Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa
File:                     5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa (raw, json)
Hash identifier:          LHMA1rlbOkMf1zypfps6vXxJk6k1BG26JWeYcPBmpGw=
Subject key identifier:   4C:29:C6:6E:06:7A:AB:BD:17:BE:24:A6:E7:FC:61:6E:A8:DA:50:ED
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F43285847213B0DC954B996DA1FB2CA00
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     6653
IP address blocks:        64.17.16.0/20 maxlen: 24
                          66.118.192.0/19 maxlen: 24
                          68.64.208.0/20 maxlen: 24
                          74.112.16.0/22 maxlen: 24
                          199.7.152.0/22 maxlen: 24
                          204.10.24.0/22 maxlen: 24
                          205.201.192.0/19 maxlen: 24
                          206.124.0.0/19 maxlen: 24
                          208.72.80.0/22 maxlen: 24
                          216.98.192.0/20 maxlen: 24
                          216.241.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0d:c9:54:b9:96:da:1f:b2:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=4a06007c-37a7-4cf3-913d-1181b384e8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:77:9b:54:2a:2c:5f:78:53:6e:e9:91:77:
                    ac:0e:fb:05:bd:11:6f:3c:b9:c9:55:ad:58:9e:87:
                    be:3e:63:01:42:1b:e2:ad:18:11:c5:78:c3:8b:7d:
                    40:e8:12:b2:c2:7b:b9:72:68:36:48:52:c6:b2:e6:
                    c0:65:9b:5f:f2:3c:57:a9:a6:20:d0:1b:37:71:b7:
                    60:f1:f2:d8:ee:2f:24:5e:70:84:e7:f8:58:fb:8a:
                    3c:58:a6:2a:66:0a:ad:7c:7b:f1:24:e5:b4:b8:42:
                    88:b4:1a:ed:88:69:7a:a6:69:c3:95:76:0a:95:71:
                    cf:c6:75:07:a6:61:40:43:2b:d0:9e:1b:74:a0:14:
                    c1:bf:79:0f:49:9d:6d:48:30:55:11:64:6b:4f:c5:
                    f7:98:93:22:9e:c8:a5:4f:37:00:e5:08:cb:80:1f:
                    bc:e8:a3:44:93:6f:5c:79:89:dc:4f:c3:11:74:65:
                    a0:d5:f4:dc:98:aa:f3:fe:4e:fd:37:b2:7d:20:f8:
                    d8:84:31:47:68:7e:41:c9:1f:b4:9c:7f:a3:95:dc:
                    85:8a:0b:59:25:2b:fc:2e:e2:87:3a:92:5c:c3:da:
                    b6:f1:99:48:7d:32:04:1a:27:62:0a:8a:4f:f0:90:
                    5f:ea:3d:13:01:ae:71:3e:f3:ed:83:d1:0d:33:bc:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:C6:6E:06:7A:AB:BD:17:BE:24:A6:E7:FC:61:6E:A8:DA:50:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.16.0/20
                  66.118.192.0/19
                  68.64.208.0/20
                  74.112.16.0/22
                  199.7.152.0/22
                  204.10.24.0/22
                  205.201.192.0/19
                  206.124.0.0/19
                  208.72.80.0/22
                  216.98.192.0/20
                  216.241.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:46:1a:0f:d5:a6:d0:6e:d8:3a:67:00:b6:46:36:e5:a0:
         d1:52:e0:35:52:46:75:00:70:23:5c:6e:7d:a8:a9:77:d0:0c:
         6f:52:a3:40:13:b9:b8:34:ed:20:89:04:a1:d2:4b:59:f3:4a:
         91:16:20:63:9e:1c:b4:bd:a0:ad:68:40:fd:2c:3b:96:cd:97:
         32:ce:09:a9:44:1a:82:8b:c2:47:1c:90:66:41:2a:bc:d5:08:
         c6:cc:d4:15:c3:6f:7c:0e:de:47:fe:49:de:da:00:ad:c1:62:
         9e:cb:7a:4c:b7:0f:05:34:e7:31:19:bf:99:e4:75:da:07:3a:
         06:08:ec:55:26:fd:2d:66:94:05:90:d1:bf:c6:a3:a8:33:79:
         df:ad:2f:82:38:b8:67:53:5f:ac:74:d1:3c:5d:f6:c6:b2:f2:
         0f:ab:90:8f:cd:50:a7:cf:9e:66:f6:3e:0d:9a:fa:61:12:4c:
         99:77:3b:f9:57:35:4d:b8:37:af:a8:6e:f6:2c:ab:64:38:88:
         4f:e4:8d:ff:62:c3:78:c1:9b:4e:d8:d3:c5:17:17:b1:ba:7f:
         fb:5a:f4:b2:bc:93:4c:3d:eb:fa:86:be:bb:67:63:11:6d:e0:
         e2:f2:71:c2:d7:b7:45:96:bb:51:cf:c3:04:28:81:7d:88:55:
         b9:ee:16:33
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEchOw3JVLmW2h+yygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj
MzZjMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk
NGEwNjAwN2MtMzdhNy00Y2YzLTkxM2QtMTE4MWIzODRlOGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiF3m1QqLF94U27pkXesDvsFvRFvPLnJVa1Y
noe+PmMBQhvirRgRxXjDi31A6BKywnu5cmg2SFLGsubAZZtf8jxXqaYg0Bs3cbdg
8fLY7i8kXnCE5/hY+4o8WKYqZgqtfHvxJOW0uEKItBrtiGl6pmnDlXYKlXHPxnUH
pmFAQyvQnht0oBTBv3kPSZ1tSDBVEWRrT8X3mJMinsilTzcA5QjLgB+86KNEk29c
eYncT8MRdGWg1fTcmKrz/k79N7J9IPjYhDFHaH5ByR+0nH+jldyFigtZJSv8LuKH
OpJcw9q28ZlIfTIEGidiCopP8JBf6j0TAa5xPvPtg9ENM7xEMQIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFEwpxm4Gequ9F74kpuf8YW6o2lDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj
ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvNWJhNDhkNTItN2FmYi0z
YjhjLWEyYjEtZjI1NzY4NGE0MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz
ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk
YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh
OWUwZGMzNmMuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQEQBEQAwQF
QnbAAwQEREDQAwQCSnAQAwQCxweYAwQCzAoYAwQFzcnAAwQFznwAAwQC0EhQAwQE
2GLAAwQE2PEgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAD7lRhoP1abQbtg6ZwC2RjbloNFS4DVSRnUAcCNc
bn2oqXfQDG9So0ATubg07SCJBKHSS1nzSpEWIGOeHLS9oK1oQP0sO5bNlzLOCalE
GoKLwkcckGZBKrzVCMbM1BXDb3wO3kf+Sd7aAK3BYp7Leky3DwU05zEZv5nkddoH
OgYI7FUm/S1mlAWQ0b/Go6gzed+tL4I4uGdTX6x00Txd9say8g+rkI/NUKfPnmb2
Pg2a+mESTJl3O/lXNU24N6+obvYsq2Q4iE/kjf9iw3jBm07Y08UXF7G6f/ta9LK8
k0w96/qGvrtnYxFt4OLyccLXt0WWu1HPwwQogX2IVbnuFjM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:48 2024 by rpki-client on console-ams.rpki-client.org