Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa
File:                     b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa (raw, json)
Hash identifier:          nURuy3fosm4foWSUJyle8HxRvAR8xDiW98BuBhv9YMs=
Subject key identifier:   E3:C5:D3:31:B7:4F:CF:79:10:47:65:A3:4B:56:5D:A9:BE:49:A6:BB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553331025FF63A96C89F3CE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        173.188.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:10:25:ff:63:a9:6c:89:f3:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=d5e43966-f5a8-4b18-8922-f8773ec29e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:4a:4c:df:2e:6e:23:b4:c3:59:62:17:c1:
                    ea:f8:ae:91:7a:e8:fc:2a:b2:3f:9e:a1:9e:51:87:
                    b7:c9:23:e4:2e:06:08:f2:e9:c9:fa:74:f0:63:20:
                    f8:09:bd:6a:f8:63:f4:f8:93:82:de:cc:eb:c6:0a:
                    f9:cd:08:30:ec:e5:50:2a:e6:0e:0b:82:ac:4d:b5:
                    fe:16:e3:e0:8f:92:9f:13:99:ef:34:68:01:f8:70:
                    fa:17:08:5d:f2:a4:61:eb:59:e8:1f:c1:11:c0:7b:
                    ed:cd:ea:97:f7:e7:1e:ef:bf:fe:40:ed:3c:d3:81:
                    f1:ba:47:4d:f7:74:59:b4:14:e2:6b:50:b5:e0:cb:
                    77:f9:4f:0b:7a:f0:07:a4:33:70:a7:ec:d1:a4:f0:
                    f5:43:be:b3:d9:d2:61:0b:2f:08:ca:ac:36:58:73:
                    df:95:3b:af:81:c6:5f:36:4d:d1:6b:ec:9d:22:26:
                    b6:52:56:06:fe:fe:0d:61:12:0d:c6:6e:64:d9:32:
                    e6:53:5a:67:37:17:e0:3d:fc:dc:e7:3c:b5:c3:77:
                    4c:19:e9:86:2b:48:d8:45:88:34:d4:b8:cb:2a:41:
                    58:7e:6e:3a:f1:8c:c1:4b:68:dc:2d:84:09:c0:a2:
                    cf:62:58:79:a8:4d:9f:43:74:31:e7:bd:1a:81:66:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:D3:31:B7:4F:CF:79:10:47:65:A3:4B:56:5D:A9:BE:49:A6:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:7f:55:5d:c4:88:7c:d4:1c:ca:32:4d:b4:71:02:19:9d:
         e1:f3:6b:94:29:92:ce:db:85:78:03:67:77:67:34:ea:59:82:
         76:8b:55:69:19:6f:46:e3:fb:09:6d:d8:91:13:54:f3:1d:bd:
         53:a4:ea:83:b9:30:67:07:00:d6:7e:0b:77:5a:9d:22:28:38:
         16:a1:ad:ca:11:98:56:2d:ec:21:9a:d6:6f:4a:6e:29:e4:90:
         5d:8c:af:72:8e:0f:ff:96:8d:09:ff:a1:66:48:cd:31:2d:54:
         62:22:4b:44:e6:fe:4e:b6:75:77:f7:91:ba:60:e9:35:99:7a:
         56:1a:63:a0:12:c9:9e:44:8f:f7:7f:91:e8:bf:47:9b:41:49:
         14:a1:a3:bf:5b:1f:6b:c2:d4:76:0e:18:2b:be:10:b0:28:4b:
         c8:fa:db:90:89:fd:b9:8d:fc:dd:20:d9:39:a8:fa:af:2d:8c:
         96:36:da:e1:cf:df:dc:22:92:1f:37:36:37:61:38:1f:5f:3d:
         7f:8a:3b:ef:11:a0:de:11:e5:29:a7:9c:ab:a9:eb:fc:d5:58:
         ac:04:3f:77:46:8a:3c:6a:1a:70:60:14:54:d8:7b:c6:35:ed:
         c1:ad:fa:b1:6e:e2:e3:86:bf:fb:92:2a:68:7d:e8:75:96:98:
         9b:56:9e:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxAl/2OpbInzzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
ZDVlNDM5NjYtZjVhOC00YjE4LTg5MjItZjg3NzNlYzI5ZTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jlKTN8ubiO0w1liF8Hq+K6Reuj8KrI/nqGe
UYe3ySPkLgYI8unJ+nTwYyD4Cb1q+GP0+JOC3szrxgr5zQgw7OVQKuYOC4KsTbX+
FuPgj5KfE5nvNGgB+HD6Fwhd8qRh61noH8ERwHvtzeqX9+ce77/+QO0804HxukdN
93RZtBTia1C14Mt3+U8LevAHpDNwp+zRpPD1Q76z2dJhCy8Iyqw2WHPflTuvgcZf
Nk3Ra+ydIia2UlYG/v4NYRINxm5k2TLmU1pnNxfgPfzc5zy1w3dMGemGK0jYRYg0
1LjLKkFYfm468YzBS2jcLYQJwKLPYlh5qE2fQ3Qx570agWa9twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPF0zG3T895EEdlo0tWXam+Saa7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRiMThlYzMtZWY3Ni0z
ZDMyLTk4NGUtZjRjN2Y2MDk1ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRNf1VdxIh81BzKMk20cQIZneHza5Qpks7bhXgDZ3dnNOpZgnaLVWkZ
b0bj+wlt2JETVPMdvVOk6oO5MGcHANZ+C3danSIoOBahrcoRmFYt7CGa1m9Kbink
kF2Mr3KOD/+WjQn/oWZIzTEtVGIiS0Tm/k62dXf3kbpg6TWZelYaY6ASyZ5Ej/d/
kei/R5tBSRSho79bH2vC1HYOGCu+ELAoS8j625CJ/bmN/N0g2Tmo+q8tjJY22uHP
39wikh83NjdhOB9fPX+KO+8RoN4R5SmnnKup6/zVWKwEP3dGijxqGnBgFFTYe8Y1
7cGt+rFu4uOGv/uSKmh96HWWmJtWnjQ=
-----END CERTIFICATE-----
Generated at Sat May 18 01:40:39 2024 by rpki-client on console-fra.rpki-client.org