26:8a:ef:54:20:89:98:dd:ca:42:
         18:95:49:22:b9:f9:57:26:84:f9:64:32:61:f9:f3:6c:ea:e5:
         47:44:f8:c5:24:fb:94:2e:60:1b:3f:20:24:85:c0:c8:24:68:
         c1:8f:34:cc:d2:d6:72:ec:84:82:a8:92:c8:34:24:fc:61:23:
         c9:4c:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:28 2024 by rpki-client on console-fra.rpki-client.org