Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6c905dd5-58d1-37c7-b40e-0d9630648b41.roa
File:                     6c905dd5-58d1-37c7-b40e-0d9630648b41.roa (raw, json)
Hash identifier:          2g9yuIozKKvBLivDNFdmHfnwXXVAXiWoLddLOv4u3Cs=
Subject key identifier:   29:B9:4A:88:6B:DF:B0:8F:0D:63:A2:84:19:5D:A4:A4:AB:EC:0D:4C
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285847299B26442E70A6C5790162C0
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6c905dd5-58d1-37c7-b40e-0d9630648b41.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     33392
IP address blocks:        74.112.232.0/21 maxlen: 21
                          74.116.95.0/24 maxlen: 24
                          199.19.28.0/22 maxlen: 22
                          208.78.48.0/21 maxlen: 21
                          208.91.192.0/22 maxlen: 22
                          2604:25c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:26:44:2e:70:a6:c5:79:01:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=df4c0538-9c68-4250-b6eb-251eca1ebc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:9e:fb:26:8f:e5:be:f4:46:cc:a5:f7:eb:
                    c5:47:fc:ad:04:6e:c1:f4:36:d9:4a:bd:d6:8a:60:
                    32:77:cb:0f:f2:4d:71:fb:2e:9e:c7:1f:1a:81:0f:
                    2a:16:b5:44:c7:d3:08:1c:1e:71:a4:1b:02:06:5c:
                    b0:b3:e4:ec:d1:69:05:41:d4:c8:04:95:d6:51:4b:
                    93:ae:32:f7:fe:41:20:89:17:f3:15:9f:2e:e8:ed:
                    15:1b:c1:59:95:ed:ea:99:67:ec:56:47:92:51:62:
                    d2:9b:09:65:a4:f4:25:f7:7f:e7:26:c4:13:9e:42:
                    6c:82:70:dc:7f:df:e7:75:4f:14:4d:c4:5d:ee:26:
                    6b:99:3b:b3:76:1c:a9:81:59:c2:f7:84:31:e6:f2:
                    8a:82:83:8a:51:c2:f0:73:74:6e:f2:ac:82:b2:1a:
                    1d:3f:06:ea:85:1e:91:f0:e2:75:1c:65:d6:0c:da:
                    e8:97:15:ce:9d:8a:30:7f:5b:25:66:24:43:80:04:
                    47:8f:ff:02:5d:9c:66:e9:8d:de:75:d9:cd:11:6e:
                    15:c8:99:79:11:15:32:6a:dd:5f:1f:cf:06:7b:d3:
                    73:04:f3:62:4e:dc:0b:af:26:05:f9:6c:cf:02:97:
                    dc:a3:c7:13:67:c8:d6:e2:b6:15:ef:3a:58:92:40:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:4A:88:6B:DF:B0:8F:0D:63:A2:84:19:5D:A4:A4:AB:EC:0D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6c905dd5-58d1-37c7-b40e-0d9630648b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.232.0/21
                  74.116.95.0/24
                  199.19.28.0/22
                  208.78.48.0/21
                  208.91.192.0/22
                IPv6:
                  2604:25c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:74:f4:d2:1e:fd:97:96:bf:87:25:43:c8:fd:f5:b1:af:96:
         47:a2:59:8b:4c:31:67:36:fd:36:c4:88:1f:1d:6b:70:33:fe:
         2b:ed:4e:b4:21:94:fc:ef:88:96:e8:61:52:59:84:19:12:07:
         df:26:d8:2e:67:b6:fb:3e:ae:54:15:d3:28:e8:af:e4:b7:5d:
         54:ae:d6:7b:9f:ab:2f:91:c2:f9:74:27:a5:3c:71:54:b7:b1:
         9a:f9:d5:1c:c5:c6:48:a3:31:40:b7:df:76:d9:8b:ad:94:73:
         f3:5a:6a:21:c8:15:51:e7:d1:35:83:96:58:15:91:76:94:9e:
         77:b1:31:1b:23:3d:bf:4a:27:8e:59:00:f4:f3:de:bf:0e:3b:
         9a:71:7d:6c:d5:29:e9:f8:8c:00:4e:35:ff:89:db:de:ff:07:
         82:b4:d5:1d:f7:c3:9c:86:ca:9b:82:83:63:a8:8e:d4:d2:01:
         77:18:31:1e:e1:11:b3:e0:be:5f:74:cd:66:1b:ff:f4:a2:39:
         33:4f:48:58:52:45:61:05:fb:fa:6d:80:c3:27:be:18:91:f9:
         3f:43:4a:1b:24:09:fb:d9:78:0f:e1:4c:0e:83:83:35:20:04:
         8f:c7:97:57:4b:2f:fa:c1:5b:dd:28:14:e6:ad:d3:7e:3f:ef:
         62:08:48:35
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEcpmyZELnCmxXkBYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
ZGY0YzA1MzgtOWM2OC00MjUwLWI2ZWItMjUxZWNhMWViYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ae+yaP5b70Rsyl9+vFR/ytBG7B9DbZSr3W
imAyd8sP8k1x+y6exx8agQ8qFrVEx9MIHB5xpBsCBlyws+Ts0WkFQdTIBJXWUUuT
rjL3/kEgiRfzFZ8u6O0VG8FZle3qmWfsVkeSUWLSmwllpPQl93/nJsQTnkJsgnDc
f9/ndU8UTcRd7iZrmTuzdhypgVnC94Qx5vKKgoOKUcLwc3Ru8qyCshodPwbqhR6R
8OJ1HGXWDNrolxXOnYowf1slZiRDgARHj/8CXZxm6Y3eddnNEW4VyJl5ERUyat1f
H88Ge9NzBPNiTtwLryYF+WzPApfco8cTZ8jW4rYV7zpYkkDFxwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFCm5Sohr37CPDWOihBldpKSr7A1MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvNmM5MDVkZDUtNThkMS0z
N2M3LWI0MGUtMGQ5NjMwNjQ4YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDSnDoAwQA
SnRfAwQCxxMcAwQD0E4wAwQC0FvAMA0EAgACMAcDBQAmBCXAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADt0
9NIe/ZeWv4clQ8j99bGvlkeiWYtMMWc2/TbEiB8da3Az/ivtTrQhlPzviJboYVJZ
hBkSB98m2C5ntvs+rlQV0yjor+S3XVSu1nufqy+Rwvl0J6U8cVS3sZr51RzFxkij
MUC333bZi62Uc/NaaiHIFVHn0TWDllgVkXaUnnexMRsjPb9KJ45ZAPTz3r8OO5px
fWzVKen4jABONf+J297/B4K01R33w5yGypuCg2OojtTSAXcYMR7hEbPgvl90zWYb
//SiOTNPSFhSRWEF+/ptgMMnvhiR+T9DShskCfvZeA/hTA6DgzUgBI/Hl1dLL/rB
W90oFOat034/72IISDU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:17 2024 by rpki-client on console-ams.rpki-client.org