Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa
File:                     6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa (raw, json)
Hash identifier:          yCnJjamndNTIpt/0EaToWkOSI8Wnhb+cDmv2rPA5UoU=
Subject key identifier:   27:4D:9A:E9:F6:74:B7:56:B5:BB:DE:9A:DF:58:25:03:86:9D:3D:3E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584737907DC16E43D3BE05E90480
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     202
IP address blocks:        20.154.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7d:c1:6e:43:d3:be:05:e9:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=2e3e13e6-5f53-4ac4-abf5-74442649cb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bc:32:84:c7:c1:7e:b2:2c:ea:4e:23:93:d1:
                    bc:e1:e4:35:fa:9e:c7:ee:5b:df:b0:60:5a:86:e5:
                    ae:b6:b9:d9:cb:73:cd:dd:87:a3:b9:5a:3a:fe:2f:
                    b2:27:91:03:7e:c4:27:60:d1:1e:24:92:8d:06:d4:
                    71:5f:c1:0a:5c:01:15:41:2e:50:e5:19:fd:c0:f9:
                    70:dd:15:c1:3d:e3:db:22:10:63:65:e8:31:9e:b5:
                    b3:02:cd:c7:32:43:af:38:0c:92:b0:be:e7:cc:14:
                    1f:d6:9d:23:40:23:93:53:d3:23:41:36:53:3d:34:
                    7f:dd:5d:4f:d6:39:86:c5:88:07:04:61:14:e5:7c:
                    95:a9:cf:7d:57:6d:ae:37:78:90:e3:7c:a1:ce:38:
                    16:94:9d:52:f2:21:03:af:86:a2:03:8b:7b:00:a2:
                    bc:07:c9:f6:93:29:de:8d:c6:49:d0:d6:9e:04:b2:
                    03:a4:04:19:40:8d:b2:7f:8c:55:a5:12:1e:0b:b8:
                    ba:8c:39:fd:87:48:53:c0:f6:f5:6d:ab:d5:7b:27:
                    8c:3a:0e:27:d1:a8:f6:0b:22:0b:29:d4:80:3b:65:
                    64:51:6e:59:66:78:ed:ee:b9:f6:96:0d:e6:13:94:
                    1b:5d:83:ec:1e:9e:36:6d:07:90:03:0b:aa:4d:c7:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:9A:E9:F6:74:B7:56:B5:BB:DE:9A:DF:58:25:03:86:9D:3D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.154.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:25:c0:70:36:eb:f2:98:3b:2a:8c:3f:3e:ab:47:a0:c1:f4:
         e5:48:99:34:c2:de:95:1a:84:7b:12:2a:e3:88:ef:16:1f:be:
         e2:99:af:3c:96:a3:6a:ba:aa:32:f6:df:fa:41:32:32:ad:62:
         24:46:9f:01:53:ee:48:93:9b:e8:71:ad:dc:ff:c1:71:b4:d9:
         31:8c:82:98:58:71:04:e7:44:db:42:22:b9:f2:3a:24:3b:cf:
         71:98:64:f0:d1:cd:39:95:31:05:9e:eb:d3:14:80:a9:46:cb:
         2d:87:71:9c:9a:eb:4e:91:e1:81:95:c7:99:bd:63:f0:00:8e:
         fb:1e:64:5a:12:fe:d6:19:93:98:2c:8c:cb:ad:5b:a0:04:fd:
         92:2f:c0:a6:19:bc:09:a4:34:2d:92:18:8e:00:88:9f:24:4d:
         b5:66:5d:89:b3:4f:96:5e:30:1b:d0:c9:f0:a4:ae:9e:e7:c4:
         4b:5e:0b:79:d9:59:c0:11:6c:b4:8e:e3:d5:f9:6a:5e:54:b9:
         b9:86:ce:b8:1b:f0:30:41:36:ef:6a:50:cf:97:2b:e5:18:45:
         23:35:69:de:43:9c:79:00:35:db:0e:20:27:77:73:e3:ac:9b:
         7d:7d:55:44:f6:5b:c8:f0:8b:f5:66:e0:37:2f:ca:28:a1:15:
         5e:31:28:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc3kH3BbkPTvgXpBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MDkxNTAxMDAzMFoXDTI0MTIxNDAyMDAzMFowLzEtMCsGA1UEAxMk
MmUzZTEzZTYtNWY1My00YWM0LWFiZjUtNzQ0NDI2NDljYjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57wyhMfBfrIs6k4jk9G84eQ1+p7H7lvfsGBa
huWutrnZy3PN3YejuVo6/i+yJ5EDfsQnYNEeJJKNBtRxX8EKXAEVQS5Q5Rn9wPlw
3RXBPePbIhBjZegxnrWzAs3HMkOvOAySsL7nzBQf1p0jQCOTU9MjQTZTPTR/3V1P
1jmGxYgHBGEU5XyVqc99V22uN3iQ43yhzjgWlJ1S8iEDr4aiA4t7AKK8B8n2kyne
jcZJ0NaeBLIDpAQZQI2yf4xVpRIeC7i6jDn9h0hTwPb1bavVeyeMOg4n0aj2CyIL
KdSAO2VkUW5ZZnjt7rn2lg3mE5QbXYPsHp42bQeQAwuqTcdd3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdNmun2dLdWtbvemt9YJQOGnT0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjMwNmQ3Y2ItMzQ1Mi0z
OGMzLWFmYjItNzhiM2M2NzFmM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABElwHA26/KYOyqMPz6rR6DB9OVImTTC3pUahHsSKuOI7xYfvuKZrzyW
o2q6qjL23/pBMjKtYiRGnwFT7kiTm+hxrdz/wXG02TGMgphYcQTnRNtCIrnyOiQ7
z3GYZPDRzTmVMQWe69MUgKlGyy2HcZya606R4YGVx5m9Y/AAjvseZFoS/tYZk5gs
jMutW6AE/ZIvwKYZvAmkNC2SGI4AiJ8kTbVmXYmzT5ZeMBvQyfCkrp7nxEteC3nZ
WcARbLSO49X5al5UubmGzrgb8DBBNu9qUM+XK+UYRSM1ad5DnHkANdsOICd3c+Os
m319VUT2W8jwi/Vm4DcvyiihFV4xKAE=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org