Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa
File:                     5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa (raw, json)
Hash identifier:          ekqpbhsVJfwlqkF3fg+GEkU/BCTQpeSx85ec6VgR+yE=
Subject key identifier:   88:87:BB:B4:DE:E8:B9:99:FC:0E:04:7A:D1:46:C8:6F:69:09:A7:D0
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847D99A0966AB6EB37063926700
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     1239
IP address blocks:        50.7.120.0/22 maxlen: 22
                          67.159.6.0/23 maxlen: 23
                          2001:49f0:d01b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:09:66:ab:6e:b3:70:63:92:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=b00d5c66-3aa1-42ff-a4dd-169ecb0f0c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:cd:61:04:3c:07:a4:41:ba:0d:b8:7c:b0:
                    e6:6d:d8:73:42:cd:0d:f3:43:2b:c9:65:92:3b:25:
                    73:9a:18:69:9c:e6:47:4e:1a:75:b4:04:18:9b:61:
                    0c:9d:95:b4:1b:58:3c:d0:26:c7:dd:07:3d:7d:b6:
                    03:28:96:8d:df:ef:a2:ae:f2:7c:2e:74:8e:04:26:
                    19:81:51:9b:76:c0:8e:90:cb:71:74:e4:ef:1d:3a:
                    a3:e2:39:ac:90:a5:b8:2b:39:ae:79:e0:e3:85:6e:
                    b9:92:26:88:05:2a:ba:20:25:21:ba:e5:3b:a4:d8:
                    7a:f3:d3:ac:0a:5a:4c:1f:c4:7c:96:9b:d3:76:65:
                    03:60:02:53:ed:4e:25:2a:15:a4:07:ce:38:3d:5d:
                    7b:be:2a:56:7b:55:5f:02:e4:d7:76:95:65:96:a6:
                    ce:5e:f9:79:f8:a4:2f:56:5e:d3:31:b6:1e:5f:f9:
                    9f:b4:da:b4:ad:75:14:d2:eb:78:be:be:e1:6e:1c:
                    10:f5:ef:90:aa:16:2e:a2:a0:eb:b1:38:6a:f6:7b:
                    ad:f4:a4:73:15:0e:61:f2:a2:3d:47:2c:ad:10:dd:
                    d3:e3:8d:a1:d8:9f:43:34:1a:d8:23:d7:3a:21:55:
                    42:2e:77:c4:20:ec:80:39:e8:60:51:79:62:3d:66:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:87:BB:B4:DE:E8:B9:99:FC:0E:04:7A:D1:46:C8:6F:69:09:A7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.120.0/22
                  67.159.6.0/23
                IPv6:
                  2001:49f0:d01b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:57:16:af:75:68:3f:95:ea:5b:cf:74:6e:d9:10:0d:55:cf:
         d8:18:a3:a0:50:5e:25:0d:67:43:fa:ed:e6:d7:ff:b8:79:db:
         96:c1:4b:10:f6:8a:d0:b7:66:aa:fe:63:7a:94:03:a0:5c:8e:
         b3:04:d6:8e:3b:02:58:12:7b:bc:e9:c2:06:6c:1e:3c:bc:a0:
         9b:53:c9:e9:ed:c2:97:ab:06:87:80:72:c7:22:c4:28:af:83:
         38:61:71:fe:0e:94:24:ba:34:ce:19:52:a0:b3:95:b9:79:ae:
         43:4b:31:4e:23:cd:4b:6e:fe:1e:79:13:aa:77:15:0b:6d:36:
         e6:e7:36:d8:ad:f6:db:a2:18:3c:52:4f:84:38:36:9a:0d:be:
         16:e4:b7:69:b0:8f:f5:bd:d8:5f:88:61:e6:0b:28:d4:8f:7b:
         75:bc:ed:de:78:81:6a:fc:bf:f1:a1:49:05:42:fe:bc:5e:16:
         9c:29:e7:93:6e:c7:23:75:75:11:3d:3f:f6:b1:a7:b9:a7:85:
         13:65:a1:53:76:c5:1e:e0:08:09:92:ff:97:78:67:81:b6:26:
         b9:be:47:c2:01:09:dc:26:7f:b8:a2:1d:36:7c:e4:af:44:cf:
         07:50:eb:d5:8a:5a:ed:ce:f4:ac:b9:12:10:f6:fd:44:da:45:
         79:b5:46:dd
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEfZmglmq26zcGOSZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
YjAwZDVjNjYtM2FhMS00MmZmLWE0ZGQtMTY5ZWNiMGYwYzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW7NYQQ8B6RBug24fLDmbdhzQs0N80MryWWS
OyVzmhhpnOZHThp1tAQYm2EMnZW0G1g80CbH3Qc9fbYDKJaN3++irvJ8LnSOBCYZ
gVGbdsCOkMtxdOTvHTqj4jmskKW4KzmueeDjhW65kiaIBSq6ICUhuuU7pNh689Os
ClpMH8R8lpvTdmUDYAJT7U4lKhWkB844PV17vipWe1VfAuTXdpVllqbOXvl5+KQv
Vl7TMbYeX/mftNq0rXUU0ut4vr7hbhwQ9e+QqhYuoqDrsThq9nut9KRzFQ5h8qI9
RyytEN3T442h2J9DNBrYI9c6IVVCLnfEIOyAOehgUXliPWYd+wIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFIiHu7Te6LmZ/A4EetFGyG9pCafQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNWQ5MGNlOGEtN2RkOS0z
MDllLTg4OTktOWVjZGRhNTI4NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCMgd4AwQB
Q58GMA8EAgACMAkDBwAgAUnw0BswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF1cWr3VoP5XqW890btkQDVXP
2BijoFBeJQ1nQ/rt5tf/uHnblsFLEPaK0Ldmqv5jepQDoFyOswTWjjsCWBJ7vOnC
BmwePLygm1PJ6e3Cl6sGh4ByxyLEKK+DOGFx/g6UJLo0zhlSoLOVuXmuQ0sxTiPN
S27+HnkTqncVC2025uc22K3226IYPFJPhDg2mg2+FuS3abCP9b3YX4hh5gso1I97
dbzt3niBavy/8aFJBUL+vF4WnCnnk27HI3V1ET0/9rGnuaeFE2WhU3bFHuAICZL/
l3hngbYmub5HwgEJ3CZ/uKIdNnzkr0TPB1Dr1Ypa7c70rLkSEPb9RNpFebVG3Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org