Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b45d95f8-9120-3572-a0e2-479b1f47e51b.roa
File:                     b45d95f8-9120-3572-a0e2-479b1f47e51b.roa (raw, json)
Hash identifier:          +moanTNceK7EPCKpwScJtbQkmw8aAXJ1aFK+9WU//pk=
Subject key identifier:   D4:D4:15:FC:A6:90:EE:FC:82:A7:EC:3A:57:05:5B:30:A8:C2:8B:D2
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844EA9FF178FAEEDFA7FDABA700
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b45d95f8-9120-3572-a0e2-479b1f47e51b.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     46261
IP address blocks:        207.230.108.0/22 maxlen: 22
                          207.230.100.0/22 maxlen: 22
                          207.230.96.0/22 maxlen: 22
                          207.230.127.0/24 maxlen: 24
                          207.230.122.0/23 maxlen: 23
                          207.230.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:f1:78:fa:ee:df:a7:fd:ab:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=c73d67e2-2936-478e-8fbe-2a61a57b7d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:cd:df:3a:5b:6a:a3:5a:a1:fc:57:76:8a:
                    6b:0c:5c:d8:9f:0c:fc:19:1c:77:70:36:30:f2:bb:
                    d8:10:1a:b7:71:f0:a6:e3:51:59:9e:91:c5:be:f4:
                    3b:44:41:84:0f:bf:85:1a:16:35:fb:6f:21:ac:1a:
                    78:f5:dd:19:c3:7c:c7:84:28:80:87:8e:68:cb:85:
                    fb:f3:15:0e:a5:af:34:b8:24:82:41:92:45:df:8e:
                    ff:e8:33:3b:65:e5:22:91:15:6f:63:e8:11:f4:83:
                    dc:d3:b8:a2:c4:b4:1f:fb:f7:e8:f5:3f:c0:8c:c4:
                    96:f6:29:fe:9f:c5:c1:a1:c9:5c:e2:f3:97:1d:1e:
                    3f:15:fc:3f:b5:97:15:c3:96:45:c1:de:c0:42:26:
                    11:d8:d5:87:b1:58:fc:08:81:ac:ca:e5:e6:4e:a4:
                    c0:57:3a:a7:fd:77:4b:66:9f:c1:78:c7:67:65:66:
                    19:49:49:fe:7b:bf:54:0f:ae:56:4c:c2:f8:71:3b:
                    c1:cf:58:51:26:07:01:94:8e:ad:18:a1:27:e0:85:
                    f7:66:c3:12:6e:36:83:12:d6:51:1c:fd:14:2d:d4:
                    1a:bd:fb:a4:87:70:42:24:45:fa:bf:98:ff:1e:4c:
                    a7:a5:38:d1:73:d1:76:78:ab:fd:d1:4b:7a:f7:90:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:15:FC:A6:90:EE:FC:82:A7:EC:3A:57:05:5B:30:A8:C2:8B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b45d95f8-9120-3572-a0e2-479b1f47e51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.96.0/21
                  207.230.108.0/22
                  207.230.120.0/22
                  207.230.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:91:cc:16:cd:45:6c:db:da:63:fa:9c:c0:d4:dc:7e:78:87:
         5b:12:43:b0:d9:e8:7d:08:2b:e6:05:8a:fe:75:9e:9d:4d:e8:
         1f:33:df:48:cc:70:b9:58:35:68:9f:b1:d3:0e:f6:ca:36:a8:
         e8:2e:de:8a:e6:25:77:c3:9f:75:21:eb:f3:c0:54:38:00:3d:
         79:77:b8:a3:84:95:27:1a:dc:e8:7f:44:a8:10:c4:d2:b4:ad:
         66:b5:4c:6e:38:d1:a0:7b:24:77:e6:af:30:b2:ff:88:78:35:
         b9:6e:ec:cf:49:96:5e:c5:1e:0d:3e:ef:92:19:cd:1b:d4:cc:
         f5:ad:59:16:7b:77:6c:a1:13:13:7d:58:ab:45:29:15:9d:b3:
         1d:4b:1c:95:36:60:c5:7b:5e:5f:81:0d:a5:c0:96:13:eb:a1:
         fc:97:85:0a:3e:77:b6:6d:4a:b6:bd:d1:31:86:9a:50:70:08:
         93:e3:21:52:40:ad:ce:26:0c:8b:8f:77:51:54:c7:95:6e:09:
         fa:38:c4:45:18:b6:cb:7f:f0:d5:fa:15:db:ca:6c:4d:b5:6a:
         63:ed:1b:d0:a2:0c:a9:52:4c:de:e2:d9:12:b4:bb:74:de:93:
         fa:b2:72:6a:51:a4:07:74:e3:c4:e0:50:0f:fb:85:e1:e1:fa:
         e5:9e:8c:30
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWETqn/F4+u7fp/2rpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDIxNzAyMDAyN1oXDTI0MDUxNzAxMDAyN1owLzEtMCsGA1UEAxMk
YzczZDY3ZTItMjkzNi00NzhlLThmYmUtMmE2MWE1N2I3ZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP/N3zpbaqNaofxXdoprDFzYnwz8GRx3cDYw
8rvYEBq3cfCm41FZnpHFvvQ7REGED7+FGhY1+28hrBp49d0Zw3zHhCiAh45oy4X7
8xUOpa80uCSCQZJF347/6DM7ZeUikRVvY+gR9IPc07iixLQf+/fo9T/AjMSW9in+
n8XBoclc4vOXHR4/Ffw/tZcVw5ZFwd7AQiYR2NWHsVj8CIGsyuXmTqTAVzqn/XdL
Zp/BeMdnZWYZSUn+e79UD65WTML4cTvBz1hRJgcBlI6tGKEn4IX3ZsMSbjaDEtZR
HP0ULdQavfukh3BCJEX6v5j/HkynpTjRc9F2eKv90Ut695CMLQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFNTUFfymkO78gqfsOlcFWzCowovSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYjQ1ZDk1ZjgtOTEyMC0z
NTcyLWEwZTItNDc5YjFmNDdlNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDz+ZgAwQC
z+ZsAwQCz+Z4AwQAz+Z/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGeRzBbNRWzb2mP6nMDU3H54h1sSQ7DZ
6H0IK+YFiv51np1N6B8z30jMcLlYNWifsdMO9so2qOgu3ormJXfDn3Uh6/PAVDgA
PXl3uKOElSca3Oh/RKgQxNK0rWa1TG440aB7JHfmrzCy/4h4Nblu7M9Jll7FHg0+
75IZzRvUzPWtWRZ7d2yhExN9WKtFKRWdsx1LHJU2YMV7Xl+BDaXAlhProfyXhQo+
d7ZtSra90TGGmlBwCJPjIVJArc4mDIuPd1FUx5VuCfo4xEUYtst/8NX6FdvKbE21
amPtG9CiDKlSTN7i2RK0u3Tek/qycmpRpAd048TgUA/7heHh+uWejDA=
-----END CERTIFICATE-----
Generated at Thu May 2 04:28:00 2024 by rpki-client on console-fra.rpki-client.org