Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b27820e0-c23f-35d7-86be-712ff0297dd4.roa
File:                     b27820e0-c23f-35d7-86be-712ff0297dd4.roa (raw, json)
Hash identifier:          ypJdOJxM6bV/2C9OX4cIl2oBRAXfD0GPnKNr2WMKKzA=
Subject key identifier:   39:73:4A:6E:78:13:A1:93:48:15:C0:5D:C6:D6:1F:AF:91:16:C5:37
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D39E667A628E04D2B9C2E400
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b27820e0-c23f-35d7-86be-712ff0297dd4.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     11290
IP address blocks:        205.237.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:66:7a:62:8e:04:d2:b9:c2:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=d1096286-0155-4501-80eb-87a62b28dd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:ea:24:96:88:79:e1:16:86:ee:a5:a0:c5:
                    d6:59:75:61:8f:4c:45:36:81:72:af:d6:94:e9:0a:
                    ce:e4:cd:a6:e5:ec:c8:e8:05:a3:12:5c:8b:a2:ab:
                    34:43:67:29:b5:95:8d:ca:8b:c3:37:75:bc:e5:29:
                    56:30:0c:b9:72:c5:ac:80:47:87:d9:27:1d:03:0f:
                    02:07:e0:d0:93:27:fd:f8:7b:c6:8b:7c:bd:03:89:
                    a4:2b:8e:b4:8a:aa:dd:a5:5b:37:3c:47:8c:a5:77:
                    35:43:2a:d7:48:e6:4e:f4:32:1b:20:54:12:6b:53:
                    6e:10:55:d7:1d:46:7d:05:68:45:a0:44:45:ac:1b:
                    e9:bb:9d:e2:d8:a8:27:21:8b:de:5c:20:75:aa:fc:
                    8a:7d:f5:76:47:dc:4a:03:3f:1e:8a:3e:6d:83:71:
                    f6:cd:17:36:79:5b:5b:43:79:01:b0:26:e6:ed:36:
                    6f:eb:aa:c5:5a:f1:af:b4:63:25:f6:74:2d:f4:ca:
                    85:0b:cb:c0:83:d0:fb:c5:70:07:a3:d7:b9:cb:fa:
                    9b:00:05:9f:f7:b3:72:66:02:50:f2:ac:f6:f5:b9:
                    e3:53:22:af:60:f9:82:a4:29:2e:e6:46:73:1c:7b:
                    4a:62:19:9a:e2:40:0d:fd:ae:ec:a4:6d:12:81:ca:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:4A:6E:78:13:A1:93:48:15:C0:5D:C6:D6:1F:AF:91:16:C5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b27820e0-c23f-35d7-86be-712ff0297dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:20:9d:78:93:5b:d4:4f:8d:cd:72:d6:9e:8a:08:d3:8f:99:
         cf:a0:7c:c3:53:bc:63:2a:42:9f:c8:af:0f:9f:71:96:31:2c:
         af:37:b5:5b:89:82:32:06:e0:ff:b8:d1:a7:f9:a4:19:b3:b4:
         ae:58:2a:62:a0:79:09:9c:98:13:d7:6d:21:78:31:3c:35:09:
         90:a9:44:45:59:15:91:d8:47:45:ba:ec:0e:c5:ca:5f:99:fa:
         5f:04:4e:42:7a:0f:2c:0d:d5:75:ab:e2:5d:d6:5e:9b:af:ca:
         4a:bb:11:ef:cc:b9:f0:20:19:87:08:20:10:b2:de:d5:b9:9f:
         09:ef:75:17:a9:3b:cd:96:2a:af:a4:81:93:3c:e4:d9:55:4a:
         1e:2f:b1:0c:df:34:17:d9:c3:6b:91:ee:b8:95:4f:4b:2b:6d:
         98:5c:0f:17:14:99:c3:01:f3:f4:c3:33:36:06:96:32:0d:65:
         88:f9:e3:26:10:9e:c7:44:36:bd:ea:ff:92:6b:b2:27:39:87:
         3e:6d:95:8b:0b:46:7d:80:e3:b6:f2:92:98:71:d2:d0:24:03:
         14:f8:8a:36:c9:4c:55:0b:ec:7a:92:8d:cd:85:3a:d8:79:06:
         23:00:ea:ff:54:6b:9c:52:b0:e0:89:c9:f0:72:c4:0c:a8:d3:
         75:f5:c4:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnmZ6Yo4E0rnC5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
ZDEwOTYyODYtMDE1NS00NTAxLTgwZWItODdhNjJiMjhkZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPfqJJaIeeEWhu6loMXWWXVhj0xFNoFyr9aU
6QrO5M2m5ezI6AWjElyLoqs0Q2cptZWNyovDN3W85SlWMAy5csWsgEeH2ScdAw8C
B+DQkyf9+HvGi3y9A4mkK460iqrdpVs3PEeMpXc1QyrXSOZO9DIbIFQSa1NuEFXX
HUZ9BWhFoERFrBvpu53i2KgnIYveXCB1qvyKffV2R9xKAz8eij5tg3H2zRc2eVtb
Q3kBsCbm7TZv66rFWvGvtGMl9nQt9MqFC8vAg9D7xXAHo9e5y/qbAAWf97NyZgJQ
8qz29bnjUyKvYPmCpCku5kZzHHtKYhma4kAN/a7spG0Sgcpd6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlzSm54E6GTSBXAXcbWH6+RFsU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjI3ODIwZTAtYzIzZi0z
NWQ3LTg2YmUtNzEyZmYwMjk3ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCze0kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFggnXiTW9RPjc1y1p6KCNOPmc+gfMNTvGMqQp/Irw+fcZYxLK83tVuJ
gjIG4P+40af5pBmztK5YKmKgeQmcmBPXbSF4MTw1CZCpREVZFZHYR0W67A7Fyl+Z
+l8ETkJ6DywN1XWr4l3WXpuvykq7Ee/MufAgGYcIIBCy3tW5nwnvdRepO82WKq+k
gZM85NlVSh4vsQzfNBfZw2uR7riVT0srbZhcDxcUmcMB8/TDMzYGljINZYj54yYQ
nsdENr3q/5Jrsic5hz5tlYsLRn2A47bykphx0tAkAxT4ijbJTFUL7HqSjc2FOth5
BiMA6v9Ua5xSsOCJyfByxAyo03X1xGY=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org