Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/0ebc22e7-4a8a-3d23-be12-71eaa4057ff0.roa
File:                     0ebc22e7-4a8a-3d23-be12-71eaa4057ff0.roa (raw, json)
Hash identifier:          RwwmQwIvLnP5io3CAXIXxZO8dKMQYHsb78NwIQokRW8=
Subject key identifier:   0B:F9:F6:3E:D3:BF:28:6D:79:62:0A:FA:B7:FC:85:F3:92:CF:1D:AC
Certificate issuer:       /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial:       010D0C9F43285845280AF63C0733B671742AD400
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/0ebc22e7-4a8a-3d23-be12-71eaa4057ff0.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     397803
IP address blocks:        216.227.40.0/21 maxlen: 21
                          216.227.48.0/22 maxlen: 22
                          209.105.180.0/22 maxlen: 22
                          167.100.32.0/19 maxlen: 19
                          209.105.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f6:3c:07:33:b6:71:74:2a:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=4ec97fda-8d85-4239-89b7-c2f528f072b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:d6:f1:ef:05:26:23:34:49:b4:05:eb:8c:
                    41:8a:04:0c:46:b0:db:25:3b:e6:95:fe:cf:f6:c4:
                    86:98:4a:64:54:e2:ec:19:c8:ab:b6:02:db:47:0b:
                    69:f8:dc:95:01:a1:ad:d7:7a:d3:e2:54:32:1b:f7:
                    86:70:5f:0b:a1:3f:15:6a:55:a9:20:e8:89:25:af:
                    59:ad:61:7e:46:b1:ed:4b:f4:a7:50:e2:ba:a3:96:
                    f1:bc:d1:0d:0d:72:3e:7b:e2:ba:71:4d:10:a7:f7:
                    c1:2b:46:a2:c8:ad:73:ac:ae:03:1b:e3:fd:7f:7c:
                    21:a6:00:ad:a6:4a:69:c7:b7:4f:76:b8:a6:15:4b:
                    30:17:2e:1b:6c:8d:17:d8:88:bd:9a:ca:77:5b:dd:
                    13:87:89:57:6e:fd:05:02:bb:01:bd:f5:93:76:d0:
                    ae:86:ec:ea:4d:ac:b2:74:5b:b2:d6:b6:bd:1f:bd:
                    08:57:c6:a1:fa:ca:73:85:85:c9:f9:11:fd:8c:71:
                    31:93:ed:88:d2:11:d0:ac:5e:e1:d8:5b:12:dd:c5:
                    15:14:33:a9:23:4b:08:52:cc:76:39:95:88:26:f2:
                    08:18:39:87:b9:98:5e:08:59:9c:7d:34:38:c4:16:
                    95:b4:16:33:31:f4:9a:e9:8e:c6:27:51:96:79:56:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:F6:3E:D3:BF:28:6D:79:62:0A:FA:B7:FC:85:F3:92:CF:1D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/0ebc22e7-4a8a-3d23-be12-71eaa4057ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.32.0/19
                  209.105.180.0-209.105.187.255
                  216.227.40.0-216.227.51.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:29:86:8c:f4:6b:e2:1d:c5:f3:b1:2d:92:8e:87:7b:f3:64:
         e2:1d:04:db:bf:8c:78:aa:08:38:dd:dc:80:58:c5:87:88:80:
         b0:5f:9a:bd:f8:0f:55:85:0e:f5:ac:7e:4c:b5:24:de:95:23:
         c5:07:82:43:37:42:cf:e4:dc:34:d5:c8:69:59:6b:fb:96:a3:
         1d:e1:c2:f8:d4:74:9a:67:a2:23:4b:3d:cb:6a:16:cb:46:c0:
         6c:d5:97:4a:fb:c2:65:96:da:4a:5c:63:a8:0f:5c:6c:bc:6e:
         79:f6:a7:cf:7e:00:34:df:4c:19:5b:ff:be:21:e4:3e:3c:51:
         fc:b6:fc:1e:55:50:c7:72:9e:c9:ac:e7:c0:34:bb:05:6e:79:
         3a:33:dd:d3:39:1e:b1:9d:f3:65:14:e1:9c:41:71:0e:43:c2:
         01:4b:ba:d0:b4:94:1d:53:ac:df:bf:ca:5d:b1:92:1a:ea:9c:
         10:fb:7b:88:bf:1f:9f:45:c4:d5:c8:cc:bb:62:c0:d9:df:83:
         b0:49:07:e3:78:68:0b:de:40:1f:4e:db:8c:21:73:46:d3:97:
         b1:38:33:ff:bc:f7:e0:49:d9:46:7d:44:7d:94:8e:c5:1d:e7:
         fc:2f:81:cc:20:45:ad:97:4d:3a:e7:0f:27:6b:86:e5:21:f4:
         f8:74:cd:88
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEUoCvY8BzO2cXQq1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk
NGVjOTdmZGEtOGQ4NS00MjM5LTg5YjctYzJmNTI4ZjA3MmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPPW8e8FJiM0SbQF64xBigQMRrDbJTvmlf7P
9sSGmEpkVOLsGcirtgLbRwtp+NyVAaGt13rT4lQyG/eGcF8LoT8ValWpIOiJJa9Z
rWF+RrHtS/SnUOK6o5bxvNENDXI+e+K6cU0Qp/fBK0aiyK1zrK4DG+P9f3whpgCt
pkppx7dPdrimFUswFy4bbI0X2Ii9msp3W90Th4lXbv0FArsBvfWTdtCuhuzqTayy
dFuy1ra9H70IV8ah+spzhYXJ+RH9jHExk+2I0hHQrF7h2FsS3cUVFDOpI0sIUsx2
OZWIJvIIGDmHuZheCFmcfTQ4xBaVtBYzMfSa6Y7GJ1GWeVbYRwIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFAv59j7TvyhteWIK+rf8hfOSzx2sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvMGViYzIyZTctNGE4YS0z
ZDIzLWJlMTItNzFlYWE0MDU3ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQFp2QgMAwD
BALRabQDBALRabgwDAMEA9jjKAMEAtjjMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATKYaM9GviHcXzsS2S
jod782TiHQTbv4x4qgg43dyAWMWHiICwX5q9+A9VhQ71rH5MtSTelSPFB4JDN0LP
5Nw01chpWWv7lqMd4cL41HSaZ6IjSz3LahbLRsBs1ZdK+8JlltpKXGOoD1xsvG55
9qfPfgA030wZW/++IeQ+PFH8tvweVVDHcp7JrOfANLsFbnk6M93TOR6xnfNlFOGc
QXEOQ8IBS7rQtJQdU6zfv8pdsZIa6pwQ+3uIvx+fRcTVyMy7YsDZ34OwSQfjeGgL
3kAfTtuMIXNG05exODP/vPfgSdlGfUR9lI7FHef8L4HMIEWtl0065w8na4blIfT4
dM2I
-----END CERTIFICATE-----
Generated at Wed May 22 14:50:36 2024 by rpki-client on console-fra.rpki-client.org