Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa
File:                     2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa (raw, json)
Hash identifier:          FHQcjzUtrzJgoGe6IC3H3WHy16JkzhvEbP9b2hgePtw=
Subject key identifier:   51:0F:FF:B8:74:17:C5:C0:38:E1:DB:B9:36:0C:45:C1:C6:67:DB:35
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F432858457D1337BF7FBCE203BED07040
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     19257
IP address blocks:        107.150.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:37:bf:7f:bc:e2:03:be:d0:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=c3a8a6af-d9aa-42f8-97ad-123c35ac6e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:c4:69:cd:fb:2a:9c:f2:a7:2d:af:58:97:
                    15:68:6e:b4:e3:91:db:48:01:aa:0f:1d:d0:94:0a:
                    53:84:c7:57:b5:01:27:1e:35:2b:f3:2b:68:a7:d2:
                    ff:50:e3:cc:7e:f1:e3:11:33:43:49:86:57:2d:f9:
                    c2:1f:d9:e6:37:61:5a:8e:16:6f:e8:13:a5:84:68:
                    76:74:7c:d5:e2:fc:ed:28:68:b7:e6:04:ec:1d:c9:
                    ad:d5:d4:a8:a4:3e:b6:99:da:56:b2:93:c8:d2:3a:
                    db:55:43:45:94:b7:f8:93:7c:51:3d:a6:37:68:e1:
                    a9:91:05:7e:83:b1:71:65:e5:0d:57:b4:ca:48:29:
                    76:b4:c0:18:70:1d:78:06:8a:9d:57:a1:2b:bb:8c:
                    07:31:29:1d:d1:72:3c:34:9e:8e:a0:5e:bc:0e:66:
                    80:e6:b6:6e:14:a4:8a:48:10:98:e0:6d:4e:33:83:
                    b5:57:c5:38:96:a2:01:33:c6:3e:ce:b2:94:d7:bc:
                    22:27:16:ea:5b:6a:12:79:2d:eb:9a:38:19:56:cc:
                    78:c0:fd:d3:82:8c:e4:f5:4e:73:ad:20:fb:c2:1f:
                    64:ae:d2:cf:fe:d8:60:62:0e:44:f9:71:74:01:2e:
                    d8:56:9b:58:4c:03:4f:20:15:14:33:80:40:93:53:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:FF:B8:74:17:C5:C0:38:E1:DB:B9:36:0C:45:C1:C6:67:DB:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2ce96f68-8a9c-3713-b2ba-529c3fdcb5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:a1:cf:51:bf:c2:b8:fb:45:b7:73:93:f6:5a:cf:d1:af:
         89:67:8a:b7:b8:f1:91:23:84:ce:a8:bf:f8:85:22:bc:8e:fe:
         7d:b3:10:28:c7:1d:f5:fd:f4:7a:17:68:00:6c:10:96:7c:53:
         e3:56:6c:0f:41:9f:02:16:bf:52:73:1c:5b:2c:06:15:21:b8:
         96:76:75:9b:3c:90:3e:db:dc:fe:cf:72:72:c4:48:ab:cd:b7:
         fa:81:c1:4f:6f:1e:b3:3f:ef:f5:92:c5:cc:9f:ea:1f:e8:77:
         a6:40:bd:2f:e8:8e:4c:ba:4c:71:1e:60:cc:00:93:45:fe:1e:
         c3:b8:56:7e:c8:5b:9b:28:96:ea:92:11:4e:32:30:8a:35:d5:
         11:c5:e7:09:b7:76:00:41:ad:68:89:0c:07:99:15:73:a5:a2:
         27:4f:7e:40:58:fb:91:da:d0:d3:92:a4:39:c8:31:24:2a:fd:
         05:bc:df:bc:83:4a:cc:90:6c:9a:65:a2:0f:d3:cd:32:81:0e:
         f3:d4:57:66:ad:fb:3b:a3:d1:d0:80:34:43:d8:3d:61:e7:38:
         a5:86:82:f4:36:9a:2b:7b:7d:4d:d3:a1:92:d3:41:55:aa:dd:
         c9:76:0c:6d:81:8d:7c:9d:3e:a9:94:b2:c9:59:68:cf:ff:ea:
         39:a0:c4:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9Eze/f7ziA77QcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
YzNhOGE2YWYtZDlhYS00MmY4LTk3YWQtMTIzYzM1YWM2ZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/Eac37Kpzypy2vWJcVaG6045HbSAGqDx3Q
lApThMdXtQEnHjUr8ytop9L/UOPMfvHjETNDSYZXLfnCH9nmN2FajhZv6BOlhGh2
dHzV4vztKGi35gTsHcmt1dSopD62mdpWspPI0jrbVUNFlLf4k3xRPaY3aOGpkQV+
g7FxZeUNV7TKSCl2tMAYcB14BoqdV6Eru4wHMSkd0XI8NJ6OoF68DmaA5rZuFKSK
SBCY4G1OM4O1V8U4lqIBM8Y+zrKU17wiJxbqW2oSeS3rmjgZVsx4wP3Tgozk9U5z
rSD7wh9krtLP/thgYg5E+XF0AS7YVptYTANPIBUUM4BAk1M9AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEP/7h0F8XAOOHbuTYMRcHGZ9s1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMmNlOTZmNjgtOGE5Yy0z
NzEzLWIyYmEtNTI5YzNmZGNiNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5a0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfWoc9Rv8K4+0W3c5P2Ws/Rr4lnire48ZEjhM6ov/iFIryO/n2zECjH
HfX99HoXaABsEJZ8U+NWbA9BnwIWv1JzHFssBhUhuJZ2dZs8kD7b3P7PcnLESKvN
t/qBwU9vHrM/7/WSxcyf6h/od6ZAvS/ojky6THEeYMwAk0X+HsO4Vn7IW5soluqS
EU4yMIo11RHF5wm3dgBBrWiJDAeZFXOloidPfkBY+5Ha0NOSpDnIMSQq/QW837yD
SsyQbJplog/TzTKBDvPUV2at+zuj0dCANEPYPWHnOKWGgvQ2mit7fU3ToZLTQVWq
3cl2DG2BjXydPqmUsslZaM//6jmgxBo=
-----END CERTIFICATE-----
Generated at Thu May 16 02:04:36 2024 by rpki-client on console-ams.rpki-client.org