Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa
File:                     b189127e-17d2-3a1b-8678-fb80dca44ec2.roa (raw, json)
Hash identifier:          SuA6p+Uhxk+oDgpg7AjlxG6eV8JYJtwFbwc5J6HlCFI=
Subject key identifier:   7F:91:24:DD:02:5E:3F:AA:15:AC:13:1C:D2:72:FF:CB:EC:DF:21:22
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844FF901477082A88B76B904F00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     5650
IP address blocks:        172.98.167.0/24 maxlen: 24
                          104.251.81.0/24 maxlen: 24
                          104.218.195.0/24 maxlen: 24
                          172.98.170.0/24 maxlen: 24
                          158.115.228.0/23 maxlen: 23
                          172.98.189.0/24 maxlen: 24
                          104.218.199.0/24 maxlen: 24
                          104.251.86.0/24 maxlen: 24
                          207.230.114.0/24 maxlen: 24
                          104.251.93.0/24 maxlen: 24
                          141.193.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:14:77:08:2a:88:b7:6b:90:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=3bdf5ac4-a9ff-4f55-a022-1e2cedbf5a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9c:3a:f7:5e:8b:b2:4f:8c:8d:8c:2d:30:ce:
                    66:b0:f0:85:d3:bd:63:18:0d:5c:d6:10:44:9a:9f:
                    88:30:f4:cf:80:d7:ca:49:67:03:ad:0f:52:f9:55:
                    82:d5:8c:60:7b:c8:18:f2:e2:3c:e0:4b:d0:db:e1:
                    04:41:ae:ce:0f:d8:4d:bd:5c:15:63:9a:d9:49:b2:
                    96:b9:41:67:45:f6:91:e2:44:a8:d4:91:28:a4:69:
                    a8:6e:cf:dd:b2:14:e4:fa:80:7f:12:ff:30:c6:a8:
                    ff:17:32:ff:75:1f:ef:f2:82:e5:95:69:a8:d5:33:
                    22:ef:26:bb:67:28:c7:66:b9:7d:22:29:70:16:56:
                    33:a9:47:cd:32:85:4d:06:fe:80:f3:71:c8:29:0c:
                    e4:6e:7b:27:7b:24:29:51:ef:42:da:86:45:ec:a8:
                    8a:c5:d8:63:8c:9f:57:31:cc:b3:32:0e:8a:19:ea:
                    c5:14:ed:34:d3:7f:8d:fa:7e:83:42:40:27:fe:5a:
                    b3:26:a7:33:94:85:eb:41:be:38:51:46:6c:99:90:
                    cb:3b:75:17:9e:79:f9:6b:9c:dc:e8:c2:4f:7b:38:
                    1e:c0:3c:77:1c:8f:a5:33:aa:01:93:73:9c:ae:35:
                    15:2c:e0:f0:2a:d3:3b:24:0b:ef:13:86:1b:d3:41:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:91:24:DD:02:5E:3F:AA:15:AC:13:1C:D2:72:FF:CB:EC:DF:21:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.195.0/24
                  104.218.199.0/24
                  104.251.81.0/24
                  104.251.86.0/24
                  104.251.93.0/24
                  141.193.96.0/23
                  158.115.228.0/23
                  172.98.167.0/24
                  172.98.170.0/24
                  172.98.189.0/24
                  207.230.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:1c:94:b7:db:1f:88:5f:bc:05:f8:a5:fc:e9:19:15:b4:
         80:36:26:5e:b2:85:9d:f4:9a:42:7f:f8:bc:59:09:32:d2:db:
         dd:33:e3:67:ad:a2:a9:63:35:c1:89:84:e8:e8:0f:74:67:c2:
         ab:db:3c:fe:50:90:9e:76:1e:3e:b8:e1:3e:7d:8b:73:b7:e3:
         0f:2f:96:b8:27:44:72:40:06:76:0a:dc:bc:a7:3e:b4:a0:67:
         c5:c6:01:b7:83:01:db:a5:f2:bc:0a:95:81:2d:d7:d5:84:05:
         7d:f6:a8:d9:1b:ce:99:54:c2:12:91:2f:c5:3b:84:ae:ba:07:
         d8:cc:60:29:54:02:e6:b3:b7:d6:48:25:b3:20:b6:08:29:3b:
         1b:24:2f:26:57:88:37:dd:c1:34:95:77:b1:f4:23:36:32:57:
         62:f0:92:52:7d:7e:bf:54:4a:dc:6a:47:2e:f7:e6:9e:36:f8:
         17:07:ac:05:8e:fd:d1:c8:3e:10:27:52:9a:b0:0f:78:f5:cc:
         e3:8a:91:d5:f0:80:d9:c9:c9:a5:1d:ca:3b:29:e6:d5:85:12:
         4e:ee:93:6f:da:5f:58:94:84:ac:5b:e7:31:e4:6e:bc:89:79:
         3e:61:8b:61:cb:6a:00:28:99:40:53:f3:5a:50:ad:94:65:e6:
         d6:a8:93:ae
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWET/kBR3CCqIt2uQTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDIyNDE0MDAzMVoXDTI0MDUyNDEzMDAzMVowLzEtMCsGA1UEAxMk
M2JkZjVhYzQtYTlmZi00ZjU1LWEwMjItMWUyY2VkYmY1YTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZw6916Lsk+MjYwtMM5msPCF071jGA1c1hBE
mp+IMPTPgNfKSWcDrQ9S+VWC1Yxge8gY8uI84EvQ2+EEQa7OD9hNvVwVY5rZSbKW
uUFnRfaR4kSo1JEopGmobs/dshTk+oB/Ev8wxqj/FzL/dR/v8oLllWmo1TMi7ya7
ZyjHZrl9IilwFlYzqUfNMoVNBv6A83HIKQzkbnsneyQpUe9C2oZF7KiKxdhjjJ9X
McyzMg6KGerFFO0003+N+n6DQkAn/lqzJqczlIXrQb44UUZsmZDLO3UXnnn5a5zc
6MJPezgewDx3HI+lM6oBk3OcrjUVLODwKtM7JAvvE4Yb00GHEQIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFH+RJN0CXj+qFawTHNJy/8vs3yEiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYjE4OTEyN2UtMTdkMi0z
YTFiLTg2NzgtZmI4MGRjYTQ0ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAaNrDAwQA
aNrHAwQAaPtRAwQAaPtWAwQAaPtdAwQBjcFgAwQBnnPkAwQArGKnAwQArGKqAwQA
rGK9AwQAz+ZyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEHSHJS32x+IX7wF+KX86RkVtIA2Jl6yhZ30mkJ/
+LxZCTLS290z42etoqljNcGJhOjoD3RnwqvbPP5QkJ52Hj644T59i3O34w8vlrgn
RHJABnYK3LynPrSgZ8XGAbeDAdul8rwKlYEt19WEBX32qNkbzplUwhKRL8U7hK66
B9jMYClUAuazt9ZIJbMgtggpOxskLyZXiDfdwTSVd7H0IzYyV2LwklJ9fr9UStxq
Ry735p42+BcHrAWO/dHIPhAnUpqwD3j1zOOKkdXwgNnJyaUdyjsp5tWFEk7uk2/a
X1iUhKxb5zHkbryJeT5hi2HLagAomUBT81pQrZRl5taok64=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:42 2024 by rpki-client on console-ams.rpki-client.org