Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3b7ad7fa-e5a6-3bae-815f-2ed3088b2860.roa
File:                     3b7ad7fa-e5a6-3bae-815f-2ed3088b2860.roa (raw, json)
Hash identifier:          AL87Fg37gbhRd4imHmOooVkbCq+LtE1zObD9IODErgQ=
Subject key identifier:   49:81:2A:AA:5C:29:57:ED:00:F9:2E:DA:F3:C5:BB:70:88:90:4A:FC
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845ADEE057216C6379A91DE3D00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3b7ad7fa-e5a6-3bae-815f-2ed3088b2860.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     26744
IP address blocks:        206.180.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:05:72:16:c6:37:9a:91:de:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=a8fe74f1-d6cd-4c56-9a83-8732e866633e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:2e:43:3d:97:86:c4:e4:f1:a3:7b:c5:7c:
                    55:17:43:15:c8:ea:ae:20:b3:f0:08:c7:54:6e:8b:
                    5a:18:dd:e6:72:9b:ec:4f:fe:2b:2c:80:94:a3:f0:
                    78:22:fc:14:af:f5:97:69:eb:9e:39:cf:d9:f7:2a:
                    d0:67:ae:aa:51:ec:f4:34:54:93:17:49:0e:a1:8c:
                    ef:ea:9d:86:9c:ea:a1:3f:d8:7b:d2:09:04:31:8d:
                    e3:47:0a:13:47:c3:89:06:62:33:98:44:ce:82:3c:
                    1a:de:f5:d4:ee:7f:81:f6:a9:f1:e5:cc:ae:7b:bf:
                    08:fd:0b:8c:6a:1f:f5:ba:b7:3b:7c:dc:c9:27:bf:
                    13:41:b1:7e:85:8f:5d:d7:58:4e:ee:49:62:df:6a:
                    32:90:db:f9:d5:ea:cd:67:46:17:5c:5a:b7:b3:45:
                    78:75:05:53:05:d1:ce:fd:36:cc:59:d1:bb:54:98:
                    04:79:a6:c5:9b:ca:6b:d2:fb:e7:bb:ad:89:0b:eb:
                    49:50:23:ee:2f:82:c5:56:28:c8:b8:93:c0:18:48:
                    fd:e8:4d:95:a3:0c:dd:ac:97:86:4e:0d:16:cf:aa:
                    73:7f:62:ed:7b:d6:dd:f5:98:84:49:ab:4a:44:bc:
                    75:af:d3:74:90:88:fc:58:b4:1c:9e:13:95:4c:da:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:81:2A:AA:5C:29:57:ED:00:F9:2E:DA:F3:C5:BB:70:88:90:4A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3b7ad7fa-e5a6-3bae-815f-2ed3088b2860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:73:20:3e:47:ed:15:46:b7:01:78:1b:28:2d:a8:d8:a1:ee:
         4b:df:1d:44:6b:1a:b3:ec:d1:33:39:9c:da:79:47:2a:48:5c:
         71:5b:f4:e2:7e:22:a6:a4:88:1b:ea:94:54:17:9e:0b:37:9b:
         db:1b:d0:46:16:26:41:05:7b:20:3c:bf:90:39:c7:40:9c:f0:
         86:e8:4e:2d:68:0a:10:bd:ed:66:ce:6d:44:f8:93:a9:37:cb:
         63:d2:63:84:61:bc:e8:57:6f:25:9a:bc:d6:02:d7:8d:40:c1:
         eb:3e:9e:bd:be:b0:e1:7d:72:28:b6:9e:46:2b:36:aa:ec:1f:
         f5:73:1b:87:b8:51:e9:f8:fd:02:d5:6b:ec:98:e7:7a:c7:de:
         69:d4:7f:13:78:dc:15:5c:ac:94:b5:2c:d8:b8:97:01:c8:fa:
         49:28:0a:53:57:1d:7e:0c:9c:4a:24:c7:b7:91:1c:df:a5:c1:
         cc:5c:dc:a6:2a:24:c3:d4:e6:53:6c:72:31:90:58:6f:34:55:
         ce:c0:65:c4:c2:c3:95:c2:a1:8f:ed:1f:f6:30:97:a5:4d:04:
         47:11:0e:62:4f:f4:93:35:f3:e5:40:48:65:be:83:32:6e:22:
         9c:f2:e0:d5:c9:c9:ca:18:92:e1:94:9b:b2:fb:26:ed:be:a0:
         07:fb:5d:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7gVyFsY3mpHePQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
YThmZTc0ZjEtZDZjZC00YzU2LTlhODMtODczMmU4NjY2MzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY0uQz2XhsTk8aN7xXxVF0MVyOquILPwCMdU
botaGN3mcpvsT/4rLICUo/B4IvwUr/WXaeueOc/Z9yrQZ66qUez0NFSTF0kOoYzv
6p2GnOqhP9h70gkEMY3jRwoTR8OJBmIzmETOgjwa3vXU7n+B9qnx5cyue78I/QuM
ah/1urc7fNzJJ78TQbF+hY9d11hO7kli32oykNv51erNZ0YXXFq3s0V4dQVTBdHO
/TbMWdG7VJgEeabFm8pr0vvnu62JC+tJUCPuL4LFVijIuJPAGEj96E2VowzdrJeG
Tg0Wz6pzf2Lte9bd9ZiESatKRLx1r9N0kIj8WLQcnhOVTNooqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmBKqpcKVftAPku2vPFu3CIkEr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvM2I3YWQ3ZmEtZTVhNi0z
YmFlLTgxNWYtMmVkMzA4OGIyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzrSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJzID5H7RVGtwF4GygtqNih7kvfHURrGrPs0TM5nNp5RypIXHFb9OJ+
IqakiBvqlFQXngs3m9sb0EYWJkEFeyA8v5A5x0Cc8IboTi1oChC97WbObUT4k6k3
y2PSY4RhvOhXbyWavNYC141Awes+nr2+sOF9cii2nkYrNqrsH/VzG4e4Uen4/QLV
a+yY53rH3mnUfxN43BVcrJS1LNi4lwHI+kkoClNXHX4MnEokx7eRHN+lwcxc3KYq
JMPU5lNscjGQWG80Vc7AZcTCw5XCoY/tH/Ywl6VNBEcRDmJP9JM18+VASGW+gzJu
Ipzy4NXJycoYkuGUm7L7Ju2+oAf7XQY=
-----END CERTIFICATE-----
Generated at Sun May 19 17:19:17 2024 by rpki-client on console-ams.rpki-client.org