Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
File:                     9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json)
Hash identifier:          2dhCO6LR1ILNJn17vCO/bzFmmqpR5A5eiriKLEalDas=
Subject key identifier:   F6:5B:3B:63:BE:0C:9F:D2:0F:44:17:1D:E1:AD:23:DB:20:7C:B8:24
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F432858457D1330D1BF929382C58DAC80
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     11550
IP address blocks:        173.243.176.0/20 maxlen: 24
                          216.249.64.0/19 maxlen: 24
                          204.89.253.0/24 maxlen: 24
                          199.96.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:30:d1:bf:92:93:82:c5:8d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=bffe19bc-6a67-4abc-ac10-67668d4bfc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:bd:bc:55:51:f3:1b:b4:0b:bd:5c:25:88:
                    46:31:7e:c6:fe:6d:b2:7a:c2:66:80:2a:54:dc:6c:
                    35:60:96:6d:8a:5c:7b:13:10:28:4e:87:71:3d:1d:
                    36:8d:50:c7:72:90:16:52:65:9c:a8:8b:9f:24:cc:
                    d1:78:c8:4a:fd:1b:18:3c:e8:c7:46:61:d6:60:67:
                    3c:ad:6d:1c:0d:0f:69:20:f5:c1:e9:3d:a3:9f:71:
                    b5:b4:03:e1:45:4b:fa:6a:3e:85:d0:59:c6:48:e9:
                    39:6a:6d:3b:20:66:90:ef:ac:c2:38:e2:14:4e:ec:
                    c9:d6:95:89:79:d4:2b:23:d0:e6:ca:f9:b2:3d:b9:
                    03:3a:ae:ca:21:e3:ad:b2:d1:cc:3c:a9:3f:6b:5f:
                    b7:3b:52:c4:18:b2:74:84:6d:9e:24:99:1a:5c:60:
                    ea:fd:42:c8:44:c4:ad:06:91:c9:11:81:83:e3:07:
                    0a:ed:dc:6e:2c:9e:96:41:80:14:5c:5f:58:9b:48:
                    9d:83:6f:2e:f3:96:43:23:13:a5:1e:92:a2:d0:33:
                    0c:b8:9d:c5:eb:9b:0c:9b:0a:d6:8c:d1:dd:b9:cb:
                    c7:18:eb:74:d9:a5:29:9a:db:27:97:8c:27:fe:cb:
                    10:d7:ae:a6:d4:63:82:da:b8:f3:d9:93:95:47:b9:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:3B:63:BE:0C:9F:D2:0F:44:17:1D:E1:AD:23:DB:20:7C:B8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.176.0/20
                  199.96.120.0/22
                  204.89.253.0/24
                  216.249.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:49:90:1f:e4:d4:2b:ee:8a:29:4c:f4:02:f4:d1:c6:4d:
         96:9f:66:40:cf:18:f4:e8:d3:e3:7d:5d:d9:26:d1:de:ce:43:
         89:2f:91:08:bb:59:68:50:af:4e:4e:ec:fd:f4:50:45:43:74:
         e9:0f:24:1d:c4:ae:db:e0:93:98:da:15:76:93:a5:d4:68:b5:
         02:f6:14:e0:24:dc:40:55:63:09:91:25:f6:10:a6:53:a4:c6:
         c7:2d:03:77:7e:85:e2:75:ca:b7:d5:5c:b9:a0:fc:a8:c7:39:
         0b:c6:07:f3:0f:6b:bf:9f:8d:0f:23:76:a9:9a:1a:39:2e:64:
         6f:98:44:24:10:20:c4:51:84:c2:93:11:e3:b3:ff:ca:1a:72:
         c6:12:64:c6:65:b3:e7:0b:51:b0:33:77:e0:77:49:41:ce:1c:
         3c:38:e4:e3:fa:28:0d:b1:d9:8b:43:0b:11:c6:25:da:96:98:
         fd:16:82:70:b3:49:4d:de:b7:2e:88:8e:37:56:20:73:ae:58:
         ba:2b:1d:36:7c:83:72:1e:b8:fd:1c:2a:7f:bc:f4:a4:e9:01:
         00:b9:e6:d0:73:58:5f:f5:69:f1:32:5e:d9:79:32:eb:1a:a2:
         10:51:b5:15:5b:dc:dc:02:06:77:e7:b1:0a:19:5a:b9:31:ab:
         60:af:03:94
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEV9EzDRv5KTgsWNrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi
ZjllMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
YmZmZTE5YmMtNmE2Ny00YWJjLWFjMTAtNjc2NjhkNGJmYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRW9vFVR8xu0C71cJYhGMX7G/m2yesJmgCpU
3Gw1YJZtilx7ExAoTodxPR02jVDHcpAWUmWcqIufJMzReMhK/RsYPOjHRmHWYGc8
rW0cDQ9pIPXB6T2jn3G1tAPhRUv6aj6F0FnGSOk5am07IGaQ76zCOOIUTuzJ1pWJ
edQrI9DmyvmyPbkDOq7KIeOtstHMPKk/a1+3O1LEGLJ0hG2eJJkaXGDq/ULIRMSt
BpHJEYGD4wcK7dxuLJ6WQYAUXF9Ym0idg28u85ZDIxOlHpKi0DMMuJ3F65sMmwrW
jNHducvHGOt02aUpmtsnl4wn/ssQ166m1GOC2rjz2ZOVR7k+ZwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFPZbO2O+DJ/SD0QXHeGtI9sgfLgkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi
YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvOWRhYjJmZjQtNmU0Ny0z
ZTEyLTlhOTYtNGNkNzBiNGU4ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5
YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl
YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0
YmY3ZWJmOWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQErfOwAwQC
x2B4AwQAzFn9AwQF2PlAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD5iSZAf5NQr7oopTPQC9NHGTZafZkDP
GPTo0+N9Xdkm0d7OQ4kvkQi7WWhQr05O7P30UEVDdOkPJB3Ertvgk5jaFXaTpdRo
tQL2FOAk3EBVYwmRJfYQplOkxsctA3d+heJ1yrfVXLmg/KjHOQvGB/MPa7+fjQ8j
dqmaGjkuZG+YRCQQIMRRhMKTEeOz/8oacsYSZMZls+cLUbAzd+B3SUHOHDw45OP6
KA2x2YtDCxHGJdqWmP0WgnCzSU3ety6IjjdWIHOuWLorHTZ8g3IeuP0cKn+89KTp
AQC55tBzWF/1afEyXtl5MusaohBRtRVb3NwCBnfnsQoZWrkxq2CvA5Q=
-----END CERTIFICATE-----
Generated at Mon May 6 03:49:55 2024 by rpki-client on console-fra.rpki-client.org