Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/222edd9b-e290-31ce-95af-40a5c0132009.roa
File:                     222edd9b-e290-31ce-95af-40a5c0132009.roa (raw, json)
Hash identifier:          8uwyedEZfM+lKUGeQe5/kG62DPQANIXNVKuJrEQs0dM=
Subject key identifier:   DC:8F:1F:1D:B0:AB:4C:65:A9:70:70:70:F3:55:B3:13:C8:76:A8:01
Certificate issuer:       /CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f
Certificate serial:       010D0C9F432858457FDDDFE80779811D4F076E00
Authority key identifier: 19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/222edd9b-e290-31ce-95af-40a5c0132009.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     397553
IP address blocks:        216.24.34.0/24 maxlen: 24
                          45.42.184.0/22 maxlen: 22
                          45.42.185.0/24 maxlen: 24
                          45.42.187.0/24 maxlen: 24
                          45.42.186.0/24 maxlen: 24
                          45.42.184.0/24 maxlen: 24
                          2605:de40:1003::/48 maxlen: 48
                          2605:de40:3000::/48 maxlen: 48
                          2605:de40::/32 maxlen: 32
                          2605:de40:9000::/36 maxlen: 36
                          2605:de40:1000::/48 maxlen: 48
                          2605:de40:3004::/48 maxlen: 48
                          2605:de40:3003::/48 maxlen: 48
                          2605:de40:1004::/48 maxlen: 48
                          2605:de40:3002::/48 maxlen: 48
                          2605:de40:3001::/48 maxlen: 48
                          2605:de40:1001::/48 maxlen: 48
                          2605:de40:2004::/48 maxlen: 48
                          2605:de40:2003::/48 maxlen: 48
                          2605:de40:2002::/48 maxlen: 48
                          2605:de40:2000::/48 maxlen: 48
                          2605:de40:2001::/48 maxlen: 48
                          2605:de40:1002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:df:e8:07:79:81:1d:4f:07:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=658428b9-5628-4865-ad85-231d1c0a9b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8a:75:ba:2b:f1:b0:c7:8f:7e:45:f4:a8:5c:
                    39:11:35:de:50:ce:a7:c9:b5:ae:be:f1:25:a9:96:
                    60:c8:4d:f3:22:46:26:d6:95:43:c4:dc:9b:b8:02:
                    48:ce:c6:6c:c8:e7:73:a4:f8:3e:64:39:5d:22:fc:
                    b0:0c:98:65:91:23:06:86:a9:63:49:05:1e:57:b6:
                    cc:4a:63:4f:5c:41:e6:43:77:73:76:81:04:3f:ec:
                    46:9d:6a:5a:4e:40:e4:37:69:45:69:4e:8b:f1:ad:
                    67:ee:91:60:90:2a:20:79:26:02:1c:e7:8b:ab:ad:
                    3f:7a:ce:21:48:3c:55:5c:24:be:a0:d6:d8:af:d6:
                    cc:61:d2:36:fd:14:e5:a9:fc:65:d8:de:f7:db:de:
                    2b:5d:14:58:da:c6:12:35:14:e6:c2:30:df:53:1c:
                    a9:97:8a:22:99:8e:69:89:67:8c:0d:df:b5:08:4e:
                    25:a1:0c:fd:36:55:d8:f1:de:40:3c:c8:ed:23:c8:
                    ca:9a:73:88:22:50:3b:00:d8:88:4a:f5:cc:37:44:
                    b4:51:02:ab:12:79:6c:6f:d4:fd:da:d8:8b:79:f9:
                    aa:3d:68:56:30:53:07:85:eb:93:4b:ff:2f:5a:f5:
                    80:4d:4a:5c:f1:c7:9a:2f:13:fe:69:9c:c7:45:31:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8F:1F:1D:B0:AB:4C:65:A9:70:70:70:F3:55:B3:13:C8:76:A8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/222edd9b-e290-31ce-95af-40a5c0132009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.184.0/22
                  216.24.34.0/24
                IPv6:
                  2605:de40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0e:7c:58:37:1b:c5:ff:5c:b1:47:16:3e:ee:d5:e3:eb:8e:
         1f:ae:05:1a:4e:83:2f:61:e9:df:c4:10:de:60:c9:8e:80:c7:
         35:a1:75:14:3b:f6:f0:09:77:99:ea:7d:26:1f:78:4c:12:34:
         80:6d:a2:62:d4:5b:21:4f:30:17:7a:21:f4:c6:e2:76:37:c7:
         91:05:43:06:2b:a4:d6:fb:cb:77:20:b2:67:28:3e:40:df:59:
         c5:28:96:8a:f1:0a:14:b0:6d:5a:ac:b3:2b:38:f5:9e:58:45:
         60:95:c5:86:06:1d:d5:ad:e1:ad:d6:40:27:05:3d:51:f9:2b:
         ba:07:fc:33:14:56:84:bc:04:17:67:af:cd:7e:66:cd:51:4d:
         ba:7e:75:bc:19:7a:23:b8:ba:a2:f4:22:b2:e0:ed:88:de:a5:
         a3:58:9d:27:f6:90:61:1a:d3:e4:ea:5c:3d:5e:cb:81:fb:a9:
         1c:1b:00:6b:31:d4:9b:7a:40:0a:8c:25:03:96:81:e8:58:ab:
         0b:f8:cf:34:7e:53:69:91:e8:c1:21:3c:f3:4e:8d:50:60:74:
         ba:a9:4c:0e:da:00:ae:03:cf:69:47:3e:85:3c:99:a9:1f:04:
         f4:66:c2:8d:64:40:c2:8d:6e:b7:9f:dd:55:52:db:3b:35:a8:
         de:e8:39:41
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEV/3d/oB3mBHU8HbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTY2NWZmNjAtNTQ3Ny00ZjdiLWFmZTYtMzUwYzJmZDVh
ZjhmMB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
NjU4NDI4YjktNTYyOC00ODY1LWFkODUtMjMxZDFjMGE5Yjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYp1uivxsMePfkX0qFw5ETXeUM6nybWuvvEl
qZZgyE3zIkYm1pVDxNybuAJIzsZsyOdzpPg+ZDldIvywDJhlkSMGhqljSQUeV7bM
SmNPXEHmQ3dzdoEEP+xGnWpaTkDkN2lFaU6L8a1n7pFgkCogeSYCHOeLq60/es4h
SDxVXCS+oNbYr9bMYdI2/RTlqfxl2N73294rXRRY2sYSNRTmwjDfUxypl4oimY5p
iWeMDd+1CE4loQz9NlXY8d5APMjtI8jKmnOIIlA7ANiISvXMN0S0UQKrEnlsb9T9
2tiLefmqPWhWMFMHheuTS/8vWvWATUpc8ceaLxP+aZzHRTEUJQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFNyPHx2wq0xlqXBwcPNVsxPIdqgBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1
ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBjMmZkNWFmOGYvMjIyZWRkOWItZTI5MC0z
MWNlLTk1YWYtNDBhNWMwMTMyMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTY2NWZmNjAtNTQ3Ny00ZjdiLWFm
ZTYtMzUwYzJmZDVhZjhmLzE2NjVmZjYwLTU0NzctNGY3Yi1hZmU2LTM1MGMyZmQ1
YWY4Zi5jcmwwHwYDVR0jBBgwFoAUGQdZZtQpW7do6cewWgstMn5Gqq0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBj
MmZkNWFmOGYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLSq4AwQA
2BgiMA0EAgACMAcDBQAmBd5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEkOfFg3G8X/XLFHFj7u1ePrjh+u
BRpOgy9h6d/EEN5gyY6AxzWhdRQ79vAJd5nqfSYfeEwSNIBtomLUWyFPMBd6IfTG
4nY3x5EFQwYrpNb7y3cgsmcoPkDfWcUolorxChSwbVqssys49Z5YRWCVxYYGHdWt
4a3WQCcFPVH5K7oH/DMUVoS8BBdnr81+Zs1RTbp+dbwZeiO4uqL0IrLg7YjepaNY
nSf2kGEa0+TqXD1ey4H7qRwbAGsx1Jt6QAqMJQOWgehYqwv4zzR+U2mR6MEhPPNO
jVBgdLqpTA7aAK4Dz2lHPoU8makfBPRmwo1kQMKNbref3VVS2zs1qN7oOUE=
-----END CERTIFICATE-----
Generated at Thu Apr 18 11:30:46 2024 by rpki-client on console-ams.rpki-client.org