Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          9Xurd1YrETyZZpAeNQX4atidjZpQnQpY4brHYcV39NY=
Subject key identifier:   EB:BD:61:25:29:2D:C8:A1:E2:A8:21:11:8C:EA:3E:C2:6C:DA:47:9F
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285848F926961B6DA42D1CF010E5D8
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     46375
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:96:1b:6d:a4:2d:1c:f0:10:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=51400424-79c6-46cf-a1a5-74e941c9e9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:71:d1:22:d2:a9:65:f6:81:5f:34:cb:7e:
                    a9:20:52:16:40:d9:2b:5f:cd:50:fd:c1:eb:50:55:
                    bc:9c:c2:70:6b:1d:e4:66:c8:e8:26:0f:2a:db:10:
                    16:1c:2a:0b:99:47:33:22:05:68:aa:d4:23:af:46:
                    f0:59:71:4c:8a:82:15:25:79:a1:44:16:22:59:70:
                    90:15:a4:b6:1b:e7:94:f3:6b:6f:b9:ed:ae:ad:01:
                    84:94:e3:32:af:f3:9a:07:96:29:7b:cb:c1:b1:b9:
                    96:f0:1b:b4:4a:47:f4:ae:30:b2:50:17:18:14:5b:
                    2e:91:e6:61:7a:ad:85:7b:74:b1:65:5e:e5:fa:92:
                    ea:18:1b:7d:d4:4c:04:c9:eb:55:a9:18:25:47:d3:
                    78:5f:6c:6e:2f:49:cf:1c:cf:55:ea:2a:a3:f2:69:
                    73:ac:f7:c2:4f:fa:63:14:63:14:2f:87:5a:97:22:
                    2e:2a:06:38:63:7b:94:f8:e8:12:a5:86:9c:8a:73:
                    47:99:a5:da:1b:89:f4:60:57:82:a6:2c:0c:12:25:
                    db:7b:2f:cf:2c:dc:86:ba:1a:6c:81:f5:54:d8:16:
                    4a:a2:30:76:87:44:0b:4e:98:1d:50:db:d1:c4:de:
                    21:d8:e3:ed:3f:28:79:5e:87:10:3b:ef:c5:2e:4e:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BD:61:25:29:2D:C8:A1:E2:A8:21:11:8C:EA:3E:C2:6C:DA:47:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:05:d6:aa:0b:83:1c:a1:d1:7d:92:b3:63:f2:5f:06:af:
         c0:b2:63:40:28:47:ae:15:7a:83:98:c3:35:82:dd:2c:79:f0:
         5e:bf:09:65:4e:92:4b:21:2f:bb:15:87:06:ea:57:32:4a:1f:
         d0:87:50:61:cd:92:ec:17:6a:aa:eb:99:e5:32:76:c9:dc:0f:
         bc:71:81:2b:36:4d:ef:e5:29:4a:2b:53:0e:08:5c:20:00:07:
         63:af:6f:a4:29:88:c8:92:c1:9b:11:f4:74:72:1b:14:f6:ef:
         c1:57:a0:0e:fb:cd:50:1b:95:99:b1:d0:cc:f4:65:e4:f2:92:
         56:f2:be:ac:3d:e1:a6:98:b6:2b:40:63:98:a9:91:16:d2:57:
         54:e1:c6:97:6d:89:f1:cc:cf:8b:48:bf:bd:9b:0f:5c:ba:5e:
         bf:c1:aa:05:ef:32:c3:ea:3b:0e:cd:17:f2:65:5e:48:5c:90:
         33:54:fd:9d:39:cc:21:2c:2f:bc:44:2c:31:0f:2b:19:b3:8b:
         f7:e9:57:75:a3:c9:e1:2d:48:aa:fd:d7:f3:09:c1:87:48:b0:
         3d:f8:23:c3:6e:6c:de:51:03:f0:93:3c:01:aa:3d:57:55:c6:
         a6:c2:fc:6c:14:ab:a8:97:1a:51:20:e8:55:56:58:43:fb:99:
         38:cd:db:dc
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEj5JpYbbaQtHPAQ5dgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTE0MDA0MjQtNzljNi00NmNmLWExYTUtNzRlOTQxYzllOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMRx0SLSqWX2gV80y36pIFIWQNkrX81Q/cHr
UFW8nMJwax3kZsjoJg8q2xAWHCoLmUczIgVoqtQjr0bwWXFMioIVJXmhRBYiWXCQ
FaS2G+eU82tvue2urQGElOMyr/OaB5Ype8vBsbmW8Bu0Skf0rjCyUBcYFFsukeZh
eq2Fe3SxZV7l+pLqGBt91EwEyetVqRglR9N4X2xuL0nPHM9V6iqj8mlzrPfCT/pj
FGMUL4dalyIuKgY4Y3uU+OgSpYacinNHmaXaG4n0YFeCpiwMEiXbey/PLNyGuhps
gfVU2BZKojB2h0QLTpgdUNvRxN4h2OPtPyh5XocQO+/FLk72yQIDAQABo4IDwjCC
A74wHQYDVR0OBBYEFOu9YSUpLcih4qghEYzqPsJs2kefMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvZWM1MzI1NDMtOWRkNi0z
YmNmLWJkZWEtODJkZDk1MDk4MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB
MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0
AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME
BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQClAgXWqguDHKHRfZKzY/JfBq/AsmNAKEeuFXqD
mMM1gt0sefBevwllTpJLIS+7FYcG6lcySh/Qh1BhzZLsF2qq65nlMnbJ3A+8cYEr
Nk3v5SlKK1MOCFwgAAdjr2+kKYjIksGbEfR0chsU9u/BV6AO+81QG5WZsdDM9GXk
8pJW8r6sPeGmmLYrQGOYqZEW0ldU4caXbYnxzM+LSL+9mw9cul6/waoF7zLD6jsO
zRfyZV5IXJAzVP2dOcwhLC+8RCwxDysZs4v36Vd1o8nhLUiq/dfzCcGHSLA9+CPD
bmzeUQPwkzwBqj1XVcamwvxsFKuolxpRIOhVVlhD+5k4zdvc
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:42:58 2025 by rpki-client