Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
File:                     ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa (raw, json)
Hash identifier:          8clvwkHDctTe7MUmCjq4A5nw53SqRopqFNHmlaKSTf0=
Subject key identifier:   EC:2A:34:E4:0A:8E:DF:23:D4:73:C3:C5:D7:D7:AC:5E:B0:CF:B2:F8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845B21E299B13D4D0CBBF352BF0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     46261
IP address blocks:        158.115.246.0/23 maxlen: 23
                          158.115.250.0/23 maxlen: 23
                          158.115.230.0/23 maxlen: 23
                          158.115.242.0/23 maxlen: 23
                          158.115.226.0/23 maxlen: 23
                          158.115.224.0/23 maxlen: 23
                          158.115.244.0/23 maxlen: 23
                          158.115.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:29:9b:13:d4:d0:cb:bf:35:2b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=50d4eb78-2fc9-4805-b96d-f3aeba682184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:da:88:a2:d1:5d:53:b4:2f:71:7e:b0:bd:
                    29:1e:1d:09:c6:71:72:a9:c0:49:c8:a8:3d:c2:20:
                    62:93:15:2e:d3:93:fd:33:80:64:61:84:6e:6f:e5:
                    64:69:bc:d4:30:6b:bc:05:65:01:20:4b:bb:e9:59:
                    cd:ba:6a:8c:39:ed:d0:60:78:bd:a4:6c:3f:1c:8a:
                    9c:b1:f6:0c:9b:7b:d4:40:70:68:ec:de:b7:e8:13:
                    89:11:c5:a8:e0:33:ad:28:d2:1b:15:76:30:c3:b0:
                    68:05:e8:a4:b7:59:32:54:db:1d:9a:38:e7:29:e1:
                    2c:a7:5b:65:ed:00:d5:92:a4:f2:1f:9a:0a:f0:10:
                    25:1a:d1:10:72:8a:ec:44:98:61:ed:b0:ca:fd:3c:
                    92:23:98:28:61:62:e4:d0:7b:3c:81:0b:e7:e0:77:
                    78:c6:dd:57:e9:c7:b9:df:d9:02:53:51:cd:5d:9e:
                    ad:6a:f6:73:8b:35:ec:c3:ef:27:eb:71:77:93:c9:
                    36:1e:f3:10:77:a8:d5:6e:19:63:65:04:aa:af:f8:
                    15:19:b3:85:20:05:39:01:64:e1:df:93:77:b5:63:
                    05:93:ff:54:a5:20:e7:07:b1:83:10:46:0e:f1:67:
                    31:f2:ef:7a:35:1b:87:77:5f:71:aa:c4:f9:d9:18:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2A:34:E4:0A:8E:DF:23:D4:73:C3:C5:D7:D7:AC:5E:B0:CF:B2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.224.0/22
                  158.115.230.0/23
                  158.115.236.0/22
                  158.115.242.0-158.115.247.255
                  158.115.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:92:cc:ff:41:2f:36:3d:1c:98:99:03:b2:f9:0f:38:9c:55:
         ff:2d:97:9a:58:60:1f:c3:91:50:d5:36:7c:87:e3:c8:72:c9:
         b7:ed:0d:31:48:cb:bb:68:75:ad:a8:a4:85:7d:64:9a:9d:5b:
         04:97:bd:c5:f2:93:45:45:24:5b:ea:17:5b:2a:34:8b:49:e7:
         4c:0a:89:f1:24:7d:29:57:63:34:e3:71:63:2e:52:a2:2d:19:
         c0:93:46:9a:a4:9b:ee:3d:46:43:9f:29:dc:9b:33:83:e7:07:
         f0:ef:a1:65:5a:83:59:8b:b5:91:ee:94:45:b7:b8:05:d0:28:
         b6:30:b3:36:6b:3f:cb:89:57:0f:db:1e:09:22:0d:27:b8:10:
         5a:2e:b0:3c:1f:6b:6f:98:48:8a:3e:76:8a:26:a5:a1:89:72:
         b2:11:5b:5e:de:66:4b:d5:34:f2:20:12:9d:c3:69:5a:f1:62:
         ce:83:78:54:e6:05:db:2b:35:82:ac:0e:e7:cb:c5:43:05:2d:
         fe:00:6a:f2:fd:a8:d5:1a:a7:c9:75:44:35:31:e4:df:50:8f:
         8c:ea:d2:d1:98:e5:60:6c:da:c6:8d:b3:4a:dc:b5:4c:fc:36:
         c2:75:a4:fa:d4:9a:4f:02:5f:aa:7c:00:cd:f0:57:c9:d9:32:
         d5:6a:de:e3
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEWyHimbE9TQy781K/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk
NTBkNGViNzgtMmZjOS00ODA1LWI5NmQtZjNhZWJhNjgyMTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlbaiKLRXVO0L3F+sL0pHh0JxnFyqcBJyKg9
wiBikxUu05P9M4BkYYRub+VkabzUMGu8BWUBIEu76VnNumqMOe3QYHi9pGw/HIqc
sfYMm3vUQHBo7N636BOJEcWo4DOtKNIbFXYww7BoBeikt1kyVNsdmjjnKeEsp1tl
7QDVkqTyH5oK8BAlGtEQcorsRJhh7bDK/TySI5goYWLk0Hs8gQvn4Hd4xt1X6ce5
39kCU1HNXZ6tavZzizXsw+8n63F3k8k2HvMQd6jVbhljZQSqr/gVGbOFIAU5AWTh
35N3tWMFk/9UpSDnB7GDEEYO8Wcx8u96NRuHd19xqsT52RicvwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFOwqNOQKjt8j1HPDxdfXrF6wz7L4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2E3NTAyYzQtN2Y2ZC0z
ZGYyLTg2ZWYtYjRlYWFiMGQ3MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCnnPgAwQB
nnPmAwQCnnPsMAwDBAGec/IDBAOec/ADBAGec/owVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABpLM/0EvNj0c
mJkDsvkPOJxV/y2XmlhgH8ORUNU2fIfjyHLJt+0NMUjLu2h1raikhX1kmp1bBJe9
xfKTRUUkW+oXWyo0i0nnTAqJ8SR9KVdjNONxYy5Soi0ZwJNGmqSb7j1GQ58p3Jsz
g+cH8O+hZVqDWYu1ke6URbe4BdAotjCzNms/y4lXD9seCSINJ7gQWi6wPB9rb5hI
ij52iialoYlyshFbXt5mS9U08iASncNpWvFizoN4VOYF2ys1gqwO58vFQwUt/gBq
8v2o1RqnyXVENTHk31CPjOrS0ZjlYGzaxo2zSty1TPw2wnWk+tSaTwJfqnwAzfBX
ydky1Wre4w==
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:42 2024 by rpki-client on console-ams.rpki-client.org