Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa
File:                     8d49b5f3-420f-3eb8-b537-40a6e2988035.roa (raw, json)
Hash identifier:          5Nbfm/JB82HkCyn0SRYiev40oOZc/wm7/9Xf7DJmSJ0=
Subject key identifier:   7F:87:38:DC:E0:77:B0:EB:A3:48:51:28:8F:CD:1B:74:AC:A4:92:31
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858477396582693C9B28DBDD093C0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     13213
IP address blocks:        209.95.32.0/20 maxlen: 24
                          209.95.48.0/23 maxlen: 24
                          209.95.53.0/24 maxlen: 24
                          209.95.54.0/23 maxlen: 24
                          209.95.56.0/24 maxlen: 24
                          209.95.58.0/23 maxlen: 24
                          209.95.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:58:26:93:c9:b2:8d:bd:d0:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=e9ae2dda-a5b9-4e4c-a390-7a4173417104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:d0:af:4c:a9:67:f1:da:ed:6c:37:ee:ba:
                    88:40:c9:be:85:ec:5c:65:54:bb:51:82:81:b2:5d:
                    c3:be:b5:7b:f2:dc:d0:ec:8f:a4:84:a1:9f:31:d7:
                    85:b0:e6:9c:b5:4e:3b:f4:bb:5e:ef:fc:3a:11:a5:
                    12:8c:9a:0c:bd:8c:25:3e:ed:1c:d7:25:cc:c2:7f:
                    d0:17:ec:fb:7f:96:bf:22:fc:c4:45:50:ab:b0:81:
                    e3:07:0c:28:eb:2e:ed:6b:57:ea:09:71:c5:c7:64:
                    e7:c6:ad:a1:bd:df:7c:1f:56:70:91:bd:12:b6:96:
                    10:e6:ec:4c:67:f7:da:ec:05:0f:6d:5d:3b:99:c3:
                    76:a3:27:89:d5:1b:bd:83:26:1e:0a:2c:d2:7b:50:
                    1d:4d:d4:a9:77:6b:80:99:ab:27:57:0a:63:75:25:
                    35:bb:a6:cf:0b:58:4f:e3:ff:59:49:8d:a6:55:37:
                    d5:21:a1:09:20:dc:8c:ba:6b:1c:ac:c2:0a:a2:66:
                    33:88:b5:27:11:93:16:7a:0d:30:f3:48:d7:81:a2:
                    fb:05:c4:7a:c2:f8:1a:f9:56:cb:77:d2:af:3b:ec:
                    9a:73:db:4c:6b:9c:1b:04:8e:de:20:97:2b:5d:34:
                    34:9e:82:b8:f1:52:ad:73:9c:dc:28:c2:d3:42:6f:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:87:38:DC:E0:77:B0:EB:A3:48:51:28:8F:CD:1B:74:AC:A4:92:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.95.32.0-209.95.49.255
                  209.95.53.0-209.95.56.255
                  209.95.58.0/23
                  209.95.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:37:9a:7f:cf:93:fa:b7:d3:7c:e5:57:85:fd:95:03:7b:
         d4:3c:6d:88:e7:37:72:2f:9f:fd:d2:68:e6:e0:9d:74:d6:2f:
         8d:2d:e7:33:8c:41:e8:c2:23:05:82:61:34:9a:f0:c1:f5:4a:
         00:b0:ab:34:f4:f2:12:9f:e2:2d:ee:47:dc:66:f4:22:ed:36:
         b5:0b:d5:d1:91:22:7d:2c:c4:5d:35:27:f2:3c:15:48:f4:0a:
         4b:a0:7f:3c:aa:61:b4:db:bf:fd:e9:6c:62:56:b8:63:67:2f:
         3f:ff:28:3c:9b:7f:c2:6b:77:af:f4:cd:71:8b:49:dd:15:63:
         b4:03:9c:43:38:16:f7:c0:66:b5:7f:cd:09:2d:3c:89:62:94:
         44:bc:3e:61:51:b8:97:b3:fb:61:ca:f2:29:29:9c:e0:cd:46:
         c8:e7:65:8e:15:31:fe:f6:6c:b1:0a:e7:40:b5:35:1c:44:2e:
         d8:1e:91:d2:a8:bf:b1:ce:8d:3f:9c:6a:37:9a:4e:6b:91:25:
         d6:8d:1e:95:e3:cd:3a:d6:db:d0:e9:42:9a:15:01:79:79:87:
         8c:54:4f:68:76:0f:a6:0a:5f:6b:56:51:63:13:ce:78:8f:ba:
         b6:dc:be:8a:9e:a1:19:88:47:4e:4b:7f:79:8d:d4:81:d9:ea:
         c8:87:c5:a4
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEdzllgmk8myjb3Qk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTlhZTJkZGEtYTViOS00ZTRjLWEzOTAtN2E0MTczNDE3MTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLXQr0ypZ/Ha7Ww37rqIQMm+hexcZVS7UYKB
sl3DvrV78tzQ7I+khKGfMdeFsOactU479Lte7/w6EaUSjJoMvYwlPu0c1yXMwn/Q
F+z7f5a/IvzERVCrsIHjBwwo6y7ta1fqCXHFx2Tnxq2hvd98H1Zwkb0StpYQ5uxM
Z/fa7AUPbV07mcN2oyeJ1Ru9gyYeCizSe1AdTdSpd2uAmasnVwpjdSU1u6bPC1hP
4/9ZSY2mVTfVIaEJINyMumscrMIKomYziLUnEZMWeg0w80jXgaL7BcR6wvga+VbL
d9KvO+yac9tMa5wbBI7eIJcrXTQ0noK48VKtc5zcKMLTQm8lBQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFH+HONzgd7Dro0hRKI/NG3SspJIxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGQ0OWI1ZjMtNDIwZi0z
ZWI4LWI1MzctNDBhNmUyOTg4MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAXRXyAD
BAHRXzAwDAMEANFfNQMEANFfOAMEAdFfOgMEANFfPTBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAupTeaf8+T
+rfTfOVXhf2VA3vUPG2I5zdyL5/90mjm4J101i+NLeczjEHowiMFgmE0mvDB9UoA
sKs09PISn+It7kfcZvQi7Ta1C9XRkSJ9LMRdNSfyPBVI9ApLoH88qmG027/96Wxi
VrhjZy8//yg8m3/Ca3ev9M1xi0ndFWO0A5xDOBb3wGa1f80JLTyJYpREvD5hUbiX
s/thyvIpKZzgzUbI52WOFTH+9myxCudAtTUcRC7YHpHSqL+xzo0/nGo3mk5rkSXW
jR6V48061tvQ6UKaFQF5eYeMVE9odg+mCl9rVlFjE854j7q23L6KnqEZiEdOS395
jdSB2erIh8Wk
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org