Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
File:                     c6086dd9-635c-3d69-b167-00ce58160e62.roa (raw, json)
Hash identifier:          xVP0aD1pxENAeP7m11I6BvXj2bD3ddP2NxfsBeWRRq0=
Subject key identifier:   44:23:7A:4E:56:FE:BB:FA:EA:CB:94:6D:99:A9:FA:6C:A8:C9:EE:ED
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F432858490021553DCF0862F7E4508E10
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     1299
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:55:3d:cf:08:62:f7:e4:50:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=ec7be16d-6216-4608-8d09-08765c0479a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:e7:af:08:46:68:2c:b6:1f:30:62:9f:18:
                    0f:2e:ca:f5:80:a4:2f:7b:c0:b0:ef:7e:3e:23:21:
                    a9:6b:12:27:32:e4:66:44:a2:73:f0:cc:06:cf:c2:
                    eb:bc:43:0c:13:68:bf:df:9b:ea:e1:1d:de:3f:5e:
                    17:c3:82:a0:b4:b4:35:30:35:ff:da:ab:bc:18:20:
                    39:91:d0:e9:ec:cd:b9:3f:e6:36:39:d9:4d:a0:f5:
                    51:f3:50:b4:29:b0:1f:4e:7c:7b:cc:84:88:48:3d:
                    7a:73:2b:20:84:5c:93:bd:58:b9:f1:b4:2f:d8:a0:
                    88:7f:08:c5:85:4d:06:89:5a:9e:e0:60:c3:60:5d:
                    31:84:c1:72:59:2f:5c:e0:4c:6c:8f:bb:c9:ba:79:
                    c6:cc:04:8c:d0:92:4b:20:6d:36:82:3f:70:85:97:
                    f6:9a:1b:27:1f:7e:9a:e8:f7:7f:e0:75:57:17:9b:
                    03:15:c5:7e:0e:e6:9d:b7:c1:c1:78:64:77:d0:c5:
                    16:9d:38:b4:81:46:32:76:31:4a:df:c3:1a:36:96:
                    41:be:fa:8f:4d:b7:2c:8e:6a:83:a8:12:06:f1:5b:
                    2a:61:c1:ef:3e:59:52:54:12:e0:e4:b1:fa:ef:da:
                    82:67:61:9f:55:91:88:50:f5:92:d8:0d:df:5e:ce:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:23:7A:4E:56:FE:BB:FA:EA:CB:94:6D:99:A9:FA:6C:A8:C9:EE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ff:a2:d6:90:84:bb:1e:69:7a:e6:f8:88:49:91:f7:1b:b6:
         e0:21:1d:01:c8:0e:37:db:3e:5d:1d:3f:2f:7a:6e:c4:9e:2d:
         c0:5c:f7:c1:37:ec:15:ef:a5:e3:a4:41:33:b2:92:a1:0a:4f:
         5c:d3:18:9b:39:b9:89:26:3e:67:b8:cf:3a:29:06:b9:d7:6f:
         a0:f2:c4:2a:10:30:b9:f9:29:10:4f:a4:84:39:56:45:23:4b:
         b9:bb:b3:5f:2e:85:e5:98:7f:73:2a:50:86:6e:f4:1c:48:42:
         6a:52:6c:7c:f8:31:de:1f:15:b7:80:3d:52:77:73:11:fa:b5:
         ec:2c:49:bd:ae:a7:1e:09:20:b1:b5:7c:46:ad:c6:ff:a0:9f:
         b8:aa:fc:8e:81:1f:44:c7:80:8f:e9:1c:d4:b0:be:d5:5a:98:
         1a:30:7e:ea:45:bb:fc:e1:90:0c:81:49:bd:00:a3:f2:3e:9f:
         5d:ae:5a:86:91:29:c1:53:66:6a:7b:0f:75:28:27:40:9a:95:
         b2:5a:6b:e5:fc:4e:eb:52:2d:79:2b:0f:8d:e8:8e:8c:20:3f:
         fa:00:26:ad:2e:67:0a:25:1a:08:ff:20:37:70:41:52:11:f7:
         66:e1:b2:a9:fd:95:61:0f:59:23:b8:ff:6a:24:28:53:71:83:
         41:5b:76:91
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEkAIVU9zwhi9+RQjhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZWM3YmUxNmQtNjIxNi00NjA4LThkMDktMDg3NjVjMDQ3OWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltXnrwhGaCy2HzBinxgPLsr1gKQve8Cw734+
IyGpaxInMuRmRKJz8MwGz8LrvEMME2i/35vq4R3eP14Xw4KgtLQ1MDX/2qu8GCA5
kdDp7M25P+Y2OdlNoPVR81C0KbAfTnx7zISISD16cysghFyTvVi58bQv2KCIfwjF
hU0GiVqe4GDDYF0xhMFyWS9c4Exsj7vJunnGzASM0JJLIG02gj9whZf2mhsnH36a
6Pd/4HVXF5sDFcV+Duadt8HBeGR30MUWnTi0gUYydjFK38MaNpZBvvqPTbcsjmqD
qBIG8VsqYcHvPllSVBLg5LH679qCZ2GfVZGIUPWS2A3fXs4c/QIDAQABo4IDwjCC
A74wHQYDVR0OBBYEFEQjek5W/rv66suUbZmp+myoye7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYzYwODZkZDktNjM1Yy0z
ZDY5LWIxNjctMDBjZTU4MTYwZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB
MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0
AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME
BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCx/6LWkIS7Hml65viISZH3G7bgIR0ByA432z5d
HT8vem7Eni3AXPfBN+wV76XjpEEzspKhCk9c0xibObmJJj5nuM86KQa512+g8sQq
EDC5+SkQT6SEOVZFI0u5u7NfLoXlmH9zKlCGbvQcSEJqUmx8+DHeHxW3gD1Sd3MR
+rXsLEm9rqceCSCxtXxGrcb/oJ+4qvyOgR9Ex4CP6RzUsL7VWpgaMH7qRbv84ZAM
gUm9AKPyPp9drlqGkSnBU2Zqew91KCdAmpWyWmvl/E7rUi15Kw+N6I6MID/6ACat
LmcKJRoI/yA3cEFSEfdm4bKp/ZVhD1kjuP9qJChTcYNBW3aR
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:48 2025 by rpki-client