Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
File:                     f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (raw, json)
Hash identifier:          NM3jrj42JVkl0+PJgMlL09dS0J7Z+tcm8WTgnFNqh7A=
Subject key identifier:   13:C2:4B:7E:7B:82:44:F9:EF:8B:39:52:FC:2C:D8:B0:86:FF:D1:6E
Certificate issuer:       /CN=de111c10-2de5-41fa-a9e4-1e49a0479199
Certificate serial:       010D0C9F43285847A5D6A49C8D726B9C36026848
Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     26793
IP address blocks:        69.5.128.0/19 maxlen: 24
                          162.216.76.0/22 maxlen: 24
                          173.240.192.0/20 maxlen: 24
                          205.237.160.0/19 maxlen: 24
                          206.127.176.0/20 maxlen: 24
                          2604:2800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a4:9c:8d:72:6b:9c:36:02:68:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=232aa9ac-74ed-4412-adfe-f217788540f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:7e:25:42:23:c3:b1:8c:54:06:f0:49:c9:
                    b7:c1:4b:84:5a:eb:1d:ed:49:a8:65:77:b4:28:16:
                    53:eb:f7:1b:9f:89:cd:3c:b3:f3:c2:4c:ef:a0:b1:
                    ba:ed:85:34:bc:f1:f2:25:95:11:8f:e8:ec:23:ff:
                    0f:1c:26:d4:f2:5f:51:3e:e0:df:72:8e:66:56:63:
                    23:ae:cc:35:31:5a:1d:ee:c5:b0:03:fa:77:10:28:
                    e4:51:a2:7c:a6:b2:2f:38:d7:66:eb:3d:aa:51:ac:
                    bc:d5:a5:d9:bf:ad:c1:15:2c:1b:68:6d:76:f3:b3:
                    85:8d:22:da:6a:fe:1a:62:e9:b9:8f:89:57:32:09:
                    bb:5b:99:ae:94:77:0d:3a:20:bf:ed:92:f6:cb:cd:
                    4f:4e:44:c3:87:60:b7:72:6d:3c:02:6e:d6:12:41:
                    f3:d2:47:03:41:dc:77:5d:f0:29:b8:52:fa:d8:fe:
                    d9:60:16:15:1c:ec:a5:00:94:7d:71:61:1e:32:7d:
                    bc:b0:48:b2:8d:3d:d2:96:5b:db:41:99:ec:cd:5a:
                    fb:03:ee:89:c4:95:8b:c5:23:49:4e:bc:8a:95:cb:
                    ee:77:d3:38:6a:ec:2e:49:38:d4:4d:d5:1f:a2:67:
                    ca:bc:aa:3c:5b:b7:ef:ff:ba:40:65:8c:1f:33:0e:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:4B:7E:7B:82:44:F9:EF:8B:39:52:FC:2C:D8:B0:86:FF:D1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl

            X509v3 Authority Key Identifier:
                keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.128.0/19
                  162.216.76.0/22
                  173.240.192.0/20
                  205.237.160.0/19
                  206.127.176.0/20
                IPv6:
                  2604:2800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:e0:e3:fc:68:ce:1d:15:79:1c:cc:d6:1d:bd:2f:b7:f9:
         4b:19:9c:9f:5c:52:7c:e7:6f:b0:37:69:c6:69:1a:b0:3e:87:
         1b:3a:98:c2:5f:67:fc:28:e6:29:cd:b4:97:0d:8a:d9:3f:41:
         7c:cd:59:91:d4:eb:b9:d7:b7:aa:17:23:0a:21:a0:c3:e6:17:
         b2:4f:b7:54:48:c1:4d:52:43:57:ce:57:87:80:a1:41:da:14:
         4d:e6:1c:74:e5:96:e6:fb:c8:1b:29:3a:4a:5c:0c:fe:47:ac:
         74:69:ce:6f:7e:88:1f:be:36:9f:dd:a2:0f:d5:38:7b:34:e7:
         f2:a0:9c:6e:2a:05:6d:65:96:33:71:75:4b:af:a3:29:67:09:
         86:86:ce:8d:7f:cb:e4:14:20:9b:a9:95:af:2a:b5:be:4b:21:
         5c:d2:d1:08:cb:04:94:23:74:06:d9:a1:3e:75:70:8a:f4:f0:
         27:18:af:6d:42:b0:de:a6:02:c8:e8:59:e2:8c:6e:a6:db:06:
         72:e4:bf:3d:00:c4:f5:7b:03:17:f4:e7:e5:8b:fc:e5:84:c7:
         8f:e9:6d:d3:dd:ad:83:58:34:fd:0e:a6:ca:4a:ad:4b:6b:ed:
         c5:1d:1d:e8:70:ad:83:87:5d:e9:2b:ca:74:80:00:55:df:c1:
         fa:6e:ac:91
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEel1qScjXJrnDYCaEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5
MTk5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
MjMyYWE5YWMtNzRlZC00NDEyLWFkZmUtZjIxNzc4ODU0MGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q5+JUIjw7GMVAbwScm3wUuEWusd7UmoZXe0
KBZT6/cbn4nNPLPzwkzvoLG67YU0vPHyJZURj+jsI/8PHCbU8l9RPuDfco5mVmMj
rsw1MVod7sWwA/p3ECjkUaJ8prIvONdm6z2qUay81aXZv63BFSwbaG1287OFjSLa
av4aYum5j4lXMgm7W5mulHcNOiC/7ZL2y81PTkTDh2C3cm08Am7WEkHz0kcDQdx3
XfApuFL62P7ZYBYVHOylAJR9cWEeMn28sEiyjT3SllvbQZnszVr7A+6JxJWLxSNJ
TryKlcvud9M4auwuSTjUTdUfomfKvKo8W7fv/7pAZYwfMw7yTwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFBPCS357gkT574s5Uvws2LCG/9FuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx
MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZjllZWI2NjEtNTZjZS0z
YzYyLWIyOGMtMTFlMDM3YjEyMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5
ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3
OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5
YTA0NzkxOTkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFRQWAAwQC
othMAwQErfDAAwQFze2gAwQEzn+wMA0EAgACMAcDBQAmBCgAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGy3
4OP8aM4dFXkczNYdvS+3+UsZnJ9cUnznb7A3acZpGrA+hxs6mMJfZ/wo5inNtJcN
itk/QXzNWZHU67nXt6oXIwohoMPmF7JPt1RIwU1SQ1fOV4eAoUHaFE3mHHTllub7
yBspOkpcDP5HrHRpzm9+iB++Np/dog/VOHs05/KgnG4qBW1lljNxdUuvoylnCYaG
zo1/y+QUIJupla8qtb5LIVzS0QjLBJQjdAbZoT51cIr08CcYr21CsN6mAsjoWeKM
bqbbBnLkvz0AxPV7Axf05+WL/OWEx4/pbdPdrYNYNP0OpspKrUtr7cUdHehwrYOH
XekrynSAAFXfwfpurJE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:23:05 2024 by rpki-client on console-ams.rpki-client.org