Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a15c9c0c-1fd6-3e77-92b5-2f5457198f3c.roa
File:                     a15c9c0c-1fd6-3e77-92b5-2f5457198f3c.roa (download)
Hash identifier:          P7XLKr9XNPFxxNanmzOrWUv9H6O5CXXpJy3aRnKkwhU=
Subject key identifier:   D5:B2:52:61:DB:52:A1:BD:9F:40:A7:FF:78:6B:2B:FE:99:F8:99:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583CB6A0B62ACECF7DF738CD6060
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a15c9c0c-1fd6-3e77-92b5-2f5457198f3c.roa
ROA valid until:          Apr 29 04:00:00 2024 GMT
asID:                     1239
IP address blocks:
    1: 107.165.224.0/24 maxlen: 24
    2: 107.165.176.0/24 maxlen: 24
    3: 107.165.219.0/24 maxlen: 24
    4: 107.164.213.0/24 maxlen: 24
    5: 107.164.146.0/24 maxlen: 24
    6: 107.164.151.0/24 maxlen: 24
    7: 142.111.5.0/24 maxlen: 24
    8: 142.111.187.0/24 maxlen: 24
    9: 107.164.207.0/24 maxlen: 24
   10: 107.165.136.0/24 maxlen: 24
   11: 107.165.182.0/24 maxlen: 24
   12: 107.165.221.0/24 maxlen: 24
   13: 107.165.253.0/24 maxlen: 24
   14: 107.165.254.0/24 maxlen: 24
   15: 107.186.0.0/24 maxlen: 24
   16: 107.186.29.0/24 maxlen: 24
   17: 107.186.86.0/24 maxlen: 24
   18: 107.186.157.0/24 maxlen: 24
   19: 107.186.194.0/24 maxlen: 24
   20: 107.186.196.0/24 maxlen: 24
   21: 107.186.203.0/24 maxlen: 24
   22: 107.187.45.0/24 maxlen: 24
   23: 107.187.108.0/24 maxlen: 24
   24: 136.0.78.0/24 maxlen: 24
   25: 136.0.88.0/24 maxlen: 24
   26: 136.0.92.0/24 maxlen: 24
   27: 136.0.108.0/24 maxlen: 24
   28: 136.0.199.0/24 maxlen: 24
   29: 136.0.206.0/24 maxlen: 24
   30: 136.0.241.0/24 maxlen: 24
   31: 136.0.248.0/24 maxlen: 24
   32: 136.0.251.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b6:a0:b6:2a:ce:cf:7d:f7:38:cd:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Apr 29 04:00:00 2024 GMT
        Subject: CN=d749fcaf-6c56-4d55-923c-3430837bb582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:ea:e8:ad:38:f6:b5:38:6c:3b:bb:47:a2:
                    32:8d:5a:ae:5b:cc:8f:6e:90:64:13:fc:4f:d4:a4:
                    13:a9:24:50:c0:db:a2:cb:51:d3:ff:bd:b0:8a:a6:
                    a4:44:e3:72:93:c3:25:d7:ed:54:ad:4c:fd:ac:24:
                    8a:01:7f:49:ca:04:87:1d:a2:6d:ab:9b:03:e3:81:
                    b4:25:7c:f3:2c:c0:00:67:b2:cd:7d:ec:23:6e:b9:
                    ae:6d:4a:b2:4c:b4:90:70:09:d8:37:4c:24:5e:ca:
                    10:5d:c8:56:d0:e6:d8:08:32:db:fc:24:74:80:a4:
                    b1:29:36:a3:0b:78:88:c1:3b:e1:8f:18:bc:f4:e5:
                    3c:25:b4:47:61:0f:1f:92:88:6a:7c:72:5b:d5:ad:
                    21:ba:63:0f:7c:56:18:08:d1:a4:c1:2d:4b:0a:28:
                    9d:47:1c:7d:6c:92:c6:e5:1b:74:10:07:e1:c0:49:
                    30:e0:58:be:a0:92:b0:fa:b3:2d:52:04:7c:95:dc:
                    7f:98:7d:24:8e:3f:cb:fb:c7:ed:47:32:2a:80:81:
                    60:76:8f:29:1a:65:c6:f2:a9:0b:06:36:89:c7:03:
                    bf:3f:c4:75:75:84:1b:4e:eb:19:d2:53:89:92:91:
                    e2:d8:cb:3c:97:dc:34:00:36:d8:5e:d7:bd:ea:27:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:B2:52:61:DB:52:A1:BD:9F:40:A7:FF:78:6B:2B:FE:99:F8:99:9D
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a15c9c0c-1fd6-3e77-92b5-2f5457198f3c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier: 
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.146.0/24
                  107.164.151.0/24
                  107.164.207.0/24
                  107.164.213.0/24
                  107.165.136.0/24
                  107.165.176.0/24
                  107.165.182.0/24
                  107.165.219.0/24
                  107.165.221.0/24
                  107.165.224.0/24
                  107.165.253.0-107.165.254.255
                  107.186.0.0/24
                  107.186.29.0/24
                  107.186.86.0/24
                  107.186.157.0/24
                  107.186.194.0/24
                  107.186.196.0/24
                  107.186.203.0/24
                  107.187.45.0/24
                  107.187.108.0/24
                  136.0.78.0/24
                  136.0.88.0/24
                  136.0.92.0/24
                  136.0.108.0/24
                  136.0.199.0/24
                  136.0.206.0/24
                  136.0.241.0/24
                  136.0.248.0/24
                  136.0.251.0/24
                  142.111.5.0/24
                  142.111.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:66:fd:41:db:76:b0:e0:41:08:d6:f8:45:d7:63:a1:e6:91:
         32:19:7e:cc:0a:2f:48:3f:8b:4d:c3:65:3c:ae:b1:01:7d:01:
         78:29:49:6d:ab:98:e1:8f:95:64:43:83:66:fd:61:30:b3:58:
         cd:fe:a5:56:85:b9:d0:c1:09:4b:d4:3c:91:06:22:77:2d:a1:
         76:ca:a9:15:14:e2:cb:3f:56:ad:7b:59:9d:6e:02:1e:32:9c:
         08:27:c9:af:27:22:d8:bd:b8:cf:dd:40:64:d3:de:f8:06:dd:
         f7:8e:e1:1e:bf:7d:6f:2b:9f:c2:58:be:bc:ce:f0:6e:a3:88:
         34:a6:f4:5e:4c:f1:7a:61:2c:a7:a2:bf:9f:45:27:e7:b1:b6:
         ea:aa:17:79:b6:ac:2c:0d:89:8f:9a:f2:06:4d:3d:36:bf:73:
         cb:6d:95:bd:cf:18:da:43:f8:b3:9e:b3:0a:b5:8b:f4:e2:24:
         32:f6:d8:e6:b9:12:b5:9f:4d:6b:b9:c2:11:07:89:c1:4a:74:
         72:6a:d9:aa:47:b2:f6:24:07:56:52:28:be:00:cd:b1:33:72:
         f6:5e:2e:42:e1:6b:08:67:d6:45:39:60:c4:ae:7c:26:03:21:
         16:67:e2:8c:87:37:c9:0f:d5:0b:4d:a7:14:19:c4:1b:ed:de:
         7a:ff:3c:f7
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWDy2oLYqzs999zjNYGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTI0MDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDc0OWZjYWYtNmM1Ni00ZDU1LTkyM2MtMzQzMDgzN2JiNTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiDq6K049rU4bDu7R6IyjVquW8yPbpBkE/xP
1KQTqSRQwNuiy1HT/72wiqakRONyk8Ml1+1UrUz9rCSKAX9JygSHHaJtq5sD44G0
JXzzLMAAZ7LNfewjbrmubUqyTLSQcAnYN0wkXsoQXchW0ObYCDLb/CR0gKSxKTaj
C3iIwTvhjxi89OU8JbRHYQ8fkohqfHJb1a0humMPfFYYCNGkwS1LCiidRxx9bJLG
5Rt0EAfhwEkw4Fi+oJKw+rMtUgR8ldx/mH0kjj/L+8ftRzIqgIFgdo8pGmXG8qkL
BjaJxwO/P8R1dYQbTusZ0lOJkpHi2Ms8l9w0ADbYXte96icMdQIDAQABo4IEFjCC
BBIwHQYDVR0OBBYEFNWyUmHbUqG9n0Cn/3hrK/6Z+JmdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTE1YzljMGMtMWZkNi0z
ZTc3LTkyYjUtMmY1NDU3MTk4ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBABr
pJIDBABrpJcDBABrpM8DBABrpNUDBABrpYgDBABrpbADBABrpbYDBABrpdsDBABr
pd0DBABrpeAwDAMEAGul/QMEAGul/gMEAGu6AAMEAGu6HQMEAGu6VgMEAGu6nQME
AGu6wgMEAGu6xAMEAGu6ywMEAGu7LQMEAGu7bAMEAIgATgMEAIgAWAMEAIgAXAME
AIgAbAMEAIgAxwMEAIgAzgMEAIgA8QMEAIgA+AMEAIgA+wMEAI5vBQMEAI5vuzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB4Zv1B23aw4EEI1vhF12Oh5pEyGX7MCi9IP4tNw2U8rrEBfQF4KUlt
q5jhj5VkQ4Nm/WEws1jN/qVWhbnQwQlL1DyRBiJ3LaF2yqkVFOLLP1ate1mdbgIe
MpwIJ8mvJyLYvbjP3UBk0974Bt33juEev31vK5/CWL68zvBuo4g0pvReTPF6YSyn
or+fRSfnsbbqqhd5tqwsDYmPmvIGTT02v3PLbZW9zxjaQ/iznrMKtYv04iQy9tjm
uRK1n01rucIRB4nBSnRyatmqR7L2JAdWUii+AM2xM3L2Xi5C4WsIZ9ZFOWDErnwm
AyEWZ+KMhzfJD9ULTacUGcQb7d56/zz3
-----END CERTIFICATE-----
Generated at Thu Dec 8 09:11:59 2022 by rpki-client.