Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
File:                     c6086dd9-635c-3d69-b167-00ce58160e62.roa (raw, json)
Hash identifier:          O5zN8tf2ImotD0UHziUgfp8P4lnrURExgPmeezFpWaM=
Subject key identifier:   31:D7:AB:62:F6:9D:B2:54:1E:E0:8F:51:CC:78:59:40:44:D7:46:95
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F432858457FDDCFBBFB039CD32A0F36C0
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     1299
IP address blocks:        208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          23.93.0.0/16 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:cf:bb:fb:03:9c:d3:2a:0f:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=7c030a3e-e4d0-4a95-a72f-0854227dc72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:0f:32:fa:da:ae:b2:d2:ea:4a:3c:0c:69:
                    67:77:b0:dd:1f:c3:dc:cd:7a:0b:be:1d:eb:b7:c3:
                    9d:f0:95:ee:64:6d:bc:c9:37:65:47:44:53:7a:df:
                    e6:a2:1c:a0:db:97:91:cc:05:23:76:54:52:77:22:
                    eb:48:d0:6d:6b:28:2f:77:a7:06:88:92:3d:a3:48:
                    cc:a8:e4:8f:ef:ab:db:8c:8f:58:3f:e5:df:d5:9f:
                    6d:69:3d:15:56:cd:df:e5:dc:af:d0:d8:0d:91:15:
                    71:c5:42:87:a4:6c:0c:39:52:f9:c3:56:8c:20:4c:
                    65:97:67:8c:52:3e:6e:1b:db:b9:4c:be:15:77:ab:
                    fb:e5:34:a5:c8:cf:fc:36:17:46:3c:db:52:99:ab:
                    ea:b4:f8:d9:63:9c:4d:d9:48:00:88:2e:cb:24:ab:
                    f0:69:7f:cf:da:95:a8:57:12:68:9c:51:6b:bf:d2:
                    87:7e:d1:53:2e:a0:4c:b3:23:a7:a4:d0:1d:ff:39:
                    2b:43:ab:ed:eb:dc:26:1b:76:05:a7:cc:a8:cb:cd:
                    29:f2:39:a0:3f:04:f3:91:e7:34:81:ae:92:39:a8:
                    0f:a9:a5:a7:b0:38:10:fa:65:e5:14:65:50:4c:27:
                    78:ac:aa:c1:e3:9a:53:64:61:43:fd:9d:7c:6c:86:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:AB:62:F6:9D:B2:54:1E:E0:8F:51:CC:78:59:40:44:D7:46:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:78:d0:81:f2:92:8f:4d:23:c9:fb:00:b8:70:50:2d:71:
         19:7d:e8:89:a7:fd:3b:fc:6d:65:ca:33:8d:94:ab:9a:44:13:
         e7:2a:53:b2:4b:c5:78:46:e9:e9:8c:5e:2d:1e:e9:fd:6b:af:
         b8:bb:b1:e3:d0:7b:ac:1b:50:53:56:37:af:34:80:d9:62:2f:
         2f:08:41:35:21:8b:0e:a1:85:2d:2a:5e:08:b2:49:79:05:e8:
         8b:03:12:44:a2:b5:2e:81:95:87:4c:0e:79:43:d1:6f:2b:4f:
         0f:d6:c2:cf:af:6d:97:bc:a3:5f:e7:f5:e1:b5:af:a7:d7:80:
         ce:39:d5:59:5e:ad:ba:42:50:a4:1d:86:0c:9c:7a:b0:b0:78:
         55:77:b2:95:af:8e:f6:f1:04:fb:69:42:a2:43:26:dc:8d:cc:
         23:11:fd:98:a5:ed:7c:6a:6f:5e:d8:f3:80:0b:66:1e:65:cf:
         1b:d8:71:01:94:9b:a2:44:3a:b8:8a:de:14:93:40:93:da:48:
         c6:1e:32:c7:d9:3f:da:69:3d:03:de:9c:02:c5:f6:7a:75:3b:
         51:f8:a7:b9:1f:d8:66:d5:1c:72:15:e9:d9:ac:ec:53:b1:4d:
         f9:10:52:74:e9:f1:44:96:db:99:71:97:ad:93:94:55:6d:c2:
         e2:e7:12:36
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEV/3c+7+wOc0yoPNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
N2MwMzBhM2UtZTRkMC00YTk1LWE3MmYtMDg1NDIyN2RjNzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirAPMvrarrLS6ko8DGlnd7DdH8PczXoLvh3r
t8Od8JXuZG28yTdlR0RTet/mohyg25eRzAUjdlRSdyLrSNBtaygvd6cGiJI9o0jM
qOSP76vbjI9YP+Xf1Z9taT0VVs3f5dyv0NgNkRVxxUKHpGwMOVL5w1aMIExll2eM
Uj5uG9u5TL4Vd6v75TSlyM/8NhdGPNtSmavqtPjZY5xN2UgAiC7LJKvwaX/P2pWo
VxJonFFrv9KHftFTLqBMsyOnpNAd/zkrQ6vt69wmG3YFp8yoy80p8jmgPwTzkec0
ga6SOagPqaWnsDgQ+mXlFGVQTCd4rKrB45pTZGFD/Z18bIaZ3wIDAQABo4IDwjCC
A74wHQYDVR0OBBYEFDHXq2L2nbJUHuCPUcx4WUBE10aVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYzYwODZkZDktNjM1Yy0z
ZDY5LWIxNjctMDBjZTU4MTYwZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB
MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0
AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME
BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCF8XjQgfKSj00jyfsAuHBQLXEZfeiJp/07/G1l
yjONlKuaRBPnKlOyS8V4RunpjF4tHun9a6+4u7Hj0HusG1BTVjevNIDZYi8vCEE1
IYsOoYUtKl4Iskl5BeiLAxJEorUugZWHTA55Q9FvK08P1sLPr22XvKNf5/Xhta+n
14DOOdVZXq26QlCkHYYMnHqwsHhVd7KVr4728QT7aUKiQybcjcwjEf2Ype18am9e
2POAC2YeZc8b2HEBlJuiRDq4it4Uk0CT2kjGHjLH2T/aaT0D3pwCxfZ6dTtR+Ke5
H9hm1RxyFenZrOxTsU35EFJ06fFEltuZcZetk5RVbcLi5xI2
-----END CERTIFICATE-----
Generated at Wed May 15 15:08:15 2024 by rpki-client on console-fra.rpki-client.org