Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa
File:                     4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa (raw, json)
Hash identifier:          c6d0TNBKzEyhWTExmPAyUIMrC4I1XHwVRFwEdmFp0HY=
Subject key identifier:   1D:FD:96:DC:19:94:64:6C:D6:A4:F6:97:C5:11:A0:CD:89:2F:42:FD
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D39E66909CD1D8289D6EAA00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     11290
IP address blocks:        205.237.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:66:90:9c:d1:d8:28:9d:6e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=fceb3507-a834-4163-b0d1-73eb61161265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:aa:bd:52:06:00:0b:40:ad:1e:91:86:26:
                    f5:3e:45:5f:52:c4:12:89:7b:5a:71:fb:93:66:d9:
                    6b:ef:e4:72:2a:80:13:ba:bb:95:6b:77:1d:d4:de:
                    7a:8d:4d:77:d7:50:39:2f:89:60:6c:2f:ca:a4:cc:
                    6d:77:16:7e:85:82:c4:3c:5b:6e:a7:ee:34:c5:c5:
                    ee:b8:ca:22:b9:f5:f5:2b:bc:a6:e3:4b:48:90:90:
                    1f:88:33:6e:75:70:1f:7a:6c:c6:86:13:d7:97:ad:
                    5f:07:a6:58:a1:bb:79:c5:ac:a2:71:39:8f:89:07:
                    64:a6:22:a4:d8:ff:64:53:4b:f3:c1:e7:f7:fd:dc:
                    43:40:dc:cb:82:41:82:99:02:7d:44:38:e2:35:97:
                    ec:76:80:b7:12:60:90:67:e5:f7:0a:38:1b:32:24:
                    d4:28:6e:aa:17:c3:90:24:7b:84:12:4d:6f:d5:e7:
                    c6:89:15:5e:9e:49:f6:b1:6c:a7:30:ad:04:fa:89:
                    32:13:5b:6f:f7:db:63:02:db:7a:2b:de:7e:8c:9d:
                    ab:45:df:6d:f6:eb:56:be:53:e9:ba:ce:b2:76:b1:
                    f3:89:d9:7b:fd:38:bb:06:cb:5a:c4:67:48:23:95:
                    6d:77:a9:6e:21:02:38:75:e4:32:eb:48:fc:cb:c9:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:96:DC:19:94:64:6C:D6:A4:F6:97:C5:11:A0:CD:89:2F:42:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:ea:33:45:a2:9b:18:90:9e:cb:20:2f:13:56:37:08:ab:
         9c:ea:da:00:2c:b8:62:76:15:8c:e8:ae:9f:6b:ce:43:d9:12:
         0b:94:ce:b5:de:30:91:d2:f3:35:ea:e3:f8:d1:59:a1:e6:1f:
         10:09:af:35:53:a3:3b:13:ee:e9:90:ad:d3:fe:a4:56:92:5a:
         fa:8f:3f:e4:30:66:22:22:b1:05:52:40:43:a4:c5:9b:9e:5e:
         c4:ba:f2:36:1b:32:e3:8b:79:6e:62:f0:81:97:c5:38:1d:41:
         1a:7a:af:18:38:63:d4:76:1a:3a:5d:9a:cd:4e:91:bf:00:49:
         d3:0b:ce:13:03:b6:2d:ea:3c:de:eb:79:1f:f3:f2:37:cd:02:
         08:57:62:38:4e:c3:3d:01:3c:b4:06:b6:10:e7:21:fa:a1:3d:
         c7:58:35:64:39:7c:85:b6:8b:30:ea:fe:4c:59:4c:ee:02:cb:
         88:68:06:42:f2:53:67:d6:33:f8:3d:b4:46:c6:bb:0c:78:06:
         4b:68:82:bb:b6:b8:4a:9d:48:c9:17:99:20:87:18:36:1f:03:
         a8:19:84:31:85:21:81:e8:57:f4:41:a0:a8:bd:dc:c0:f9:5e:
         ee:b4:32:ed:8a:26:3b:31:ef:3d:aa:bc:e6:5a:a0:e2:c7:32:
         c2:34:65:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnmaQnNHYKJ1uqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
ZmNlYjM1MDctYTgzNC00MTYzLWIwZDEtNzNlYjYxMTYxMjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9eqvVIGAAtArR6Rhib1PkVfUsQSiXtacfuT
Ztlr7+RyKoATuruVa3cd1N56jU1311A5L4lgbC/KpMxtdxZ+hYLEPFtup+40xcXu
uMoiufX1K7ym40tIkJAfiDNudXAfemzGhhPXl61fB6ZYobt5xayicTmPiQdkpiKk
2P9kU0vzwef3/dxDQNzLgkGCmQJ9RDjiNZfsdoC3EmCQZ+X3CjgbMiTUKG6qF8OQ
JHuEEk1v1efGiRVenkn2sWynMK0E+okyE1tv99tjAtt6K95+jJ2rRd9t9utWvlPp
us6ydrHzidl7/Ti7BstaxGdII5Vtd6luIQI4deQy60j8y8k3nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB39ltwZlGRs1qT2l8URoM2JL0L9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGIwOTQ4ZmQtODQ0Yy0z
ZmVhLThhNDQtYWY2YmNjMTk0MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAze0jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACA46jNFopsYkJ7LIC8TVjcIq5zq2gAsuGJ2FYzorp9rzkPZEguUzrXe
MJHS8zXq4/jRWaHmHxAJrzVTozsT7umQrdP+pFaSWvqPP+QwZiIisQVSQEOkxZue
XsS68jYbMuOLeW5i8IGXxTgdQRp6rxg4Y9R2Gjpdms1Okb8ASdMLzhMDti3qPN7r
eR/z8jfNAghXYjhOwz0BPLQGthDnIfqhPcdYNWQ5fIW2izDq/kxZTO4Cy4hoBkLy
U2fWM/g9tEbGuwx4Bktogru2uEqdSMkXmSCHGDYfA6gZhDGFIYHoV/RBoKi93MD5
Xu60Mu2KJjsx7z2qvOZaoOLHMsI0ZSE=
-----END CERTIFICATE-----
Generated at Mon May 20 01:48:56 2024 by rpki-client on console-fra.rpki-client.org