Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
File:                     b5bccd91-72af-3e72-9e98-e575bcfa392f.roa (raw, json)
Hash identifier:          ovhkS8c6Z7JD+N0tFaHIkPP2O8Vj/tXJFNhg2PwqLb0=
Subject key identifier:   E7:30:82:83:DF:C2:A6:0D:E8:B4:57:D5:44:42:AE:93:54:C3:B0:A7
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F43285848748B21C9C63A1135215F1A00
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     16410
IP address blocks:        192.112.245.0/24 maxlen: 24
                          205.157.203.0/24 maxlen: 24
                          205.157.204.0/24 maxlen: 24
                          205.157.240.0/24 maxlen: 24
                          205.157.242.0/24 maxlen: 24
                          205.157.244.0/24 maxlen: 24
                          205.157.245.0/24 maxlen: 24
                          205.157.246.0/24 maxlen: 24
                          205.157.247.0/24 maxlen: 24
                          205.157.248.0/24 maxlen: 24
                          205.157.249.0/24 maxlen: 24
                          205.157.250.0/24 maxlen: 24
                          205.157.251.0/24 maxlen: 24
                          205.157.254.0/24 maxlen: 24
                          205.157.255.0/24 maxlen: 24
                          206.180.0.0/23 maxlen: 23
                          206.180.2.0/24 maxlen: 24
                          206.180.3.0/24 maxlen: 24
                          206.180.4.0/24 maxlen: 24
                          206.180.5.0/24 maxlen: 24
                          206.180.6.0/24 maxlen: 24
                          206.180.7.0/24 maxlen: 24
                          206.180.8.0/24 maxlen: 24
                          206.180.10.0/24 maxlen: 24
                          206.180.11.0/24 maxlen: 24
                          206.180.12.0/22 maxlen: 22
                          206.180.18.0/24 maxlen: 24
                          206.180.19.0/24 maxlen: 24
                          206.180.25.0/24 maxlen: 24
                          206.180.27.0/24 maxlen: 24
                          206.180.28.0/24 maxlen: 24
                          206.180.29.0/24 maxlen: 24
                          206.180.30.0/24 maxlen: 24
                          206.180.36.0/24 maxlen: 24
                          206.180.37.0/24 maxlen: 24
                          206.180.38.0/24 maxlen: 24
                          206.180.39.0/24 maxlen: 24
                          206.180.52.0/24 maxlen: 24
                          206.180.53.0/24 maxlen: 24
                          206.180.54.0/24 maxlen: 24
                          206.180.55.0/24 maxlen: 24
                          206.180.56.0/24 maxlen: 24
                          206.180.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:21:c9:c6:3a:11:35:21:5f:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=e55c071f-abe7-41ea-a09d-959489fc9bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:18:56:8e:08:77:a3:62:8a:88:dc:b2:d0:
                    5f:4c:3d:e4:1c:9b:43:d8:f1:78:04:23:0f:7d:89:
                    37:b6:87:ad:18:9c:67:47:13:3c:27:20:53:6a:b7:
                    6f:8e:b1:1a:6f:21:6d:74:11:65:9a:31:75:47:db:
                    b6:5f:07:2c:d5:92:2c:cb:2f:89:0a:7c:0b:cf:58:
                    12:31:2d:42:59:87:e8:27:42:b0:ed:1a:b1:55:25:
                    b8:13:5a:be:6d:f2:8b:bb:76:db:cf:94:c8:ae:fc:
                    25:61:7b:e6:69:9f:c0:53:5d:2c:62:f2:cc:ea:1a:
                    fd:2f:ca:1b:50:df:92:3c:e2:3c:b7:7d:d6:48:84:
                    7f:67:3e:7d:71:e2:5d:18:24:26:ae:ee:ae:e4:01:
                    5d:2a:b1:62:16:43:f5:33:eb:dd:af:e3:eb:18:10:
                    37:2a:36:41:da:d7:9f:22:f5:f2:b9:5d:4a:5f:13:
                    e8:e4:17:04:18:8f:91:13:e7:a2:f0:d7:0b:68:9b:
                    30:87:f4:57:af:6c:de:10:60:76:4f:99:59:65:40:
                    6f:91:28:c9:fe:33:7c:3c:a3:9c:de:b8:ad:13:90:
                    3a:22:7e:cb:be:70:03:7c:63:a9:56:ca:18:96:ef:
                    6f:94:1a:ef:e4:a5:6c:38:77:0c:1d:36:86:17:94:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:30:82:83:DF:C2:A6:0D:E8:B4:57:D5:44:42:AE:93:54:C3:B0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.245.0/24
                  205.157.203.0-205.157.204.255
                  205.157.240.0/24
                  205.157.242.0/24
                  205.157.244.0-205.157.251.255
                  205.157.254.0/23
                  206.180.0.0-206.180.8.255
                  206.180.10.0-206.180.15.255
                  206.180.18.0/23
                  206.180.25.0/24
                  206.180.27.0-206.180.30.255
                  206.180.36.0/22
                  206.180.52.0-206.180.56.255
                  206.180.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:4d:e0:3c:ba:ff:93:c4:5f:97:77:bb:c7:9b:49:26:d4:
         db:6d:7b:51:78:fb:3f:3c:24:51:4b:cd:69:d9:ad:df:3b:38:
         92:1a:a9:f6:c2:48:d3:73:bc:34:ef:52:0d:c5:c3:fe:d8:95:
         29:04:5b:8e:b6:65:53:14:b6:05:6c:59:7e:86:f5:12:c9:c9:
         e8:d7:62:47:9a:b1:61:a7:69:9f:58:5d:5a:af:20:ee:35:ad:
         59:6d:10:9e:18:5d:f5:32:c7:7b:d3:11:4f:0f:b8:4a:ce:37:
         c6:73:b7:f1:70:f9:7b:1b:64:3f:a8:ef:fe:7a:e3:b6:cb:3e:
         5a:aa:d1:c5:80:d6:5c:b3:3a:aa:47:d3:20:d0:b2:90:34:d2:
         21:2a:2c:2d:dd:40:19:7a:5e:f7:63:5b:db:ca:70:3d:4a:a0:
         3a:a6:37:8c:5f:7f:6b:e7:13:8f:88:97:32:2b:d2:5c:f4:72:
         06:95:e4:82:c2:cb:9c:26:0d:bf:81:a7:68:54:cc:2c:16:c3:
         e4:5a:87:b1:54:ff:d4:0c:6f:44:9b:d0:6b:6e:eb:ed:a5:18:
         0a:98:ce:fe:0e:0c:74:8b:1f:05:28:30:99:49:58:c8:0d:bb:
         c4:69:fb:3a:78:64:42:a4:47:85:5a:58:59:0c:8f:22:9e:28:
         c6:7d:08:c8
-----BEGIN CERTIFICATE-----
MIIGxTCCBa2gAwIBAgIUAQ0Mn0MoWEh0iyHJxjoRNSFfGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw
MjNjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZTU1YzA3MWYtYWJlNy00MWVhLWEwOWQtOTU5NDg5ZmM5YmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYYVo4Id6NiiojcstBfTD3kHJtD2PF4BCMP
fYk3toetGJxnRxM8JyBTardvjrEabyFtdBFlmjF1R9u2Xwcs1ZIsyy+JCnwLz1gS
MS1CWYfoJ0Kw7RqxVSW4E1q+bfKLu3bbz5TIrvwlYXvmaZ/AU10sYvLM6hr9L8ob
UN+SPOI8t33WSIR/Zz59ceJdGCQmru6u5AFdKrFiFkP1M+vdr+PrGBA3KjZB2tef
IvXyuV1KXxPo5BcEGI+RE+ei8NcLaJswh/RXr2zeEGB2T5lZZUBvkSjJ/jN8PKOc
3ritE5A6In7LvnADfGOpVsoYlu9vlBrv5KVsOHcMHTaGF5T49QIDAQABo4ID1zCC
A9MwHQYDVR0OBBYEFOcwgoPfwqYN6LRX1URCrpNUw7CnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj
YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvYjViY2NkOTEtNzJhZi0z
ZTcyLTllOTgtZTU3NWJjZmEzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh
ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj
MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy
Y2MxYzAyM2MuY2VyMIGgBggrBgEFBQcBBwEB/wSBkDCBjTCBigQCAAEwgYMDBADA
cPUwDAMEAM2dywMEAM2dzAMEAM2d8AMEAM2d8jAMAwQCzZ30AwQCzZ34AwQBzZ3+
MAsDAwLOtAMEAM60CDAMAwQBzrQKAwQEzrQAAwQBzrQSAwQAzrQZMAwDBADOtBsD
BADOtB4DBALOtCQwDAMEAs60NAMEAM60OAMEAM60PDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaYk3gPLr/
k8Rfl3e7x5tJJtTbbXtRePs/PCRRS81p2a3fOziSGqn2wkjTc7w071INxcP+2JUp
BFuOtmVTFLYFbFl+hvUSycno12JHmrFhp2mfWF1aryDuNa1ZbRCeGF31Msd70xFP
D7hKzjfGc7fxcPl7G2Q/qO/+euO2yz5aqtHFgNZcszqqR9Mg0LKQNNIhKiwt3UAZ
el73Y1vbynA9SqA6pjeMX39r5xOPiJcyK9Jc9HIGleSCwsucJg2/gadoVMwsFsPk
WoexVP/UDG9Em9BrbuvtpRgKmM7+Dgx0ix8FKDCZSVjIDbvEafs6eGRCpEeFWlhZ
DI8inijGfQjI
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:22 2025 by rpki-client