Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa
File:                     248dd090-9420-37f9-9305-b5cd56b24a28.roa (raw, json)
Hash identifier:          F0uMz2BNWBosys7cpnex7gRXaPvv+OpnSZIo9kdtS2U=
Subject key identifier:   C8:32:8B:9E:11:77:F1:B1:C0:92:87:D8:26:CC:16:02:65:D4:E8:EB
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584733609752B4E9391DAEC25E00
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     25820
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:97:52:b4:e9:39:1d:ae:c2:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=5c7072a2-9c2c-40a8-8c4a-305a237ef17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:bb:54:3e:25:30:88:22:88:73:34:4b:58:
                    81:17:a8:af:85:2d:6d:a8:b7:2a:f0:b7:9d:e3:70:
                    94:6c:2c:37:b1:dc:a2:b5:dd:39:40:33:88:ac:b6:
                    66:f1:2a:a8:80:86:98:91:be:63:b0:9c:b0:90:3d:
                    ff:3b:48:34:db:7c:2a:63:42:6b:b5:4f:39:b0:74:
                    52:23:38:a0:d1:7b:f7:43:35:ce:66:2c:d2:51:bd:
                    c3:09:81:a6:3e:a4:db:3d:ab:0d:9f:8b:0f:0e:f4:
                    5f:6a:fe:ad:69:29:55:cf:9d:49:6f:36:72:d9:6c:
                    2c:4d:f4:dc:d9:7b:47:5a:c9:c9:d3:6f:90:92:83:
                    85:9d:b1:4e:93:9f:47:62:4e:a4:12:cb:30:f5:52:
                    f8:b0:80:67:c1:d0:52:3a:b4:29:2a:eb:2a:a4:2e:
                    84:cc:b1:40:e2:94:3b:f4:77:56:a1:f1:24:d5:db:
                    7d:21:7b:37:73:37:12:8f:bc:f6:de:b5:09:db:db:
                    d0:0c:8a:0c:c9:a2:87:b2:84:4d:8f:31:2c:52:dc:
                    d7:5f:c3:91:0e:ab:aa:1f:77:8e:7e:d2:f3:bf:1d:
                    d4:02:7b:23:6a:f4:b3:16:d1:1e:bf:61:db:52:44:
                    64:c1:83:fb:c1:b0:a2:18:8d:0d:fe:74:2a:3f:7e:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:32:8B:9E:11:77:F1:B1:C0:92:87:D8:26:CC:16:02:65:D4:E8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:92:6d:b8:cb:5b:aa:57:01:b9:fb:cd:53:e4:be:2e:15:47:
         65:4b:94:07:43:bc:1c:ad:62:4f:ed:e9:42:d9:77:b4:ec:cc:
         4d:df:b8:07:81:73:80:ac:bf:ca:ec:0f:c2:80:6b:fe:90:a6:
         51:9f:bc:f1:bf:68:27:e0:48:15:1c:7b:01:2d:08:52:bb:65:
         1a:2e:85:45:e2:5a:af:97:d1:57:af:00:54:b0:c8:86:a5:e0:
         35:e1:66:4f:b7:18:1f:de:5a:14:a5:25:20:79:38:06:a7:2a:
         35:9b:18:12:5c:07:7f:41:ba:38:91:87:2f:e0:b0:b1:85:49:
         38:50:99:2a:48:2f:8d:c0:82:ba:18:dc:93:e3:8c:72:16:39:
         ae:da:59:e9:72:9c:da:51:e1:d2:d1:d8:75:38:da:14:e9:53:
         6b:5e:37:02:b6:f0:74:85:ac:b8:06:55:e4:0b:8f:2e:3f:7d:
         b8:ee:29:82:f0:a1:06:88:e5:32:d7:83:1a:c9:75:f4:49:62:
         7d:ea:56:67:ba:3c:82:80:0b:82:12:ea:9d:71:6a:42:33:5b:
         8d:78:bc:5b:06:5e:cb:a0:8b:99:aa:23:38:85:4f:1d:5b:71:
         24:dc:38:d0:39:71:a7:2f:95:3c:b8:ed:4b:7e:e8:2a:47:89:
         36:8f:c4:63
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEczYJdStOk5Ha7CXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj
MTIzMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
NWM3MDcyYTItOWMyYy00MGE4LThjNGEtMzA1YTIzN2VmMTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFK7VD4lMIgiiHM0S1iBF6ivhS1tqLcq8Led
43CUbCw3sdyitd05QDOIrLZm8SqogIaYkb5jsJywkD3/O0g023wqY0JrtU85sHRS
Izig0Xv3QzXOZizSUb3DCYGmPqTbPasNn4sPDvRfav6taSlVz51JbzZy2WwsTfTc
2XtHWsnJ02+QkoOFnbFOk59HYk6kEssw9VL4sIBnwdBSOrQpKusqpC6EzLFA4pQ7
9HdWofEk1dt9IXs3czcSj7z23rUJ29vQDIoMyaKHsoRNjzEsUtzXX8ORDquqH3eO
ftLzvx3UAnsjavSzFtEev2HbUkRkwYP7wbCiGI0N/nQqP3712QIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFMgyi54Rd/GxwJKH2CbMFgJl1OjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw
YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMjQ4ZGQwOTAtOTQyMC0z
N2Y5LTkzMDUtYjVjZDU2YjI0YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1
MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5
YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi
YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC
aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ADmSbbjLW6pXAbn7zVPkvi4VR2VLlAdDvBytYk/t6ULZd7TszE3fuAeBc4Csv8rs
D8KAa/6QplGfvPG/aCfgSBUcewEtCFK7ZRouhUXiWq+X0VevAFSwyIal4DXhZk+3
GB/eWhSlJSB5OAanKjWbGBJcB39BujiRhy/gsLGFSThQmSpIL43AgroY3JPjjHIW
Oa7aWelynNpR4dLR2HU42hTpU2teNwK28HSFrLgGVeQLjy4/fbjuKYLwoQaI5TLX
gxrJdfRJYn3qVme6PIKAC4IS6p1xakIzW414vFsGXsugi5mqIziFTx1bcSTcONA5
cacvlTy47Ut+6CpHiTaPxGM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org