Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
File:                     b405fd56-7238-35e1-ab4d-25811983c86a.roa (raw, json)
Hash identifier:          wlazO3M6Gb4eGkIfT92uSBYdkyYt26V4m+YIroSH8XI=
Subject key identifier:   70:7A:4D:8F:51:85:83:16:66:C8:AF:50:8B:87:53:B8:4E:F9:40:5C
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F432858467424D951906C13A50355A680
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
Signing time:             Sun 07 Jul 2024 01:00:25 +0000
ROA not before:           Sun 07 Jul 2024 01:00:25 +0000
ROA not after:            Sat 05 Oct 2024 01:00:25 +0000
asID:                     393398
IP address blocks:        170.75.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:74:24:d9:51:90:6c:13:a5:03:55:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Jul  7 01:00:25 2024 GMT
            Not After : Oct  5 01:00:25 2024 GMT
        Subject: CN=c9c428fe-09b4-441a-957e-d209cad3c268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:e8:58:26:69:f9:5d:d8:24:3c:62:4c:0d:
                    39:83:fc:4d:42:ce:1a:c3:45:c9:1d:17:9e:5b:f8:
                    38:8f:7f:b7:c1:fe:4f:d2:13:1c:18:51:f7:22:39:
                    36:0e:49:81:2c:35:cd:93:8f:e0:53:41:70:99:a8:
                    2a:53:08:6a:9f:d0:ae:5a:1a:c6:90:bb:c6:b0:78:
                    4c:6d:6a:04:1f:0c:55:6b:50:0b:69:61:30:50:35:
                    c1:20:c8:42:8b:39:a8:5c:19:e1:92:4b:91:84:98:
                    76:b8:b7:4e:c5:4b:b9:18:e2:51:4a:4e:b2:69:32:
                    4f:a4:9f:7b:7a:90:cd:44:b6:9d:0f:a8:7b:cb:b7:
                    7e:69:04:0b:4a:90:19:0e:f5:de:05:8d:07:23:1e:
                    7a:94:96:c4:cb:65:5d:f5:aa:4a:fc:0c:c1:c9:83:
                    91:a0:7d:20:d4:20:f2:50:97:f5:a0:0b:17:78:26:
                    51:84:e8:47:b3:2d:0b:62:60:53:e5:bc:67:34:4f:
                    9c:39:62:fb:3e:a3:d4:98:a9:b4:d4:85:cc:18:bf:
                    5d:eb:e2:56:3c:1c:80:f9:f5:21:26:4a:1a:cb:df:
                    6e:dd:16:d0:74:26:05:33:f5:ba:7a:44:e4:83:23:
                    ca:d0:b1:e3:fd:2f:d8:71:a9:fa:e8:80:5d:0d:04:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7A:4D:8F:51:85:83:16:66:C8:AF:50:8B:87:53:B8:4E:F9:40:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:1a:fd:a5:78:22:ce:75:51:d2:ae:9a:c6:b6:cb:c1:3f:
         10:e7:08:2b:27:6b:dd:58:5b:71:cb:36:2e:84:ef:c9:eb:bd:
         48:74:f2:dd:ed:d9:60:10:27:3d:74:1c:c9:b1:83:ea:8b:4a:
         bb:59:4d:64:60:0d:b6:e9:e6:9d:28:14:29:8d:89:1f:1b:44:
         a1:a5:5f:af:0e:be:17:fa:25:85:1c:b6:64:06:00:d7:c6:af:
         24:0a:1f:c5:46:c3:fa:1d:92:14:19:ec:e3:08:94:57:92:13:
         25:e9:04:f4:9b:38:d7:11:18:23:be:41:02:01:a4:a6:d0:e4:
         c0:1d:bd:8a:c0:c2:ee:38:a5:cb:cf:50:1c:c0:68:17:f4:02:
         5e:05:4a:17:92:8c:9a:65:c6:3a:a4:78:5a:7c:bf:25:d9:a3:
         2e:d6:d8:3e:14:6f:e3:44:9b:61:43:28:0d:3c:d1:29:84:a0:
         a9:fb:4c:ff:21:40:95:6f:3b:d5:21:94:cd:9b:a9:d2:37:cd:
         5b:50:37:bb:77:6f:40:58:65:2d:f4:e1:29:36:50:bc:a7:bf:
         17:3f:dd:56:87:82:02:90:ca:b6:94:14:e6:d8:2c:8c:d3:16:
         ac:18:74:c7:4b:fb:b5:a3:02:0e:c4:ce:bd:45:87:b0:d0:8c:
         cb:9e:ee:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZ0JNlRkGwTpQNVpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJhMGQ4NjItM2QwZS00MTUwLTkwZGUtM2M5NTZjMWI1
MzJkMB4XDTI0MDcwNzAxMDAyNVoXDTI0MTAwNTAxMDAyNVowLzEtMCsGA1UEAxMk
YzljNDI4ZmUtMDliNC00NDFhLTk1N2UtZDIwOWNhZDNjMjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5HoWCZp+V3YJDxiTA05g/xNQs4aw0XJHRee
W/g4j3+3wf5P0hMcGFH3Ijk2DkmBLDXNk4/gU0FwmagqUwhqn9CuWhrGkLvGsHhM
bWoEHwxVa1ALaWEwUDXBIMhCizmoXBnhkkuRhJh2uLdOxUu5GOJRSk6yaTJPpJ97
epDNRLadD6h7y7d+aQQLSpAZDvXeBY0HIx56lJbEy2Vd9apK/AzByYORoH0g1CDy
UJf1oAsXeCZRhOhHsy0LYmBT5bxnNE+cOWL7PqPUmKm01IXMGL9d6+JWPByA+fUh
Jkoay99u3RbQdCYFM/W6ekTkgyPK0LHj/S/Ycan66IBdDQQXIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHB6TY9RhYMWZsivUIuHU7hO+UBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYmEw
ZDg2Mi0zZDBlLTQxNTAtOTBkZS0zYzk1NmMxYjUzMmQvYjQwNWZkNTYtNzIzOC0z
NWUxLWFiNGQtMjU4MTE5ODNjODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGJhMGQ4NjItM2QwZS00MTUwLTkw
ZGUtM2M5NTZjMWI1MzJkL2RiYTBkODYyLTNkMGUtNDE1MC05MGRlLTNjOTU2YzFi
NTMyZC5jcmwwHwYDVR0jBBgwFoAUixpiLfa8wUDAoIW4NK7DDDxt8lswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kYmEwZDg2Mi0zZDBlLTQxNTAtOTBkZS0zYzk1
NmMxYjUzMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqkvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK7Gv2leCLOdVHSrprGtsvBPxDnCCsna91YW3HLNi6E78nrvUh08t3t
2WAQJz10HMmxg+qLSrtZTWRgDbbp5p0oFCmNiR8bRKGlX68Ovhf6JYUctmQGANfG
ryQKH8VGw/odkhQZ7OMIlFeSEyXpBPSbONcRGCO+QQIBpKbQ5MAdvYrAwu44pcvP
UBzAaBf0Al4FSheSjJplxjqkeFp8vyXZoy7W2D4Ub+NEm2FDKA080SmEoKn7TP8h
QJVvO9UhlM2bqdI3zVtQN7t3b0BYZS304Sk2ULynvxc/3VaHggKQyraUFObYLIzT
FqwYdMdL+7WjAg7Ezr1Fh7DQjMue7pE=
-----END CERTIFICATE-----
Generated at Fri Sep 20 18:55:47 2024 by rpki-client on console-fra.rpki-client.org