Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File:                     75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier:          MKkk9eTpGwQ8lbC1cEiR0IYIY3HnBm/5h7KDl9C8piQ=
Subject key identifier:   4B:BB:AA:EA:DF:E6:00:1E:28:6D:11:B8:DC:0F:14:9C:68:92:50:E4
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F43285845883DD56DD1CCA0055C6EAD40
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     25820
IP address blocks:        45.62.96.0/19 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          23.105.192.0/19 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d5:6d:d1:cc:a0:05:5c:6e:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=7089f43e-b941-4470-9e2f-413946261be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:67:03:1a:5d:a9:14:62:c7:09:0d:ef:40:
                    d9:d9:0c:43:0c:d7:2b:70:ed:d3:22:86:6a:6e:1c:
                    08:59:6c:94:07:31:f1:0a:7b:40:68:5e:97:65:a0:
                    b1:20:00:a0:40:70:23:a8:f3:63:e6:53:4a:0e:89:
                    23:91:58:64:0c:5c:a0:4b:d2:50:22:c6:8d:0d:26:
                    ea:a8:65:44:85:b3:8c:4b:b6:b9:0b:25:ae:21:8a:
                    b4:26:92:44:33:a3:28:38:16:ff:68:a3:43:be:ed:
                    36:e4:f2:88:8d:85:4a:76:bb:97:46:f2:21:93:bd:
                    39:50:3a:f0:fd:32:24:32:33:78:4a:e4:10:7a:aa:
                    a6:44:1f:a2:50:8a:21:18:62:c0:da:77:5c:c7:15:
                    ec:94:ca:d5:ad:c3:5a:81:0b:34:98:e8:b7:03:85:
                    e8:89:02:07:3c:f9:19:2d:77:82:d0:08:b4:f2:74:
                    4c:bf:fd:5e:90:d4:1f:bd:64:3c:c5:e2:76:aa:55:
                    5c:76:06:e8:f7:b3:a0:b0:51:b7:87:db:ef:28:d2:
                    9f:7f:4f:9d:b0:60:6d:c2:54:e4:71:c5:ce:e1:20:
                    47:ca:d0:ad:a6:d5:a0:e3:52:65:a9:77:47:44:37:
                    d5:5e:d7:34:96:6b:3b:cc:6c:a8:fe:44:7d:34:70:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:AA:EA:DF:E6:00:1E:28:6D:11:B8:DC:0F:14:9C:68:92:50:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:d0:52:64:da:17:c3:1d:34:cb:9e:18:cd:f4:16:4c:c4:
         67:9a:39:30:ae:c5:17:2e:32:a0:2d:d9:62:0a:c0:4c:de:a0:
         b2:8f:41:94:4e:80:40:00:df:f7:08:9c:44:63:6a:53:76:7a:
         ba:fc:52:53:de:f4:32:2a:6c:99:cc:ae:cf:35:50:5d:77:fb:
         fd:76:de:38:20:86:b2:21:d2:0f:52:e7:d2:87:2e:7f:cd:11:
         b5:5b:bf:d5:77:c2:e8:ff:68:0f:5d:38:0f:68:f0:fb:b0:4c:
         4a:5c:93:7e:c1:1a:c7:4d:5f:97:3a:ac:bf:a3:36:2b:2f:48:
         f2:06:1e:69:44:ef:d4:65:5d:28:13:84:a8:39:e8:d5:6a:be:
         a5:94:9a:ec:d3:06:75:29:2e:fb:16:39:46:01:97:6a:e5:fd:
         fc:5c:42:99:8d:6f:0c:45:df:1e:67:d4:f5:da:ae:90:8b:b6:
         1d:9f:bf:e3:08:5e:f2:bb:d8:5b:26:ee:76:bc:93:02:59:bb:
         11:24:9a:0f:a1:d7:bb:7b:f2:bc:f7:46:75:ae:3a:b0:98:eb:
         91:21:87:ba:9b:e4:50:3d:16:a7:53:f7:4d:bb:70:4c:2f:7c:
         4d:a8:12:48:e6:1a:fa:91:dc:e1:f9:4c:df:88:d0:3e:5d:c8:
         72:79:88:e2
-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEWIPdVt0cygBVxurUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1
ZTM5MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk
NzA4OWY0M2UtYjk0MS00NDcwLTllMmYtNDEzOTQ2MjYxYmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlohnAxpdqRRixwkN70DZ2QxDDNcrcO3TIoZq
bhwIWWyUBzHxCntAaF6XZaCxIACgQHAjqPNj5lNKDokjkVhkDFygS9JQIsaNDSbq
qGVEhbOMS7a5CyWuIYq0JpJEM6MoOBb/aKNDvu025PKIjYVKdruXRvIhk705UDrw
/TIkMjN4SuQQeqqmRB+iUIohGGLA2ndcxxXslMrVrcNagQs0mOi3A4XoiQIHPPkZ
LXeC0Ai08nRMv/1ekNQfvWQ8xeJ2qlVcdgbo97OgsFG3h9vvKNKff0+dsGBtwlTk
ccXO4SBHytCtptWg41JlqXdHRDfVXtc0lms7zGyo/kR9NHBFOwIDAQABo4IDvDCC
A7gwHQYDVR0OBBYEFEu7qurf5gAeKG0RuNwPFJxoklDkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx
ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvNzUxNjRjM2ItMTk3MC0z
NGVkLWFjY2ItOWNmZDdhOWIzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi
YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1
NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky
OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME
BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME
BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME
AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQA6cdBSZNoXwx00y54YzfQWTMRnmjkwrsUXLjKgLdliCsBM
3qCyj0GUToBAAN/3CJxEY2pTdnq6/FJT3vQyKmyZzK7PNVBdd/v9dt44IIayIdIP
UufShy5/zRG1W7/Vd8Lo/2gPXTgPaPD7sExKXJN+wRrHTV+XOqy/ozYrL0jyBh5p
RO/UZV0oE4SoOejVar6llJrs0wZ1KS77FjlGAZdq5f38XEKZjW8MRd8eZ9T12q6Q
i7Ydn7/jCF7yu9hbJu52vJMCWbsRJJoPode7e/K890Z1rjqwmOuRIYe6m+RQPRan
U/dNu3BML3xNqBJI5hr6kdzh+UzfiNA+XchyeYji
-----END CERTIFICATE-----
Generated at Sun Apr 28 12:24:22 2024 by rpki-client on console-ams.rpki-client.org