Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/182aa685-f9c5-3c7d-b8d4-fde92f51699b.roa
File:                     182aa685-f9c5-3c7d-b8d4-fde92f51699b.roa (raw, json)
Hash identifier:          nZjfrOkemCaXKXRAJ25jxCiX9FpMlS80D7WPUlAagZY=
Subject key identifier:   F1:65:34:04:09:7E:AE:59:94:AE:57:13:54:44:9E:80:D7:95:E6:9C
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F432858481C9A89BD59E8025D1B117380
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/182aa685-f9c5-3c7d-b8d4-fde92f51699b.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     47002
IP address blocks:        74.114.88.0/22 maxlen: 24
                          158.51.60.0/22 maxlen: 24
                          170.39.128.0/22 maxlen: 24
                          208.80.4.0/22 maxlen: 24
                          2604:4f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:89:bd:59:e8:02:5d:1b:11:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=cc85b94a-4c00-45c7-a416-fb54b0059c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:75:de:88:2e:e3:ef:a9:b4:a2:2c:b4:79:
                    1d:41:27:53:83:5f:c2:ef:3d:e0:90:4f:7e:ab:27:
                    2f:13:b5:7a:0f:4c:05:fe:64:49:14:1b:ab:c4:01:
                    0d:a8:0a:81:7e:9d:bc:ff:b5:20:b8:7d:d3:6b:78:
                    2f:b9:40:70:47:1e:5f:83:a6:a9:d5:1d:bf:ac:c4:
                    f7:7b:b2:9b:49:ab:d3:7b:07:5e:07:94:0b:da:93:
                    27:57:09:80:f1:87:d0:dc:aa:cc:97:c9:70:a2:90:
                    7c:0b:57:d1:26:ab:e4:b9:38:97:54:c2:5c:07:41:
                    6f:c3:d7:9d:a3:a8:45:fe:50:fc:b7:b8:73:da:2c:
                    8a:89:e2:94:1d:52:90:9f:1c:75:d5:f8:97:95:80:
                    49:a2:06:1b:8a:38:7f:a7:3f:0c:a9:cd:2a:91:29:
                    0d:1f:e3:66:ac:4b:40:fa:f6:bb:52:41:b2:dc:7e:
                    1b:9d:75:a3:ad:54:d2:df:0c:52:fd:c6:3b:b4:72:
                    f4:7f:31:9b:ff:ff:41:8d:63:c5:69:86:36:2c:37:
                    74:de:49:c1:d3:f2:8d:0a:9d:65:c8:c6:f4:c6:5c:
                    34:3b:e5:3c:e6:92:9d:3a:a2:7f:2e:25:9b:84:a1:
                    5c:b3:47:22:a8:9b:29:81:4c:74:05:1c:6b:24:11:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:65:34:04:09:7E:AE:59:94:AE:57:13:54:44:9E:80:D7:95:E6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/182aa685-f9c5-3c7d-b8d4-fde92f51699b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.88.0/22
                  158.51.60.0/22
                  170.39.128.0/22
                  208.80.4.0/22
                IPv6:
                  2604:4f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:61:d5:81:ce:bd:39:1e:c9:40:a5:db:80:23:47:2d:8d:
         06:e1:58:3c:7d:7b:88:d9:18:2f:0a:87:97:eb:3a:e0:b1:9b:
         79:9c:a3:46:67:49:64:bb:9f:41:2e:3d:80:f3:f7:a5:ea:d9:
         ee:e3:2e:9a:bd:5e:81:cc:4e:11:90:ee:22:10:0c:18:12:a5:
         e9:37:fb:40:be:53:87:57:51:01:7f:8d:8a:f1:98:5c:8e:d0:
         8e:43:cb:2d:b3:3a:8f:c5:d7:fa:4e:8b:51:39:31:97:8a:7d:
         11:ed:9d:bc:29:6b:23:40:0c:6e:6e:db:91:52:cc:b2:a5:f5:
         97:93:7d:fe:6d:f5:b4:a3:02:a0:d1:b4:26:77:f1:c5:c7:92:
         f5:80:99:85:80:60:7c:ad:00:e5:ec:23:88:be:f4:40:d8:40:
         7b:51:02:3f:ef:90:2f:35:12:d4:c5:4c:6b:a1:fd:56:3c:12:
         a1:29:56:4c:16:b7:11:f9:df:18:f0:e5:3c:49:1e:3a:24:5c:
         14:df:4f:24:70:38:01:96:d0:06:2e:eb:32:34:6d:b5:90:86:
         39:78:6b:d4:21:91:88:ee:8c:5f:7a:d0:31:33:5a:96:87:5a:
         3b:90:b0:83:56:3e:a2:24:82:23:5a:79:e7:1f:96:f5:8c:31:
         3e:f5:c6:f2
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEgcmom9WegCXRsRc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTczMjEzODktODJjOC00MGFkLTk2OWQtZjM1NWE3ODlm
NTc5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
Y2M4NWI5NGEtNGMwMC00NWM3LWE0MTYtZmI1NGIwMDU5YzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKl13ogu4++ptKIstHkdQSdTg1/C7z3gkE9+
qycvE7V6D0wF/mRJFBurxAENqAqBfp28/7UguH3Ta3gvuUBwRx5fg6ap1R2/rMT3
e7KbSavTewdeB5QL2pMnVwmA8YfQ3KrMl8lwopB8C1fRJqvkuTiXVMJcB0Fvw9ed
o6hF/lD8t7hz2iyKieKUHVKQnxx11fiXlYBJogYbijh/pz8Mqc0qkSkNH+NmrEtA
+va7UkGy3H4bnXWjrVTS3wxS/cY7tHL0fzGb//9BjWPFaYY2LDd03knB0/KNCp1l
yMb0xlw0O+U85pKdOqJ/LiWbhKFcs0ciqJspgUx0BRxrJBHCKwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFPFlNAQJfq5ZlK5XE1REnoDXleacMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMy
MTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1YTc4OWY1NzkvMTgyYWE2ODUtZjljNS0z
YzdkLWI4ZDQtZmRlOTJmNTE2OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTczMjEzODktODJjOC00MGFkLTk2
OWQtZjM1NWE3ODlmNTc5LzE3MzIxMzg5LTgyYzgtNDBhZC05NjlkLWYzNTVhNzg5
ZjU3OS5jcmwwHwYDVR0jBBgwFoAU8geygR3uIKMb0ocE2pwdgM76tF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMyMTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1
YTc4OWY1NzkuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCSnJYAwQC
njM8AwQCqieAAwQC0FAEMA0EAgACMAcDBQAmBE8AMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADz9YdWBzr05
HslApduAI0ctjQbhWDx9e4jZGC8Kh5frOuCxm3mco0ZnSWS7n0EuPYDz96Xq2e7j
Lpq9XoHMThGQ7iIQDBgSpek3+0C+U4dXUQF/jYrxmFyO0I5Dyy2zOo/F1/pOi1E5
MZeKfRHtnbwpayNADG5u25FSzLKl9ZeTff5t9bSjAqDRtCZ38cXHkvWAmYWAYHyt
AOXsI4i+9EDYQHtRAj/vkC81EtTFTGuh/VY8EqEpVkwWtxH53xjw5TxJHjokXBTf
TyRwOAGW0AYu6zI0bbWQhjl4a9QhkYjujF960DEzWpaHWjuQsINWPqIkgiNaeecf
lvWMMT71xvI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:19 2025 by rpki-client