Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
File:                     6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa (raw, json)
Hash identifier:          1uZF477ry4Kg3wGyVg1VUC4JKceYby4GQhoWJHwZMzE=
Subject key identifier:   07:E5:6C:07:D9:1E:48:73:7A:15:78:61:15:99:C5:16:22:38:E7:8E
Certificate issuer:       /CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
Certificate serial:       010D0C9F432858474F4B7A845B3D5CEDD95EDA00
Authority key identifier: 1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     17356
IP address blocks:        66.220.224.0/19 maxlen: 24
                          173.195.240.0/20 maxlen: 24
                          209.134.32.0/20 maxlen: 24
                          216.66.96.0/19 maxlen: 24
                          2607:ffc8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7a:84:5b:3d:5c:ed:d9:5e:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=94631c58-29bc-4c5d-8ce5-0ca2ef81aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:e4:76:0a:9f:de:4a:79:fd:15:a0:68:9c:
                    7c:2e:7b:2a:e8:aa:79:00:4c:d8:65:eb:0c:e9:6b:
                    c7:e2:37:27:41:ae:b6:3d:1d:ae:45:71:0a:be:72:
                    4c:70:5c:72:54:2c:42:92:6e:f7:d5:50:b8:5f:4f:
                    5c:a3:cc:16:04:f7:db:e7:04:1e:9c:30:41:65:00:
                    f6:c2:d6:07:ba:19:5c:39:4d:0d:a3:8d:e2:7b:38:
                    b9:08:4e:3f:05:e4:b6:4a:d8:9c:9a:79:ec:de:fe:
                    b3:a1:26:6e:f5:ee:81:f3:02:79:49:49:d4:b4:84:
                    98:83:44:1d:61:8f:78:55:7a:d4:84:a7:37:34:b0:
                    32:3d:24:6b:bf:cd:ce:92:54:a6:6f:11:bd:cc:03:
                    2b:fb:92:76:bc:37:6a:4a:2b:68:fb:8f:2b:26:97:
                    36:4a:dd:76:20:3a:f3:0a:7b:b7:8a:1c:15:c8:a7:
                    bd:eb:fe:fe:fc:68:49:5f:7c:06:a0:e2:f6:4e:47:
                    b2:87:0f:3a:8c:33:82:37:1c:9b:0f:da:a9:1e:43:
                    76:af:b2:48:f4:e8:16:69:d2:0f:97:ae:f0:e8:39:
                    09:90:0c:d1:38:2a:ab:99:8d:6e:f2:88:6e:b3:69:
                    54:1e:33:c1:45:f0:b5:f7:f1:ec:15:43:cc:e3:ea:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E5:6C:07:D9:1E:48:73:7A:15:78:61:15:99:C5:16:22:38:E7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.224.0/19
                  173.195.240.0/20
                  209.134.32.0/20
                  216.66.96.0/19
                IPv6:
                  2607:ffc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:01:4e:f1:b9:d6:d0:27:e9:b7:87:58:ff:cd:bf:0f:eb:19:
         00:78:d9:2c:ab:cd:2e:75:36:a3:19:ca:3a:eb:47:d2:63:f7:
         1c:d3:4c:39:86:26:01:7d:80:6b:5d:1a:04:54:9b:16:a5:53:
         c8:79:7e:c9:63:85:0d:2d:82:4a:cb:b6:be:da:f7:74:9b:ed:
         e3:95:44:1d:3c:ee:cc:bd:5a:fa:f3:7e:45:b4:cc:64:8d:42:
         b4:81:e0:de:e8:54:7a:1a:59:fa:9b:9e:8f:2c:2d:63:5b:46:
         c4:96:87:9d:8b:e8:bf:55:df:16:2f:e0:cd:59:b3:95:d2:d3:
         8f:8f:6f:6e:25:f1:3b:ea:a0:c1:15:56:86:0a:34:f9:64:e5:
         72:92:58:02:a3:ee:3a:fa:7c:ba:bb:f3:2d:65:d7:64:25:9d:
         d8:cf:07:01:e9:07:f5:a0:ef:3e:2a:9b:2a:42:26:a7:f5:dd:
         a3:1a:d8:4d:a5:35:05:e0:c5:60:c5:70:d3:21:10:73:dd:a3:
         6b:75:27:53:d0:9b:dc:71:04:77:cd:01:27:69:1c:c6:be:a3:
         81:4e:00:e0:6b:a3:75:70:2d:bb:a3:cf:0b:08:5f:c8:2c:80:
         ae:72:5e:c2:ac:de:96:fd:23:17:28:8e:16:c0:9e:d7:d3:e9:
         ce:b6:a5:2d
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEdPS3qEWz1c7dle2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4ZjNhMjYtMzM3Ni00ZWU1LTg3N2MtYTBjMDNjMDY5
Y2I3MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
OTQ2MzFjNTgtMjliYy00YzVkLThjZTUtMGNhMmVmODFhYTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UTkdgqf3kp5/RWgaJx8Lnsq6Kp5AEzYZesM
6WvH4jcnQa62PR2uRXEKvnJMcFxyVCxCkm731VC4X09co8wWBPfb5wQenDBBZQD2
wtYHuhlcOU0No43iezi5CE4/BeS2Sticmnns3v6zoSZu9e6B8wJ5SUnUtISYg0Qd
YY94VXrUhKc3NLAyPSRrv83OklSmbxG9zAMr+5J2vDdqSito+48rJpc2St12IDrz
Cnu3ihwVyKe96/7+/GhJX3wGoOL2Tkeyhw86jDOCNxybD9qpHkN2r7JI9OgWadIP
l67w6DkJkAzROCqrmY1u8ohus2lUHjPBRfC19/HsFUPM4+r4yQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFAflbAfZHkhzehV4YRWZxRYiOOeOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODhm
M2EyNi0zMzc2LTRlZTUtODc3Yy1hMGMwM2MwNjljYjcvNmE0MWJlMjUtYWUyMC0z
ZjJmLTk5ZTEtYzVkZmFiM2IwNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjg4ZjNhMjYtMzM3Ni00ZWU1LTg3
N2MtYTBjMDNjMDY5Y2I3L2Y4OGYzYTI2LTMzNzYtNGVlNS04NzdjLWEwYzAzYzA2
OWNiNy5jcmwwHwYDVR0jBBgwFoAUHDVurLPrafiZFIHSRoW8TcepsMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODhmM2EyNi0zMzc2LTRlZTUtODc3Yy1hMGMw
M2MwNjljYjcuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFQtzgAwQE
rcPwAwQE0YYgAwQF2EJgMA0EAgACMAcDBQAmB//IMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEIBTvG51tAn
6beHWP/Nvw/rGQB42SyrzS51NqMZyjrrR9Jj9xzTTDmGJgF9gGtdGgRUmxalU8h5
fsljhQ0tgkrLtr7a93Sb7eOVRB087sy9WvrzfkW0zGSNQrSB4N7oVHoaWfqbno8s
LWNbRsSWh52L6L9V3xYv4M1Zs5XS04+Pb24l8TvqoMEVVoYKNPlk5XKSWAKj7jr6
fLq78y1l12QlndjPBwHpB/Wg7z4qmypCJqf13aMa2E2lNQXgxWDFcNMhEHPdo2t1
J1PQm9xxBHfNASdpHMa+o4FOAOBro3VwLbujzwsIX8gsgK5yXsKs3pb9IxcojhbA
ntfT6c62pS0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:48 2024 by rpki-client on console-fra.rpki-client.org