Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
File:                     cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa (raw, json)
Hash identifier:          fPi4Szjapvmd4upG58o2HJaFqZjlFVtXUW8onb0+Qw4=
Subject key identifier:   0A:20:9D:A0:39:DB:E4:14:57:05:C5:82:69:4A:11:3F:70:D0:26:AD
Certificate issuer:       /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial:       010D0C9F43285847BC2C23357C210EDFAA692930
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     46
IP address blocks:        128.6.0.0/16 maxlen: 24
                          130.219.0.0/16 maxlen: 24
                          165.230.0.0/16 maxlen: 24
                          192.12.88.0/24 maxlen: 24
                          198.151.130.0/24 maxlen: 24
                          2620:0:d60::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:23:35:7c:21:0e:df:aa:69:29:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=4531f882-4aac-4e15-b902-f1900ce6ad4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:82:b5:35:62:63:0c:d1:e9:91:3e:88:20:
                    e8:b3:98:91:b5:48:cb:a0:f2:40:61:88:5e:8b:fd:
                    eb:fa:41:83:c6:f7:f1:e3:59:f2:dd:4a:2a:d2:0a:
                    52:bf:f8:8b:81:11:0f:f9:7a:b6:14:b4:49:c3:47:
                    9d:4c:37:cc:7e:e3:37:7c:c4:21:9e:26:8d:2b:d1:
                    b8:17:0b:30:ac:2b:e4:58:53:d5:0f:10:25:7b:b2:
                    41:21:d2:ab:7b:41:c0:4a:8e:62:f9:e5:ca:d2:ef:
                    f1:c5:ac:c2:ea:56:c1:d9:e3:21:4c:c6:04:a7:a8:
                    84:7d:02:20:7d:8a:14:6b:5b:1e:f1:da:a0:05:a0:
                    47:43:63:10:a5:a4:0e:23:bd:91:27:00:cd:14:94:
                    37:b3:ab:3f:4d:48:69:59:ae:16:3e:16:60:1d:a3:
                    18:0c:1c:22:d8:60:b9:5b:24:d4:14:b0:39:ba:85:
                    81:21:1a:b5:14:91:a7:b0:34:11:84:96:20:f4:10:
                    2f:65:99:f3:23:e6:16:4a:db:83:43:75:e4:a2:7d:
                    63:64:88:e0:05:c5:5b:a5:35:bc:ec:63:09:60:24:
                    83:d0:66:35:6b:66:a8:b2:a2:9b:05:f2:e8:5f:98:
                    0f:52:12:d0:b3:92:fe:ec:9e:ea:43:da:b6:b0:ae:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:9D:A0:39:DB:E4:14:57:05:C5:82:69:4A:11:3F:70:D0:26:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl

            X509v3 Authority Key Identifier:
                keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.6.0.0/16
                  130.219.0.0/16
                  165.230.0.0/16
                  192.12.88.0/24
                  198.151.130.0/24
                IPv6:
                  2620:0:d60::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:06:78:0a:38:90:aa:7c:9e:3b:f2:bd:81:cf:69:c5:64:
         ac:30:c0:8c:f4:1a:ab:07:7b:59:b0:b8:b3:0f:bb:a0:75:0f:
         28:ec:4f:df:73:36:65:3e:d0:43:53:56:6b:05:90:50:ab:15:
         5d:61:d1:b2:c1:30:1d:17:08:b9:e4:be:5b:4e:c7:61:d4:39:
         37:39:f6:b2:81:2c:4d:26:a4:aa:3b:a8:d2:0c:60:ef:36:c3:
         2a:c4:d0:59:1b:67:36:f6:f5:77:31:f6:94:9f:72:d6:4c:e6:
         f2:16:9c:eb:02:07:37:42:61:cc:bf:7c:76:7c:aa:cc:0d:eb:
         ab:62:1e:30:3d:ca:be:af:c0:08:94:67:67:c1:2c:8e:51:43:
         7d:11:28:82:cd:8c:85:01:7d:c1:01:43:07:24:4f:04:fe:83:
         12:15:65:10:77:ed:be:e5:c0:5f:8f:51:79:5e:b5:5e:e8:eb:
         bd:19:2f:7c:f2:56:57:cc:86:ce:f1:0d:37:95:19:58:7d:ed:
         06:2d:5a:40:e0:92:ee:48:4a:68:14:60:95:7f:2c:4f:22:40:
         57:f7:d5:63:b4:78:bb:df:6f:4c:b4:ff:cd:66:31:84:e1:a8:
         53:48:6a:73:c2:a2:98:29:1d:92:1b:25:83:72:84:20:7b:2a:
         57:8c:31:38
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEe8LCM1fCEO36ppKTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2
ODAzMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk
NDUzMWY4ODItNGFhYy00ZTE1LWI5MDItZjE5MDBjZTZhZDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgiCtTViYwzR6ZE+iCDos5iRtUjLoPJAYYhe
i/3r+kGDxvfx41ny3Uoq0gpSv/iLgREP+Xq2FLRJw0edTDfMfuM3fMQhniaNK9G4
FwswrCvkWFPVDxAle7JBIdKre0HASo5i+eXK0u/xxazC6lbB2eMhTMYEp6iEfQIg
fYoUa1se8dqgBaBHQ2MQpaQOI72RJwDNFJQ3s6s/TUhpWa4WPhZgHaMYDBwi2GC5
WyTUFLA5uoWBIRq1FJGnsDQRhJYg9BAvZZnzI+YWStuDQ3Xkon1jZIjgBcVbpTW8
7GMJYCSD0GY1a2aosqKbBfLoX5gPUhLQs5L+7J7qQ9q2sK4dyQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFAognaA52+QUVwXFgmlKET9w0CatMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz
MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvY2ZlZmU5ZDQtNWFkOS0z
ZjJjLTg2OTItZjhiZmRmZDA3Yzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx
MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy
NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk
ZTMwMjY4MDMuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAhBAIAATAbAwMAgAYDAwCC
2wMDAKXmAwQAwAxYAwQAxpeCMA8EAgACMAkDBwImIAAADWAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEF0G
eAo4kKp8njvyvYHPacVkrDDAjPQaqwd7WbC4sw+7oHUPKOxP33M2ZT7QQ1NWawWQ
UKsVXWHRssEwHRcIueS+W07HYdQ5Nzn2soEsTSakqjuo0gxg7zbDKsTQWRtnNvb1
dzH2lJ9y1kzm8hac6wIHN0JhzL98dnyqzA3rq2IeMD3Kvq/ACJRnZ8EsjlFDfREo
gs2MhQF9wQFDByRPBP6DEhVlEHftvuXAX49ReV61XujrvRkvfPJWV8yGzvENN5UZ
WH3tBi1aQOCS7khKaBRglX8sTyJAV/fVY7R4u99vTLT/zWYxhOGoU0hqc8KimCkd
khslg3KEIHsqV4wxOA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:23:14 2024 by rpki-client on console-ams.rpki-client.org