Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa
File:                     884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa (raw, json)
Hash identifier:          VyixxMqk7RKWU0rbIa/5OG8XSmMt1FssZGm7VB/VTis=
Subject key identifier:   5B:EA:E9:10:9E:C5:1A:A1:74:9E:C6:F6:47:D2:67:BC:ED:29:F4:40
Certificate issuer:       /CN=1716e48f-a64c-4227-b984-34b75b5f7e97
Certificate serial:       010D0C9F4328584754E0C95501C3DB938C7942C0
Authority key identifier: 3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     396480
IP address blocks:        23.131.64.0/24 maxlen: 24
                          23.131.65.0/24 maxlen: 24
                          139.60.72.0/22 maxlen: 22
                          2604:4ec0::/36 maxlen: 36
                          2604:4ec0:1000::/36 maxlen: 36
                          2604:4ec0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:c9:55:01:c3:db:93:8c:79:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716e48f-a64c-4227-b984-34b75b5f7e97
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=a11f2077-7014-40c9-a046-91f028855e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:3f:9a:83:df:4d:c4:e1:ea:0b:a4:1e:57:
                    0a:75:8f:57:7c:b1:d8:c7:3f:e1:da:4f:10:8b:f4:
                    c6:9f:30:c4:f4:50:f5:d7:c3:8a:5d:a3:fb:7d:02:
                    22:c3:dd:80:69:e6:18:f6:75:1c:29:98:56:54:88:
                    19:fe:e3:3a:07:36:1d:cb:4e:7b:46:df:91:ad:2d:
                    a9:b0:c4:cd:e4:da:03:9f:36:75:ca:65:80:1a:2e:
                    7a:62:46:78:ac:05:72:a8:d7:bf:36:9a:93:a8:f2:
                    14:95:9b:38:2a:a3:90:4c:8c:91:42:73:f9:88:00:
                    4d:fd:3d:42:0f:6b:93:8a:d5:7d:88:58:af:36:62:
                    9e:b9:6f:26:f2:de:38:b2:30:9c:81:52:a9:da:15:
                    2f:b8:64:8d:2b:28:c5:da:3b:4f:19:26:d9:0d:77:
                    34:16:f8:b8:4d:b8:42:f9:fa:bd:8f:e8:f5:88:b8:
                    20:e8:be:0a:89:34:60:e8:15:a7:dd:d8:f9:03:d6:
                    62:8b:8e:23:8c:fe:c1:97:8e:a1:78:59:cd:58:2b:
                    ba:9f:01:39:a0:ac:63:93:a7:78:7f:ea:96:55:0f:
                    1c:87:75:4a:85:3e:99:2f:82:32:30:0c:6a:fc:d3:
                    6b:1b:74:13:0d:13:b1:c4:d5:6c:78:70:56:5e:16:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:E9:10:9E:C5:1A:A1:74:9E:C6:F6:47:D2:67:BC:ED:29:F4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl

            X509v3 Authority Key Identifier:
                keyid:3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.64.0/23
                  139.60.72.0/22
                IPv6:
                  2604:4ec0::-2604:4ec0:2fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:bb:67:fe:ad:e4:c0:06:72:7d:a4:0e:e2:8e:c5:31:03:
         fa:b9:bb:28:39:5e:af:37:01:dc:2e:58:16:ea:da:23:59:cb:
         c2:0c:f9:04:53:f9:d0:14:ea:70:af:95:c7:b1:c7:b2:5d:85:
         21:88:29:bf:d3:9c:20:25:6e:0c:86:7f:f5:fc:b1:40:ce:d4:
         77:9b:20:ca:fc:c5:7e:42:ba:46:46:68:18:5f:0e:72:d2:f5:
         c6:6c:6d:10:0d:5d:6b:07:0a:41:70:8a:c6:bb:7c:9e:01:c6:
         07:8e:8c:75:ca:87:b5:39:01:c2:5a:4a:63:b5:cf:9d:8f:0d:
         22:4a:f8:9d:dd:4e:85:29:66:52:e6:b1:c4:a3:a7:e9:b5:89:
         cf:68:50:4e:c7:4b:6b:e1:78:c7:f8:3e:46:8c:c9:a6:b2:c8:
         5e:74:c0:b5:f5:98:60:d3:ec:88:da:65:e7:44:91:6f:1a:33:
         53:da:71:ab:21:de:28:54:9c:e3:8d:63:72:2d:79:1e:61:58:
         de:0b:db:d5:ff:4d:57:ee:f4:c9:54:49:c5:03:19:49:66:ad:
         5a:43:5f:74:58:45:78:e5:da:1a:b0:88:42:57:76:20:16:6d:
         06:f4:09:f4:91:b0:0d:98:b9:22:22:39:80:57:b5:3b:7c:02:
         c8:6e:37:5b
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEdU4MlVAcPbk4x5QsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTcxNmU0OGYtYTY0Yy00MjI3LWI5ODQtMzRiNzViNWY3
ZTk3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YTExZjIwNzctNzAxNC00MGM5LWEwNDYtOTFmMDI4ODU1ZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/s/moPfTcTh6gukHlcKdY9XfLHYxz/h2k8Q
i/TGnzDE9FD118OKXaP7fQIiw92AaeYY9nUcKZhWVIgZ/uM6BzYdy057Rt+RrS2p
sMTN5NoDnzZ1ymWAGi56YkZ4rAVyqNe/NpqTqPIUlZs4KqOQTIyRQnP5iABN/T1C
D2uTitV9iFivNmKeuW8m8t44sjCcgVKp2hUvuGSNKyjF2jtPGSbZDXc0Fvi4TbhC
+fq9j+j1iLgg6L4KiTRg6BWn3dj5A9Zii44jjP7Bl46heFnNWCu6nwE5oKxjk6d4
f+qWVQ8ch3VKhT6ZL4IyMAxq/NNrG3QTDROxxNVseHBWXha6OwIDAQABo4IDdDCC
A3AwHQYDVR0OBBYEFFvq6RCexRqhdJ7G9kfSZ7ztKfRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzE2
ZTQ4Zi1hNjRjLTQyMjctYjk4NC0zNGI3NWI1ZjdlOTcvODg0Y2ZjMGQtYjAwOS0z
MWJjLThjNjctNWQ3NzJiZGM3M2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxNmU0OGYtYTY0Yy00MjI3LWI5
ODQtMzRiNzViNWY3ZTk3LzE3MTZlNDhmLWE2NGMtNDIyNy1iOTg0LTM0Yjc1YjVm
N2U5Ny5jcmwwHwYDVR0jBBgwFoAUPc928y0UTxGG8UgKLSVH0QYsiP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzE2ZTQ4Zi1hNjRjLTQyMjctYjk4NC0zNGI3
NWI1ZjdlOTcuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQBF4NAAwQC
izxIMBcEAgACMBEwDwMFBiYETsADBgQmBE7AIDBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlxrtn/q3kwAZy
faQO4o7FMQP6ubsoOV6vNwHcLlgW6tojWcvCDPkEU/nQFOpwr5XHsceyXYUhiCm/
05wgJW4Mhn/1/LFAztR3myDK/MV+QrpGRmgYXw5y0vXGbG0QDV1rBwpBcIrGu3ye
AcYHjox1yoe1OQHCWkpjtc+djw0iSvid3U6FKWZS5rHEo6fptYnPaFBOx0tr4XjH
+D5GjMmmsshedMC19Zhg0+yI2mXnRJFvGjNT2nGrId4oVJzjjWNyLXkeYVjeC9vV
/01X7vTJVEnFAxlJZq1aQ190WEV45doasIhCV3YgFm0G9An0kbANmLkiIjmAV7U7
fALIbjdb
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:07 2024 by rpki-client on console-ams.rpki-client.org