Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
File:                     74d043bc-e479-3a7a-9a76-aacaabb89db4.roa (raw, json)
Hash identifier:          1tZnUim7ZHQDymGk9Cp1VHY13n8LHhR27MKhA/JMaSw=
Subject key identifier:   89:2D:4F:78:3A:E8:D5:07:CC:3D:CD:38:BA:B8:98:9D:DB:D5:12:DD
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584780265286F7E63E22920C2000
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     14445
IP address blocks:        23.136.184.0/24 maxlen: 24
                          23.170.241.0/24 maxlen: 24
                          23.170.242.0/24 maxlen: 24
                          23.170.244.0/24 maxlen: 24
                          23.170.248.0/24 maxlen: 24
                          23.170.250.0/24 maxlen: 24
                          23.170.251.0/24 maxlen: 24
                          23.170.252.0/24 maxlen: 24
                          23.170.253.0/24 maxlen: 24
                          23.170.255.0/24 maxlen: 24
                          45.42.178.0/24 maxlen: 24
                          45.42.179.0/24 maxlen: 24
                          216.73.148.0/24 maxlen: 24
                          216.73.151.0/24 maxlen: 24
                          2606:18c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:52:86:f7:e6:3e:22:92:0c:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=65bdaaa6-c009-471d-b6f8-5ef27a4ce73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:50:cc:c5:68:7a:c9:ea:4e:37:56:87:a3:
                    8f:54:c4:c5:5b:16:3d:66:34:5b:29:2f:cf:4e:af:
                    d1:fd:9d:0a:39:58:70:4b:9c:a2:e0:05:ea:9e:8c:
                    e1:62:d1:0b:f3:3d:83:ec:8d:ac:28:3e:f8:09:e9:
                    69:84:df:0b:5e:10:8b:91:c3:12:18:6a:b3:b5:59:
                    08:2c:ca:7d:aa:2f:cd:ac:98:7c:98:f5:18:bd:9a:
                    df:f2:a4:86:6b:97:8b:6f:87:cd:de:48:ce:b8:c3:
                    35:9b:3c:a8:22:44:31:ef:a9:11:8a:86:3a:ed:84:
                    ca:ea:c0:32:49:a7:c3:77:b2:b0:7c:93:2f:f1:67:
                    65:32:37:31:fa:5e:bd:4e:43:64:5f:1d:1b:8a:39:
                    a1:63:f2:92:0c:6b:45:16:18:c6:cc:b4:ed:ca:bf:
                    80:3f:1a:fd:57:a5:87:3e:1a:a4:79:26:05:fa:04:
                    0a:94:d7:41:b0:60:ea:b8:72:8c:00:90:24:98:3b:
                    67:67:3f:91:bf:e2:29:03:c4:24:e5:48:99:3f:6b:
                    aa:73:67:9e:5a:23:87:8c:a7:84:81:40:2b:11:4b:
                    a8:fc:fe:36:ee:57:12:43:d1:70:3e:72:3d:3a:f1:
                    d6:65:a1:cd:c6:d0:90:46:fe:dd:6f:b9:ff:d7:58:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2D:4F:78:3A:E8:D5:07:CC:3D:CD:38:BA:B8:98:9D:DB:D5:12:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.184.0/24
                  23.170.241.0-23.170.242.255
                  23.170.244.0/24
                  23.170.248.0/24
                  23.170.250.0-23.170.253.255
                  23.170.255.0/24
                  45.42.178.0/23
                  216.73.148.0/24
                  216.73.151.0/24
                IPv6:
                  2606:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:2e:5c:98:5e:69:21:37:0c:37:00:68:01:bc:ff:0a:52:
         03:a1:ae:8c:66:40:42:0e:cc:76:35:87:bb:7e:8d:b2:0a:df:
         a3:76:33:17:ef:4a:65:89:b6:ed:a2:6b:af:26:f8:7a:a9:a3:
         f9:30:a8:f1:ce:9b:98:02:bf:73:53:d4:b5:0b:71:02:d5:5e:
         00:77:e2:b3:8b:d2:64:a3:76:a7:37:ed:af:d6:f8:5c:72:89:
         ec:a4:b0:8d:49:5b:87:d6:12:4a:9a:8b:00:95:cc:89:66:a7:
         eb:a9:ec:b1:9a:03:ff:81:75:2e:1b:99:56:14:00:6f:17:0d:
         e8:56:ce:a5:f3:8e:61:fd:8a:39:06:70:d1:7f:ec:15:26:93:
         05:73:f2:d7:8c:26:51:e3:e2:39:85:23:9a:06:58:f3:e6:b6:
         34:4b:83:b2:3e:10:48:89:6c:fb:28:67:2d:ef:86:53:13:e2:
         10:56:b8:d8:31:cb:13:ce:eb:1b:4c:b7:25:c2:12:bb:dc:c6:
         37:52:7a:81:2b:ad:f1:f0:02:38:e3:20:da:72:b9:39:d8:95:
         1d:1e:80:60:9e:13:78:85:ce:d0:6b:7f:c3:f4:00:95:34:68:
         54:36:e5:9f:eb:cf:e3:d9:23:c4:31:c2:36:db:1a:10:e0:a5:
         00:bf:bf:2b
-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEeAJlKG9+Y+IpIMIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
NjViZGFhYTYtYzAwOS00NzFkLWI2ZjgtNWVmMjdhNGNlNzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn1QzMVoesnqTjdWh6OPVMTFWxY9ZjRbKS/P
Tq/R/Z0KOVhwS5yi4AXqnozhYtEL8z2D7I2sKD74CelphN8LXhCLkcMSGGqztVkI
LMp9qi/NrJh8mPUYvZrf8qSGa5eLb4fN3kjOuMM1mzyoIkQx76kRioY67YTK6sAy
SafDd7KwfJMv8WdlMjcx+l69TkNkXx0bijmhY/KSDGtFFhjGzLTtyr+APxr9V6WH
PhqkeSYF+gQKlNdBsGDquHKMAJAkmDtnZz+Rv+IpA8Qk5UiZP2uqc2eeWiOHjKeE
gUArEUuo/P427lcSQ9FwPnI9OvHWZaHNxtCQRv7db7n/11hENQIDAQABo4IDpDCC
A6AwHQYDVR0OBBYEFIktT3g66NUHzD3NOLq4mJ3b1RLdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvNzRkMDQzYmMtZTQ3OS0z
YTdhLTlhNzYtYWFjYWFiYjg5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQAF4i4MAwD
BAAXqvEDBAAXqvIDBAAXqvQDBAAXqvgwDAMEAReq+gMEAReq/AMEABeq/wMEAS0q
sgMEANhJlAMEANhJlzANBAIAAjAHAwUAJgYYwDBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAroi5cmF5pITcM
NwBoAbz/ClIDoa6MZkBCDsx2NYe7fo2yCt+jdjMX70plibbtomuvJvh6qaP5MKjx
zpuYAr9zU9S1C3EC1V4Ad+Kzi9Jko3anN+2v1vhcconspLCNSVuH1hJKmosAlcyJ
ZqfrqeyxmgP/gXUuG5lWFABvFw3oVs6l845h/Yo5BnDRf+wVJpMFc/LXjCZR4+I5
hSOaBljz5rY0S4OyPhBIiWz7KGct74ZTE+IQVrjYMcsTzusbTLclwhK73MY3UnqB
K63x8AI44yDacrk52JUdHoBgnhN4hc7Qa3/D9ACVNGhUNuWf68/j2SPEMcI22xoQ
4KUAv78r
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org