Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa
File:                     cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa (raw, json)
Hash identifier:          w+mz0Qf+/bNF2NVxpxQTDsFnfA8Rn4kPO6iw8N3Jqd4=
Subject key identifier:   06:29:2F:EF:5E:BC:2D:0A:CB:67:35:08:04:2C:61:0A:8F:E6:27:15
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858459A6337C005F897AF0D0A6B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     22110
IP address blocks:        64.184.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:37:c0:05:f8:97:af:0d:0a:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=39a9719a-13aa-4f14-9c67-de73e150038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:b4:20:b1:5f:45:ff:5c:a6:67:05:d9:ec:
                    af:ee:dc:a2:2e:08:80:f7:7f:4f:4f:e5:41:53:16:
                    1d:6d:64:28:3e:ae:29:1c:79:b2:12:e4:7e:11:54:
                    e5:58:cf:fe:02:48:e1:4d:6e:1c:c1:aa:66:6a:94:
                    cf:8a:5c:ac:a9:1b:ec:83:46:2e:f1:b5:8e:b0:fe:
                    33:3f:3c:8b:c1:b8:23:64:f3:36:a6:2f:6f:56:12:
                    36:fc:37:b0:6d:3f:d4:c8:61:c2:7e:61:24:88:48:
                    71:7d:a1:86:cd:59:80:ae:e5:d9:f1:11:45:48:b3:
                    32:c0:d3:b8:46:a5:f6:f6:ad:5e:19:de:41:59:3e:
                    3e:4f:02:4e:da:41:08:51:a1:aa:cc:e5:b5:6d:28:
                    02:17:9b:04:51:00:a4:63:bb:87:56:44:92:7b:bc:
                    8b:fb:4b:1b:b6:7a:c3:35:00:b6:14:0d:59:ef:eb:
                    1e:c7:e9:1d:bb:d4:f7:cc:a7:e3:01:bf:dd:0b:99:
                    a7:bb:60:86:6e:8b:b9:73:d4:ee:19:30:a9:75:d6:
                    2d:d6:c8:3a:96:0d:b0:4f:55:55:af:11:c5:42:3c:
                    4d:e8:09:33:b4:99:67:67:d3:ee:78:d1:3b:94:2e:
                    f8:ee:a2:b7:1b:d1:54:d2:5c:3c:f3:61:da:c1:42:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:29:2F:EF:5E:BC:2D:0A:CB:67:35:08:04:2C:61:0A:8F:E6:27:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:95:d1:51:9d:9f:5c:3d:e7:d6:a4:58:d0:db:8b:11:cf:ac:
         9a:b0:df:35:c7:c8:23:1d:47:26:e9:59:a7:67:9c:57:9b:3a:
         9a:cc:67:18:6b:a6:e8:59:18:f6:13:74:4d:88:7a:63:7d:d3:
         10:93:36:ee:ce:47:a9:02:a9:f5:96:0c:40:e4:08:0d:e8:cf:
         37:d4:5f:69:4b:87:22:0d:64:b5:da:83:5c:b8:8b:f9:1b:5c:
         10:78:46:ff:6d:21:53:d4:99:4d:3e:87:2a:97:40:5e:08:ee:
         e4:27:1c:41:03:27:e6:27:70:4f:63:f2:4a:7c:79:cb:11:e9:
         72:27:67:da:51:73:a1:2b:52:0e:09:b9:49:9f:37:dc:a6:3a:
         86:6f:c6:f9:cb:68:9d:98:52:29:ee:23:24:3a:c5:d7:fa:93:
         b9:66:f5:fb:2e:c1:85:91:35:62:16:2c:c7:30:3e:1b:31:50:
         95:0b:96:9c:75:91:13:1b:7b:04:c8:99:1b:54:51:e8:09:10:
         43:6f:f1:2a:3d:82:24:35:65:57:45:1e:98:73:ad:af:fa:b6:
         10:8a:54:29:82:97:38:e7:4d:f3:00:cd:dc:7e:16:94:99:9e:
         f6:e0:f5:d3:3d:f5:6d:53:46:c6:c6:c1:a9:eb:77:a2:a9:d2:
         d2:2e:e6:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaYzfABfiXrw0Ka4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk
MzlhOTcxOWEtMTNhYS00ZjE0LTljNjctZGU3M2UxNTAwMzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG60ILFfRf9cpmcF2eyv7tyiLgiA939PT+VB
UxYdbWQoPq4pHHmyEuR+EVTlWM/+AkjhTW4cwapmapTPilysqRvsg0Yu8bWOsP4z
PzyLwbgjZPM2pi9vVhI2/DewbT/UyGHCfmEkiEhxfaGGzVmAruXZ8RFFSLMywNO4
RqX29q1eGd5BWT4+TwJO2kEIUaGqzOW1bSgCF5sEUQCkY7uHVkSSe7yL+0sbtnrD
NQC2FA1Z7+sex+kdu9T3zKfjAb/dC5mnu2CGbou5c9TuGTCpddYt1sg6lg2wT1VV
rxHFQjxN6AkztJlnZ9PueNE7lC747qK3G9FU0lw882HawUL/ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYpL+9evC0Ky2c1CAQsYQqP5icVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvY2JmOTRlNGMtYmY4NS0z
Y2ZlLTgxMTItZmEzNzJkZjFhZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGV0VGdn1w959akWNDbixHPrJqw3zXHyCMdRybpWadnnFebOprMZxhr
puhZGPYTdE2IemN90xCTNu7OR6kCqfWWDEDkCA3ozzfUX2lLhyINZLXag1y4i/kb
XBB4Rv9tIVPUmU0+hyqXQF4I7uQnHEEDJ+YncE9j8kp8ecsR6XInZ9pRc6ErUg4J
uUmfN9ymOoZvxvnLaJ2YUinuIyQ6xdf6k7lm9fsuwYWRNWIWLMcwPhsxUJULlpx1
kRMbewTImRtUUegJEENv8So9giQ1ZVdFHphzra/6thCKVCmClzjnTfMAzdx+FpSZ
nvbg9dM99W1TRsbGwanrd6Kp0tIu5jg=
-----END CERTIFICATE-----
Generated at Mon May 20 17:23:35 2024 by rpki-client on console-fra.rpki-client.org