Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/438da753-cc7b-3c29-beff-c44b99437298.roa
File:                     438da753-cc7b-3c29-beff-c44b99437298.roa (raw, json)
Hash identifier:          Q4m6ETBNk392QtT1F/9gWJpFPqzH31RvIdvKnQQHePQ=
Subject key identifier:   DB:82:4C:49:93:A8:E6:A0:11:80:37:E9:31:BF:EE:37:3F:66:86:F6
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858473D25F695ED94440797F39D00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/438da753-cc7b-3c29-beff-c44b99437298.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     198148
IP address blocks:        205.177.44.0/22 maxlen: 24
                          205.177.52.0/22 maxlen: 24
                          205.177.56.0/22 maxlen: 24
                          205.177.132.0/22 maxlen: 24
                          205.177.196.0/22 maxlen: 24
                          205.177.224.0/21 maxlen: 24
                          205.177.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f6:95:ed:94:44:07:97:f3:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=8cc3f04c-ee87-4ee3-8ac9-28c976b6278f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:dc:9e:e5:d2:9a:2f:0b:4c:ea:83:e8:3f:
                    69:20:97:54:9b:51:79:4d:c5:55:28:96:81:90:17:
                    59:00:9d:21:6b:75:fe:e5:c3:01:45:c8:aa:c0:66:
                    da:99:54:3b:24:02:48:30:d5:4f:ad:68:1e:7f:f1:
                    88:29:e4:0e:b0:67:63:ba:6d:bc:4c:7b:b4:bc:c0:
                    74:8c:ab:80:3e:28:69:2b:94:1f:c5:9c:2d:14:98:
                    e5:c4:c1:47:d4:cf:02:16:04:73:5c:cb:43:44:2d:
                    a7:23:53:7a:cf:95:2e:a5:40:92:d3:93:d0:b1:fa:
                    6e:24:e1:52:63:f1:f7:65:94:ba:43:8c:0f:45:ea:
                    9d:99:18:b3:e2:6e:3b:12:0b:17:37:a1:b2:0f:d8:
                    07:f7:60:07:24:b4:69:20:dd:6f:97:88:b6:ab:96:
                    b0:e4:cf:25:d7:6e:e8:6e:80:28:97:3c:f3:f1:78:
                    c8:a9:98:e6:a9:2c:d8:76:f6:8a:f8:53:aa:d0:6d:
                    57:11:d2:eb:41:4b:8a:a7:13:8c:e7:b7:d1:90:b9:
                    8d:0c:84:41:01:9b:46:ba:88:2f:b4:1a:f4:b1:97:
                    5c:d6:04:85:e8:a8:b9:d7:be:d4:7a:86:72:ad:37:
                    08:a5:eb:f6:e1:32:b1:c4:49:46:01:9b:65:27:60:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:4C:49:93:A8:E6:A0:11:80:37:E9:31:BF:EE:37:3F:66:86:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/438da753-cc7b-3c29-beff-c44b99437298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.44.0/22
                  205.177.52.0-205.177.59.255
                  205.177.132.0/22
                  205.177.196.0/22
                  205.177.224.0-205.177.235.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:e9:f9:08:9a:91:96:a2:07:23:94:be:1e:c9:34:44:9a:
         de:94:58:ec:fe:77:ae:81:e6:ea:ca:ef:5a:ad:cd:f8:4e:08:
         95:1a:52:56:bb:b2:20:25:23:3e:af:08:a6:db:20:d2:72:a6:
         cf:f6:2b:12:0b:04:2e:47:5f:2b:ef:f7:ea:0d:48:32:36:cb:
         a9:09:82:8c:57:64:51:d5:e6:d2:88:2e:c4:47:f5:95:e8:3c:
         5e:73:79:50:0e:4d:71:97:49:cb:60:43:81:b1:2d:fd:ab:f6:
         6c:0a:b5:2b:15:0f:ae:ae:33:8c:bb:77:a9:0d:fd:e3:41:58:
         65:fd:bf:33:40:49:e9:f9:85:df:d3:3d:d8:88:84:b3:da:c1:
         84:31:bd:59:e9:53:f1:8e:88:6e:81:91:68:91:06:64:2b:f3:
         54:e7:28:7b:68:e8:83:da:57:f8:62:7d:bc:fa:c5:a2:54:54:
         f1:ba:a3:11:d2:c2:96:31:07:4c:42:83:7b:1f:7c:7f:26:bc:
         38:fc:6a:37:a4:ed:73:19:f8:74:4a:20:9b:2f:d3:60:7f:63:
         c1:d2:a8:6e:2b:0f:34:48:04:a2:76:95:62:d4:c6:3a:76:f1:
         68:d9:3a:b6:36:71:e9:7d:2c:bb:a8:c8:93:3b:7e:48:f6:a3:
         12:c0:3c:a9
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEc9JfaV7ZREB5fznQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
OGNjM2YwNGMtZWU4Ny00ZWUzLThhYzktMjhjOTc2YjYyNzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7rcnuXSmi8LTOqD6D9pIJdUm1F5TcVVKJaB
kBdZAJ0ha3X+5cMBRciqwGbamVQ7JAJIMNVPrWgef/GIKeQOsGdjum28THu0vMB0
jKuAPihpK5QfxZwtFJjlxMFH1M8CFgRzXMtDRC2nI1N6z5UupUCS05PQsfpuJOFS
Y/H3ZZS6Q4wPReqdmRiz4m47EgsXN6GyD9gH92AHJLRpIN1vl4i2q5aw5M8l127o
boAolzzz8XjIqZjmqSzYdvaK+FOq0G1XEdLrQUuKpxOM57fRkLmNDIRBAZtGuogv
tBr0sZdc1gSF6Ki5177UeoZyrTcIpev24TKxxElGAZtlJ2AjawIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFNuCTEmTqOagEYA36TG/7jc/Zob2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNDM4ZGE3NTMtY2M3Yi0z
YzI5LWJlZmYtYzQ0Yjk5NDM3Mjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCzbEsMAwD
BALNsTQDBALNsTgDBALNsYQDBALNscQwDAMEBc2x4AMEAs2x6DBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz
2en5CJqRlqIHI5S+Hsk0RJrelFjs/neugebqyu9arc34TgiVGlJWu7IgJSM+rwim
2yDScqbP9isSCwQuR18r7/fqDUgyNsupCYKMV2RR1ebSiC7ER/WV6Dxec3lQDk1x
l0nLYEOBsS39q/ZsCrUrFQ+urjOMu3epDf3jQVhl/b8zQEnp+YXf0z3YiISz2sGE
Mb1Z6VPxjohugZFokQZkK/NU5yh7aOiD2lf4Yn28+sWiVFTxuqMR0sKWMQdMQoN7
H3x/Jrw4/Go3pO1zGfh0SiCbL9Ngf2PB0qhuKw80SASidpVi1MY6dvFo2Tq2NnHp
fSy7qMiTO35I9qMSwDyp
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org