Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
File:                     4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa (raw, json)
Hash identifier:          UpqtBHkmpS+sc0VadGU9JrO775+pZigCGGAsIKGBs8s=
Subject key identifier:   AE:36:D8:74:EC:0C:04:A0:A3:85:C8:82:D6:70:8E:FB:A4:4A:91:CB
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285847F456A6E000A2DC65CD97A91E
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
Signing time:             Thu 21 Nov 2024 15:51:47 +0000
ROA not before:           Thu 21 Nov 2024 15:51:47 +0000
ROA not after:            Wed 19 Feb 2025 15:51:47 +0000
asID:                     3320
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:56:a6:e0:00:a2:dc:65:cd:97:a9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Nov 21 15:51:47 2024 GMT
            Not After : Feb 19 15:51:47 2025 GMT
        Subject: CN=100d85e3-4824-4383-9d9b-64b19e7d93bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:06:4c:86:b3:85:63:d9:86:63:6c:a0:b9:
                    39:62:e6:ed:ef:44:ce:e7:d2:67:ed:74:b2:5b:5b:
                    59:91:8a:8d:75:e6:2e:7d:ea:b5:ee:55:03:8c:6a:
                    ee:6f:8e:9e:78:4a:39:23:e5:a2:4f:e7:2a:7c:cd:
                    48:a7:e1:c8:8d:61:e5:83:62:fb:2b:57:f6:fd:dc:
                    28:e9:e4:c4:ca:e9:27:a5:c7:64:9f:81:dc:d4:f6:
                    99:04:cc:b1:e4:e5:a4:1e:07:b7:40:9e:07:84:57:
                    4d:b9:30:6a:64:af:16:a8:e3:c4:6c:ba:fc:06:8f:
                    da:06:6a:d4:97:ba:2b:09:be:88:23:99:59:52:4e:
                    15:63:21:d3:44:1c:7d:74:ea:bb:af:06:a2:7e:99:
                    37:52:b2:87:c7:99:f9:5a:c9:f6:3d:16:26:bb:56:
                    a9:e9:cb:e0:b8:50:d3:26:a8:69:28:9c:f9:ce:58:
                    b3:f1:48:3b:b6:9b:31:ae:73:14:7b:93:1d:ad:ca:
                    0a:5d:8a:e5:1d:85:bb:14:38:cf:d3:91:45:cf:d1:
                    02:17:85:d5:22:fa:65:bc:f8:e1:aa:14:4e:1c:b9:
                    0e:49:17:49:6d:1c:c0:3d:83:2c:3a:c9:2f:a5:69:
                    f8:ef:b3:53:ee:72:0d:5f:a7:e7:a0:f4:8d:80:18:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:D8:74:EC:0C:04:A0:A3:85:C8:82:D6:70:8E:FB:A4:4A:91:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:10:c9:fc:03:1e:3d:b9:c3:7f:15:c7:4b:0c:08:8c:25:
         83:ed:6c:a8:bb:2d:36:b6:db:da:49:8c:10:e0:1b:5a:6b:18:
         5d:23:f8:29:fc:0c:1c:ca:45:5e:2c:f4:df:90:5a:b1:85:86:
         86:f9:09:4d:05:35:a5:dc:47:a3:93:c7:99:bb:a0:c7:ae:f3:
         53:8d:67:b1:9f:f4:e9:bf:e3:f6:05:65:e2:53:67:f7:0a:35:
         80:45:f7:3b:74:35:cf:1f:e7:8b:84:24:98:84:eb:fb:e5:8f:
         cd:5c:98:a0:f9:12:c5:20:10:1d:26:ce:7f:6d:2a:61:01:0a:
         31:b9:3f:4e:89:3d:3a:a4:f9:d8:bf:37:51:33:6d:e3:93:c2:
         58:10:f8:64:f9:0d:d1:28:6d:e0:78:e5:60:e7:f3:93:95:f9:
         19:1c:ee:f4:77:33:f0:74:69:7e:41:2c:da:0c:72:93:62:49:
         88:9c:b7:80:6d:c1:c5:37:31:4d:2d:4f:5f:1c:2b:9d:f5:a1:
         4d:8a:2e:48:90:12:77:bd:d0:d0:64:0f:10:82:d8:cb:90:1f:
         8f:d4:ab:a4:5d:c2:ba:76:18:01:4c:a2:79:0d:e2:0c:e6:97:
         fe:2b:c7:80:54:69:03:b1:72:74:84:c8:54:14:32:55:cc:d4:
         ec:78:7d:78
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEf0VqbgAKLcZc2XqR4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI0MTEyMTE1NTE0N1oXDTI1MDIxOTE1NTE0N1owLzEtMCsGA1UEAxMk
MTAwZDg1ZTMtNDgyNC00MzgzLTlkOWItNjRiMTllN2Q5M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU0GTIazhWPZhmNsoLk5Yubt70TO59Jn7XSy
W1tZkYqNdeYufeq17lUDjGrub46eeEo5I+WiT+cqfM1Ip+HIjWHlg2L7K1f2/dwo
6eTEyuknpcdkn4Hc1PaZBMyx5OWkHge3QJ4HhFdNuTBqZK8WqOPEbLr8Bo/aBmrU
l7orCb6II5lZUk4VYyHTRBx9dOq7rwaifpk3UrKHx5n5Wsn2PRYmu1ap6cvguFDT
JqhpKJz5zliz8Ug7tpsxrnMUe5MdrcoKXYrlHYW7FDjP05FFz9ECF4XVIvplvPjh
qhROHLkOSRdJbRzAPYMsOskvpWn477NT7nINX6fnoPSNgBhByQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFK422HTsDASgo4XIgtZwjvukSpHLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvNDk4NGRkZTgtZjdhMS0z
ZmE4LTlmMmYtZmI3M2VmMWUwM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAQ9ayAwQA
SlCdAwQASlClAwQASlCuMAwDBABKULEDBABKULIDBADO1PswVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWHsQ
yfwDHj25w38Vx0sMCIwlg+1sqLstNrbb2kmMEOAbWmsYXSP4KfwMHMpFXiz035Ba
sYWGhvkJTQU1pdxHo5PHmbugx67zU41nsZ/06b/j9gVl4lNn9wo1gEX3O3Q1zx/n
i4QkmITr++WPzVyYoPkSxSAQHSbOf20qYQEKMbk/Tok9OqT52L83UTNt45PCWBD4
ZPkN0Sht4HjlYOfzk5X5GRzu9Hcz8HRpfkEs2gxyk2JJiJy3gG3BxTcxTS1PXxwr
nfWhTYouSJASd73Q0GQPEILYy5Afj9SrpF3CunYYAUyieQ3iDOaX/ivHgFRpA7Fy
dITIVBQyVczU7Hh9eA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:05 2024 by rpki-client on console-ams.rpki-client.org