Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa
File:                     2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json)
Hash identifier:          stYNdyk/LdZ7rzcx3zK8pPG9Et3rEiI5M4NnAqRMEpo=
Subject key identifier:   44:40:6B:54:9F:AA:D3:32:D9:56:5C:DC:23:A3:EC:8C:9D:20:28:17
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F43285845DFD68738AE4103C3080FE960
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa
Signing time:             Tue 14 May 2024 22:03:35 +0000
ROA not before:           Tue 14 May 2024 22:03:35 +0000
ROA not after:            Mon 12 Aug 2024 22:03:35 +0000
asID:                     53486
IP address blocks:        209.35.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:df:d6:87:38:ae:41:03:c3:08:0f:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: May 14 22:03:35 2024 GMT
            Not After : Aug 12 22:03:35 2024 GMT
        Subject: CN=697e52ff-41db-4d5d-bc73-dd46b44063c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:c3:e9:04:58:8a:57:71:3a:aa:bb:5d:f3:
                    45:4a:57:cd:bd:94:88:fd:fd:25:fc:59:a7:4e:07:
                    d4:36:40:3a:eb:5e:74:f2:11:3f:14:a3:f1:1d:8a:
                    ec:92:9c:d7:a5:f0:40:f9:21:98:38:b1:25:c2:99:
                    55:99:0e:49:23:2d:af:71:64:ba:56:29:7e:de:40:
                    c8:20:ad:3b:e5:40:36:f0:bd:82:ca:f9:93:c8:9e:
                    4a:79:78:11:e2:8c:fe:64:54:e7:15:13:8b:03:c0:
                    a4:8d:c1:07:a1:7f:3d:24:ee:bf:fd:df:95:50:c0:
                    d2:fd:ba:27:d5:26:6e:d8:c5:58:6a:56:de:30:6b:
                    93:18:ff:68:47:be:87:8e:94:2b:ce:40:f7:cc:40:
                    7c:00:8a:b4:e4:af:78:18:95:9a:80:e8:29:21:ad:
                    a3:e9:dd:04:8c:5e:b7:f3:ec:13:fb:31:63:d1:9f:
                    ff:b5:f1:56:5e:65:9e:8e:7b:a3:ff:d8:99:85:0e:
                    d5:2d:39:8c:0a:94:0f:fb:a1:10:5a:0f:32:14:3a:
                    c7:bb:49:e2:d6:c1:ef:d4:7a:ef:be:f7:46:4a:10:
                    05:b6:89:f0:c0:5e:6e:a2:96:e7:5f:20:f9:10:b2:
                    1c:5c:4c:45:94:d1:99:05:99:8d:34:eb:0f:ab:da:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:6B:54:9F:AA:D3:32:D9:56:5C:DC:23:A3:EC:8C:9D:20:28:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:2a:66:ac:98:16:a4:5b:5e:56:43:7e:a7:83:0f:3d:a9:
         65:58:45:13:99:c8:1f:7f:20:b6:a0:77:c7:d5:fc:f5:2a:e1:
         fa:a1:a4:97:59:2c:1b:47:5a:ac:1d:ef:0d:7a:45:1c:e3:bc:
         6e:0a:5b:91:40:25:cf:2c:0a:6e:fe:e1:a5:7c:79:7f:92:3b:
         de:1f:40:dd:b2:96:43:f0:32:3c:ca:eb:94:e5:a3:9f:28:27:
         ea:9d:97:cb:42:80:bf:94:ae:24:55:18:85:f9:ef:06:1b:be:
         fb:3d:f2:12:16:9f:1a:90:10:76:06:1d:90:e9:63:f1:c2:b0:
         53:9b:b4:dd:5b:27:37:34:5c:07:2f:8f:df:00:86:9f:8b:b2:
         6e:65:d2:06:f5:be:db:68:50:83:e2:8f:42:93:18:08:23:01:
         5d:96:76:14:49:a6:60:30:b7:59:d9:e2:ec:83:fc:2a:66:1d:
         db:67:d1:a7:dd:4a:be:d1:be:9a:79:c8:d1:65:8e:0f:34:e4:
         f0:07:a9:0d:1e:ed:db:5c:b0:cc:84:aa:27:eb:75:1f:d0:dd:
         4b:d5:0f:46:8f:bd:b8:ed:a6:90:b1:d1:e7:40:32:cc:63:e6:
         d9:00:96:ab:25:50:28:17:67:ca:12:f5:23:39:0c:db:f7:d8:
         78:3d:34:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXf1oc4rkEDwwgP6WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4
NzU2MB4XDTI0MDUxNDIyMDMzNVoXDTI0MDgxMjIyMDMzNVowLzEtMCsGA1UEAxMk
Njk3ZTUyZmYtNDFkYi00ZDVkLWJjNzMtZGQ0NmI0NDA2M2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGPD6QRYildxOqq7XfNFSlfNvZSI/f0l/Fmn
TgfUNkA661508hE/FKPxHYrskpzXpfBA+SGYOLElwplVmQ5JIy2vcWS6Vil+3kDI
IK075UA28L2CyvmTyJ5KeXgR4oz+ZFTnFROLA8CkjcEHoX89JO6//d+VUMDS/bon
1SZu2MVYalbeMGuTGP9oR76HjpQrzkD3zEB8AIq05K94GJWagOgpIa2j6d0EjF63
8+wT+zFj0Z//tfFWXmWejnuj/9iZhQ7VLTmMCpQP+6EQWg8yFDrHu0ni1sHv1Hrv
vvdGShAFtonwwF5uopbnXyD5ELIcXExFlNGZBZmNNOsPq9qlqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERAa1SfqtMy2VZc3COj7IydICgXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi
OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvMmI5M2QyYTktODc3OS0z
ZDEwLTllNmYtZGRiNzAyZGM4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4
ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4
ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2
YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG29KmasmBakW15WQ36ngw89qWVYRROZyB9/ILagd8fV/PUq4fqhpJdZ
LBtHWqwd7w16RRzjvG4KW5FAJc8sCm7+4aV8eX+SO94fQN2ylkPwMjzK65Tlo58o
J+qdl8tCgL+UriRVGIX57wYbvvs98hIWnxqQEHYGHZDpY/HCsFObtN1bJzc0XAcv
j98Ahp+Lsm5l0gb1vttoUIPij0KTGAgjAV2WdhRJpmAwt1nZ4uyD/CpmHdtn0afd
Sr7Rvpp5yNFljg805PAHqQ0e7dtcsMyEqifrdR/Q3UvVD0aPvbjtppCx0edAMsxj
5tkAlqslUCgXZ8oS9SM5DNv32Hg9NDA=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org