Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91e0e106-b8cc-3816-ab04-6fd000c329a3.roa
File:                     91e0e106-b8cc-3816-ab04-6fd000c329a3.roa (raw, json)
Hash identifier:          wISgWitcV28pqtGMnb+w8knnyjH6IDiHGUkHuTZpFMQ=
Subject key identifier:   AB:DC:FE:70:72:3D:93:58:4C:51:14:BD:D2:4A:6F:73:E2:15:A3:18
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715D529D9A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91e0e106-b8cc-3816-ab04-6fd000c329a3.roa
Signing time:             Thu 09 Apr 2020 05:03:47 +0000
ROA not before:           Thu 09 Apr 2020 04:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5d:52:9d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=7b544d6c-1a03-488a-8519-838d635e6593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:dd:0f:f7:9f:eb:5c:41:00:9d:36:70:46:
                    b0:d2:50:0a:09:c3:b8:29:ee:11:59:f8:30:18:94:
                    2a:84:1a:1a:0e:7e:30:63:50:ac:c6:65:60:66:e1:
                    78:93:de:a5:ad:43:b0:c4:30:4a:b1:45:ca:f3:34:
                    da:64:d2:9c:0e:0e:82:c0:bb:05:4e:e1:ed:44:9e:
                    69:0a:7f:22:ae:4b:9d:33:ad:d0:5b:71:3f:d0:cc:
                    b0:a1:f1:f6:a2:39:97:56:eb:97:81:82:57:06:37:
                    f9:1a:e7:93:27:0a:3d:c3:42:a8:b4:54:0a:a7:d7:
                    c1:ff:ee:f0:ac:a5:e7:13:9a:36:bf:9e:ce:78:50:
                    3d:6a:e9:9c:9e:0a:e4:c8:3e:aa:79:6b:e1:56:5f:
                    63:7a:53:f2:92:47:76:39:0b:4c:29:45:07:09:57:
                    3e:7c:83:ce:2d:3b:02:3c:5e:b0:9c:2d:a6:19:2f:
                    da:5e:15:3b:28:1f:ef:f7:63:99:d4:30:63:e4:a3:
                    4a:b8:ab:d4:54:e8:01:7e:de:ee:51:c9:b7:aa:06:
                    c2:a9:eb:e8:e5:e2:76:b5:d7:8f:c0:1f:39:26:09:
                    d7:4b:cf:54:54:a2:4f:58:47:3a:eb:02:66:40:cb:
                    95:6e:49:58:44:7e:42:84:d3:88:2a:d7:f6:2d:a4:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:FE:70:72:3D:93:58:4C:51:14:BD:D2:4A:6F:73:E2:15:A3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91e0e106-b8cc-3816-ab04-6fd000c329a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:67:9e:a9:fa:af:a3:23:14:28:7a:9a:e2:90:43:ac:67:bc:
         38:78:77:87:dc:6d:73:a6:dc:0d:8d:c2:19:11:46:be:4b:b0:
         cf:43:85:28:b7:b7:9e:73:8e:76:a6:5c:6d:15:a3:16:ae:34:
         4a:6e:5a:3e:93:57:75:3a:ef:30:7b:e2:bc:f7:dd:4a:1b:6c:
         54:9e:4e:3a:57:24:06:c6:5f:34:d6:7d:5c:47:10:8d:93:fd:
         29:e7:d6:4b:aa:40:69:9f:b2:fb:30:95:45:ab:51:fb:20:5f:
         b3:d9:5f:90:75:67:c6:8d:3a:d9:1a:d9:06:01:7d:e3:4b:59:
         b0:d7:23:ef:af:6a:8f:ec:93:b6:9b:34:a0:94:b4:89:39:be:
         52:97:1f:00:3d:42:19:f0:42:ef:a3:15:9d:a5:b9:15:61:1a:
         a4:da:91:7d:3b:6d:65:a2:b6:50:0c:38:91:7d:99:b6:3a:01:
         17:9e:c6:24:67:5c:9f:3a:0c:e0:5c:a7:00:b2:ff:ec:78:13:
         de:e7:b8:e9:9f:df:ff:0f:b0:9c:55:16:4a:a7:25:df:ae:87:
         e1:32:4e:44:d2:fa:4a:e4:b0:2c:35:6e:aa:37:51:18:e0:48:
         b2:ec:8a:f3:4a:ee:04:d6:99:38:0b:6e:77:d5:97:aa:6d:e0:
         7c:a8:50:35
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcV1SnZowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0yMDA0MDkwNDAwMDBaFw0yNzAyMTIwNTAwMDBaMC8xLTArBgNVBAMTJDdi
NTQ0ZDZjLTFhMDMtNDg4YS04NTE5LTgzOGQ2MzVlNjU5MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALS63Q/3n+tcQQCdNnBGsNJQCgnDuCnuEVn4MBiU
KoQaGg5+MGNQrMZlYGbheJPepa1DsMQwSrFFyvM02mTSnA4OgsC7BU7h7USeaQp/
Iq5LnTOt0FtxP9DMsKHx9qI5l1brl4GCVwY3+RrnkycKPcNCqLRUCqfXwf/u8Kyl
5xOaNr+eznhQPWrpnJ4K5Mg+qnlr4VZfY3pT8pJHdjkLTClFBwlXPnyDzi07Ajxe
sJwtphkv2l4VOygf7/djmdQwY+SjSrir1FToAX7e7lHJt6oGwqnr6OXidrXXj8Af
OSYJ10vPVFSiT1hHOusCZkDLlW5JWER+QoTTiCrX9i2kW9sCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSr3P5wcj2TWExRFL3SSm9z4hWjGDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzkxZTBlMTA2LWI4Y2MtMzgx
Ni1hYjA0LTZmZDAwMGMzMjlhMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBKxAIDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAUWeeqfqvoyMUKHqa4pBDrGe8OHh3h9xtc6bcDY3CGRFGvkuwz0OFKLe3nnOO
dqZcbRWjFq40Sm5aPpNXdTrvMHvivPfdShtsVJ5OOlckBsZfNNZ9XEcQjZP9KefW
S6pAaZ+y+zCVRatR+yBfs9lfkHVnxo062RrZBgF940tZsNcj769qj+yTtps0oJS0
iTm+UpcfAD1CGfBC76MVnaW5FWEapNqRfTttZaK2UAw4kX2ZtjoBF57GJGdcnzoM
4FynALL/7HgT3ue46Z/f/w+wnFUWSqcl366H4TJORNL6SuSwLDVuqjdRGOBIsuyK
80ruBNaZOAtud9WXqm3gfKhQNQ==
-----END CERTIFICATE-----
Generated at Sun May 12 03:26:02 2024 by rpki-client on console-fra.rpki-client.org