Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
File:                     3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa (raw, json)
Hash identifier:          o/PO1bFdB6SNqqupXz9HqLQMo6tzfm37OPHFU0Za+ss=
Subject key identifier:   4C:5A:23:D1:06:BD:69:F6:09:0F:15:EC:16:34:54:96:BD:10:9C:71
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F43285845B7B373AA336756025F327580
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     30698
IP address blocks:        216.213.51.0/24 maxlen: 24
                          216.213.49.0/24 maxlen: 24
                          216.213.50.0/24 maxlen: 24
                          209.221.253.0/24 maxlen: 24
                          216.213.48.0/24 maxlen: 24
                          216.213.63.0/24 maxlen: 24
                          209.221.243.0/24 maxlen: 24
                          216.213.61.0/24 maxlen: 24
                          209.221.247.0/24 maxlen: 24
                          216.213.62.0/24 maxlen: 24
                          216.213.59.0/24 maxlen: 24
                          216.213.60.0/24 maxlen: 24
                          209.221.244.0/24 maxlen: 24
                          209.221.242.0/24 maxlen: 24
                          209.221.252.0/24 maxlen: 24
                          209.221.241.0/24 maxlen: 24
                          209.221.240.0/24 maxlen: 24
                          209.221.248.0/24 maxlen: 24
                          209.221.246.0/24 maxlen: 24
                          216.213.57.0/24 maxlen: 24
                          216.213.58.0/24 maxlen: 24
                          216.213.56.0/24 maxlen: 24
                          209.221.245.0/24 maxlen: 24
                          209.221.249.0/24 maxlen: 24
                          209.221.250.0/24 maxlen: 24
                          209.221.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:73:aa:33:67:56:02:5f:32:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=5a332882-67f2-4c73-b1be-6ff406655945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:93:2c:4d:5c:ae:c8:7f:50:2e:cb:1e:94:
                    e0:7c:44:2e:1b:2d:66:e1:29:06:f3:92:9a:2b:ad:
                    7e:28:12:28:81:61:5d:47:b0:4d:9c:f6:08:09:3c:
                    e6:39:ca:7d:cc:a5:43:4f:14:17:82:95:21:2f:2a:
                    1d:d2:1a:3c:6d:51:35:83:81:b4:ef:ba:7d:16:5c:
                    4d:7c:65:bf:8b:33:ba:a2:6b:13:ee:66:e0:47:38:
                    eb:48:b1:a3:8f:52:37:6c:8f:45:f3:e2:f3:37:fc:
                    41:b8:fc:34:04:e2:ea:8c:a8:4e:84:99:a9:34:2c:
                    13:69:d3:f4:07:d0:69:20:f3:6e:1b:40:d3:bd:ea:
                    38:37:67:61:be:81:83:e4:11:08:ab:54:82:69:29:
                    2b:74:8c:30:b1:40:1a:2a:29:10:06:72:ad:56:cb:
                    dc:78:e8:75:ea:09:fc:e8:3d:f1:df:b4:db:fb:04:
                    6e:8a:e2:2e:91:4a:10:28:f2:af:ae:9b:7f:9a:27:
                    49:dc:ca:90:99:b4:8d:b1:cc:ce:a1:44:da:97:8b:
                    ae:97:d3:30:bd:51:d7:36:4d:d6:43:a6:0d:4b:4e:
                    f7:c2:3c:c0:14:b3:da:23:bf:f3:87:00:3e:f6:2a:
                    b6:87:52:df:95:c0:c3:b0:20:a1:30:71:db:e4:a5:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5A:23:D1:06:BD:69:F6:09:0F:15:EC:16:34:54:96:BD:10:9C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.240.0-209.221.253.255
                  216.213.48.0/22
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:9a:44:d9:21:54:42:bf:9a:6a:8b:2f:f7:18:f1:f1:a5:
         4e:c1:14:9e:31:0e:c5:97:99:8b:60:86:5c:a5:72:9d:45:93:
         c3:ed:ba:af:ad:6c:c2:2c:e7:af:11:54:18:a6:4e:f7:d4:15:
         44:71:33:85:d3:31:ff:46:84:cd:35:02:69:49:34:8e:60:4a:
         1e:a6:13:b7:1b:8f:f5:b9:77:49:97:49:05:b1:3d:6b:19:df:
         44:6e:05:ef:94:e4:91:31:9d:8f:ec:e0:6e:ce:c1:f3:5c:c3:
         2e:ea:8e:fc:fb:e4:0b:cd:21:92:48:bd:0d:92:f9:35:d8:10:
         e3:6c:1a:75:e1:da:ae:ab:8a:e5:81:df:f7:19:a2:21:7e:81:
         0e:9e:bd:3a:bf:ed:45:3b:24:3c:88:f4:8f:13:7b:43:d0:79:
         f3:ad:1f:aa:75:bd:c4:5d:f1:1c:90:8b:6c:54:ae:1c:d2:8c:
         29:dc:05:f0:8f:a9:c3:f8:5c:32:e3:25:22:d4:b9:2a:a6:e4:
         34:80:49:49:0a:e9:ed:ed:c4:0d:5b:2e:98:b6:21:30:3a:29:
         e1:ba:f4:2d:cc:51:74:06:36:07:6a:a4:8b:b2:47:fd:16:97:
         2d:27:46:3d:1c:7c:39:26:ae:80:77:62:4a:ce:0c:ee:c9:9c:
         4c:37:30:92
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEW3s3OqM2dWAl8ydYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk
NWEzMzI4ODItNjdmMi00YzczLWIxYmUtNmZmNDA2NjU1OTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjOTLE1crsh/UC7LHpTgfEQuGy1m4SkG85Ka
K61+KBIogWFdR7BNnPYICTzmOcp9zKVDTxQXgpUhLyod0ho8bVE1g4G077p9FlxN
fGW/izO6omsT7mbgRzjrSLGjj1I3bI9F8+LzN/xBuPw0BOLqjKhOhJmpNCwTadP0
B9BpIPNuG0DTveo4N2dhvoGD5BEIq1SCaSkrdIwwsUAaKikQBnKtVsvceOh16gn8
6D3x37Tb+wRuiuIukUoQKPKvrpt/midJ3MqQmbSNsczOoUTal4uul9MwvVHXNk3W
Q6YNS073wjzAFLPaI7/zhwA+9iq2h1LflcDDsCChMHHb5KVFuwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFExaI9EGvWn2CQ8V7BY0VJa9EJxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvM2E1NmY2YzAtZThmOC0z
NzVhLThkODYtZTRiNjJjNGY2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBATR3fAD
BAHR3fwDBALY1TADBAPY1TgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfsGaRNkhVEK/mmqLL/cY8fGlTsEU
njEOxZeZi2CGXKVynUWTw+26r61swiznrxFUGKZO99QVRHEzhdMx/0aEzTUCaUk0
jmBKHqYTtxuP9bl3SZdJBbE9axnfRG4F75TkkTGdj+zgbs7B81zDLuqO/PvkC80h
kki9DZL5NdgQ42wadeHarquK5YHf9xmiIX6BDp69Or/tRTskPIj0jxN7Q9B5860f
qnW9xF3xHJCLbFSuHNKMKdwF8I+pw/hcMuMlItS5KqbkNIBJSQrp7e3EDVsumLYh
MDop4br0LcxRdAY2B2qki7JH/RaXLSdGPRx8OSaugHdiSs4M7smcTDcwkg==
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:55 2024 by rpki-client on console-fra.rpki-client.org