Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2/a7faad68-91fa-3f69-b525-9b610097931b.roa
File:                     a7faad68-91fa-3f69-b525-9b610097931b.roa (raw, json)
Hash identifier:          lJFCfav4HFcoQvGk5IWx2FEgyaBrEgWrSmWPh/teNik=
Subject key identifier:   E9:F7:DF:8A:06:A8:B3:FC:DD:DD:6C:0C:D2:96:5C:CE:19:C0:CD:65
Certificate issuer:       /CN=07d1bb2d-b171-495f-9876-afa487e213d2
Certificate serial:       010D0C9F4328584582A897C3A88F47FBB6459280
Authority key identifier: 74:37:53:3B:DC:D4:7D:60:A6:C5:51:23:AC:C1:B5:3B:A5:0F:D3:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2/a7faad68-91fa-3f69-b525-9b610097931b.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     394660
IP address blocks:        67.219.132.0/22 maxlen: 24
                          155.254.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2/07d1bb2d-b171-495f-9876-afa487e213d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2/07d1bb2d-b171-495f-9876-afa487e213d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:97:c3:a8:8f:47:fb:b6:45:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d1bb2d-b171-495f-9876-afa487e213d2
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=dd5037c8-5f58-4d86-9f3b-ae34a6ed6696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:2c:d1:fe:22:60:0d:dc:a5:4f:fa:89:7b:
                    e7:9a:03:36:a8:a0:0b:36:df:52:5c:34:ac:f2:51:
                    d0:cb:8e:25:4c:98:dc:47:c9:ed:d2:10:c0:2c:2f:
                    43:70:c9:2c:b9:7e:c9:de:93:0c:26:34:51:f8:70:
                    dc:7c:e2:aa:6a:05:a3:5a:08:4b:aa:97:64:a0:72:
                    27:22:65:6e:d6:d3:ff:f8:db:08:f1:5a:92:cc:92:
                    11:32:2a:81:31:f0:d7:45:69:a9:7d:4d:09:a0:0b:
                    a2:29:31:ff:20:31:15:8d:88:61:9b:10:ba:35:f7:
                    30:0e:7d:16:98:3a:ba:40:94:9f:6d:6f:dc:88:24:
                    59:f5:72:e6:f4:0e:96:1d:c4:84:ac:2e:fb:ac:de:
                    d1:92:eb:0d:7b:3a:5e:71:d3:d7:cc:2d:7e:ad:66:
                    b3:4b:b5:6d:71:ea:24:bb:2f:ed:42:e9:93:de:42:
                    63:01:97:24:7c:55:0b:2a:3f:48:16:c2:8e:fc:9e:
                    3d:51:2d:41:b1:89:5f:e3:7c:90:60:73:f0:f4:fe:
                    96:e9:56:59:ff:f2:04:74:e8:72:20:44:d7:c7:b0:
                    b6:97:9b:6c:4d:af:9d:52:d9:a2:ca:73:a7:28:1c:
                    d0:80:77:81:46:bf:94:74:7a:94:51:ff:6d:d0:4c:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F7:DF:8A:06:A8:B3:FC:DD:DD:6C:0C:D2:96:5C:CE:19:C0:CD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2/a7faad68-91fa-3f69-b525-9b610097931b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2/07d1bb2d-b171-495f-9876-afa487e213d2.crl

            X509v3 Authority Key Identifier:
                keyid:74:37:53:3B:DC:D4:7D:60:A6:C5:51:23:AC:C1:B5:3B:A5:0F:D3:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d1bb2d-b171-495f-9876-afa487e213d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.132.0/22
                  155.254.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:64:fb:8a:88:c5:07:11:ad:27:08:6d:91:14:ff:75:3c:ed:
         bb:a6:89:ab:92:84:0f:96:32:88:9d:3b:d8:61:80:71:76:50:
         2e:c4:16:06:db:e1:74:2c:bd:37:2d:ca:9b:f3:55:e3:de:d1:
         48:62:de:3b:dd:d4:0a:09:14:c2:1c:34:2b:b2:6a:ef:d7:92:
         f3:04:9c:52:27:13:52:ee:3a:5a:55:01:95:7d:b8:c0:43:17:
         94:64:21:6a:8d:80:e1:ae:1a:3c:12:b8:06:d0:09:71:51:2b:
         4e:34:1d:6e:82:50:0c:1d:d8:69:1e:91:d1:77:91:e1:67:9c:
         21:9d:32:98:82:4c:fb:67:70:36:d9:aa:d3:8d:0e:66:3a:6e:
         ab:2b:56:27:ba:20:d2:44:d4:52:bf:59:5c:74:38:c6:af:27:
         c3:69:de:7e:75:2d:84:0c:57:ea:fd:46:a1:62:cd:4f:aa:3c:
         0d:5b:7e:ac:60:92:17:d9:7d:cb:ba:62:9f:d2:c2:e1:f2:55:
         6a:74:94:d7:55:b2:bb:d8:4d:a4:91:7c:1e:57:71:47:08:e4:
         0b:2c:4b:78:cb:bf:fc:7d:61:03:21:3d:37:66:cd:70:d2:dc:
         84:90:d7:a4:3b:11:1c:c5:46:83:f0:7c:c3:8d:9e:6c:87:93:
         18:37:c1:00
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWCqJfDqI9H+7ZFkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdkMWJiMmQtYjE3MS00OTVmLTk4NzYtYWZhNDg3ZTIx
M2QyMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
ZGQ1MDM3YzgtNWY1OC00ZDg2LTlmM2ItYWUzNGE2ZWQ2Njk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCQs0f4iYA3cpU/6iXvnmgM2qKALNt9SXDSs
8lHQy44lTJjcR8nt0hDALC9DcMksuX7J3pMMJjRR+HDcfOKqagWjWghLqpdkoHIn
ImVu1tP/+NsI8VqSzJIRMiqBMfDXRWmpfU0JoAuiKTH/IDEVjYhhmxC6NfcwDn0W
mDq6QJSfbW/ciCRZ9XLm9A6WHcSErC77rN7RkusNezpecdPXzC1+rWazS7Vtceok
uy/tQumT3kJjAZckfFULKj9IFsKO/J49US1BsYlf43yQYHPw9P6W6VZZ//IEdOhy
IETXx7C2l5tsTa+dUtmiynOnKBzQgHeBRr+UdHqUUf9t0ExkMwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOn334oGqLP83d1sDNKWXM4ZwM1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2Qx
YmIyZC1iMTcxLTQ5NWYtOTg3Ni1hZmE0ODdlMjEzZDIvYTdmYWFkNjgtOTFmYS0z
ZjY5LWI1MjUtOWI2MTAwOTc5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDdkMWJiMmQtYjE3MS00OTVmLTk4
NzYtYWZhNDg3ZTIxM2QyLzA3ZDFiYjJkLWIxNzEtNDk1Zi05ODc2LWFmYTQ4N2Uy
MTNkMi5jcmwwHwYDVR0jBBgwFoAUdDdTO9zUfWCmxVEjrMG1O6UP0/YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2QxYmIyZC1iMTcxLTQ5NWYtOTg3Ni1hZmE0
ODdlMjEzZDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQ9uEAwQC
m/6EMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHZk+4qIxQcRrScIbZEU/3U87bumiauShA+WMoidO9hhgHF2
UC7EFgbb4XQsvTctypvzVePe0Uhi3jvd1AoJFMIcNCuyau/XkvMEnFInE1LuOlpV
AZV9uMBDF5RkIWqNgOGuGjwSuAbQCXFRK040HW6CUAwd2GkekdF3keFnnCGdMpiC
TPtncDbZqtONDmY6bqsrVie6INJE1FK/WVx0OMavJ8Np3n51LYQMV+r9RqFizU+q
PA1bfqxgkhfZfcu6Yp/SwuHyVWp0lNdVsrvYTaSRfB5XcUcI5AssS3jLv/x9YQMh
PTdmzXDS3ISQ16Q7ERzFRoPwfMONnmyHkxg3wQA=
-----END CERTIFICATE-----
Generated at Sat May 4 15:05:33 2024 by rpki-client on console-ams.rpki-client.org