Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/174846cb-0f67-325c-b817-d538a17e3ac5.roa
File:                     174846cb-0f67-325c-b817-d538a17e3ac5.roa (raw, json)
Hash identifier:          6Mc0e97ciPyiiHrzG+VNwHYRG6WJuvzK9PF5yTjdZE4=
Subject key identifier:   2F:2E:84:77:5A:81:E2:9A:4F:58:6F:A1:2E:0C:15:52:A6:93:73:8A
Certificate issuer:       /CN=cfb7a881-7ab4-481b-a9b2-22789676f960
Certificate serial:       010D0C9F432858474420B51EEA2E5DE8067AD900
Authority key identifier: B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/174846cb-0f67-325c-b817-d538a17e3ac5.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     398395
IP address blocks:        67.219.137.0/24 maxlen: 24
                          67.219.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b5:1e:ea:2e:5d:e8:06:7a:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb7a881-7ab4-481b-a9b2-22789676f960
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=4d804f60-8ca4-4694-9191-376d34689e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:a3:4b:d8:d5:dd:6e:b1:d5:78:59:72:d4:
                    23:73:ca:7c:07:ae:0f:4a:62:b8:e0:ab:94:7c:77:
                    ef:06:8a:4b:f9:6a:9d:cf:fb:b4:b7:f1:be:da:d8:
                    2c:b8:11:db:19:1d:97:ba:46:03:61:d0:60:68:74:
                    92:b1:f5:9a:4f:a2:f6:1d:f3:11:40:90:8e:a9:0a:
                    f2:66:fb:ed:02:53:5c:dd:18:49:91:ae:79:40:83:
                    90:b0:c2:f6:9e:23:0a:29:37:80:4f:11:39:4f:04:
                    3a:ee:e8:78:fe:68:39:39:32:37:f8:9b:86:3b:1d:
                    13:de:6e:ee:48:99:28:e1:62:b9:d5:85:dc:2d:3f:
                    2a:81:33:2a:87:12:45:aa:bb:4b:32:9c:f1:93:a6:
                    f8:82:d4:f7:91:fe:18:1d:69:37:0f:f4:78:a2:ab:
                    04:fe:a0:81:9f:55:5b:46:f9:b6:43:2b:a3:b6:1b:
                    3c:86:6a:68:da:b8:b4:ca:76:ac:57:cf:bd:84:a1:
                    df:fa:e4:8b:25:0d:13:06:23:3c:bb:ad:1f:a1:8f:
                    85:9b:ae:71:a7:69:13:6d:0d:56:26:8d:d0:91:0d:
                    46:94:ce:b0:37:28:bb:b0:4e:e1:75:1a:8a:fb:0b:
                    a3:a0:d5:25:e4:d3:e6:2b:21:89:c6:af:0e:6a:81:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2E:84:77:5A:81:E2:9A:4F:58:6F:A1:2E:0C:15:52:A6:93:73:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/174846cb-0f67-325c-b817-d538a17e3ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.crl

            X509v3 Authority Key Identifier:
                keyid:B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.137.0/24
                  67.219.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:5e:bd:98:a5:31:53:4a:66:8b:06:7f:7a:fc:d3:90:60:a9:
         16:2b:b1:22:e0:c5:f4:d0:3e:18:7b:34:b6:a3:64:8f:47:5b:
         b7:05:ec:4e:b5:32:04:56:e9:f9:e9:a0:6e:7e:63:79:ee:03:
         6d:95:7a:97:37:03:c0:84:2c:56:f2:ff:e9:a1:71:cb:cf:2d:
         9f:d8:25:35:b4:82:50:8b:eb:09:79:fd:ae:76:51:90:04:f7:
         95:ed:f0:34:aa:8d:cb:f2:fd:b8:81:a0:0e:98:14:44:6e:7f:
         3d:af:38:c8:01:9c:58:f9:aa:c0:f6:f1:f2:b2:db:4d:ac:85:
         b9:4a:d4:b4:02:f8:6a:10:c8:a2:61:7d:c5:14:1b:e5:7c:c3:
         71:73:53:a3:0e:31:9a:b8:df:96:f0:8f:88:4d:f7:53:7c:09:
         e2:2a:cd:67:54:cb:e3:ca:1b:97:c7:ba:ec:fd:07:9d:b2:c3:
         f5:d0:c0:41:64:1e:c8:f4:8c:e6:6f:78:7d:89:31:87:5b:bf:
         86:c0:c0:5c:a9:fe:0f:2e:c6:e2:0f:ca:63:d9:ca:d8:70:f9:
         b3:a7:22:dd:82:e4:7e:af:2e:1f:62:ff:cd:bc:cb:31:71:08:
         ec:8e:44:74:2a:33:e7:a1:31:61:54:da:8e:92:7b:44:13:71:
         16:6d:1c:c3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdEILUe6i5d6AZ62QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZiN2E4ODEtN2FiNC00ODFiLWE5YjItMjI3ODk2NzZm
OTYwMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
NGQ4MDRmNjAtOGNhNC00Njk0LTkxOTEtMzc2ZDM0Njg5ZTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPyjS9jV3W6x1XhZctQjc8p8B64PSmK44KuU
fHfvBopL+Wqdz/u0t/G+2tgsuBHbGR2XukYDYdBgaHSSsfWaT6L2HfMRQJCOqQry
ZvvtAlNc3RhJka55QIOQsML2niMKKTeATxE5TwQ67uh4/mg5OTI3+JuGOx0T3m7u
SJko4WK51YXcLT8qgTMqhxJFqrtLMpzxk6b4gtT3kf4YHWk3D/R4oqsE/qCBn1Vb
Rvm2Qyujths8hmpo2ri0ynasV8+9hKHf+uSLJQ0TBiM8u60foY+Fm65xp2kTbQ1W
Jo3QkQ1GlM6wNyi7sE7hdRqK+wujoNUl5NPmKyGJxq8OaoFnOQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFC8uhHdageKaT1hvoS4MFVKmk3OKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZmI3
YTg4MS03YWI0LTQ4MWItYTliMi0yMjc4OTY3NmY5NjAvMTc0ODQ2Y2ItMGY2Ny0z
MjVjLWI4MTctZDUzOGExN2UzYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2ZiN2E4ODEtN2FiNC00ODFiLWE5
YjItMjI3ODk2NzZmOTYwL2NmYjdhODgxLTdhYjQtNDgxYi1hOWIyLTIyNzg5Njc2
Zjk2MC5jcmwwHwYDVR0jBBgwFoAUtyGQ/tvYUhduJflU6uOSeTMalVowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZmI3YTg4MS03YWI0LTQ4MWItYTliMi0yMjc4
OTY3NmY5NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ9uJAwQA
Q9uLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALBevZilMVNKZosGf3r805BgqRYrsSLgxfTQPhh7NLajZI9H
W7cF7E61MgRW6fnpoG5+Y3nuA22Vepc3A8CELFby/+mhccvPLZ/YJTW0glCL6wl5
/a52UZAE95Xt8DSqjcvy/biBoA6YFERufz2vOMgBnFj5qsD28fKy202shblK1LQC
+GoQyKJhfcUUG+V8w3FzU6MOMZq435bwj4hN91N8CeIqzWdUy+PKG5fHuuz9B52y
w/XQwEFkHsj0jOZveH2JMYdbv4bAwFyp/g8uxuIPymPZythw+bOnIt2C5H6vLh9i
/828yzFxCOyORHQqM+ehMWFU2o6Se0QTcRZtHMM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:25 2024 by rpki-client on console-fra.rpki-client.org