Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ae922a28-a193-34eb-a07b-dc2aeea50255.roa
File:                     ae922a28-a193-34eb-a07b-dc2aeea50255.roa (raw, json)
Hash identifier:          KR4LX2A3xYCplWDtqNNle/Q/Y0/JJYhahAq+0e3JoCc=
Subject key identifier:   83:54:77:BF:D3:8C:09:0B:93:CB:E7:80:7F:B9:28:C6:EA:E7:01:47
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845ADEE05B06F1762691EEBACC0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ae922a28-a193-34eb-a07b-dc2aeea50255.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     393740
IP address blocks:        206.180.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:05:b0:6f:17:62:69:1e:eb:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=90e8ba57-797f-45ef-b477-9c51104810f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d2:c6:6f:d6:dd:96:6b:cb:80:7b:39:aa:5d:
                    50:85:82:5d:3f:ee:d6:ff:18:4f:10:fd:0f:ba:8b:
                    1b:31:c3:47:e3:b3:55:28:90:4a:a0:fe:21:88:73:
                    b6:90:01:68:12:94:8e:a6:12:8b:d4:fe:24:d5:dc:
                    1b:a4:11:83:4d:b6:14:5d:fe:fc:b7:8f:2e:54:81:
                    08:ee:11:33:03:39:33:9a:5e:36:f2:ca:51:be:ca:
                    33:64:ef:a7:7d:91:9d:5d:e8:de:74:2c:7d:3c:df:
                    34:50:92:ff:10:02:e1:90:76:f2:56:a5:9d:5a:60:
                    02:bd:dc:04:c8:ed:ce:03:1c:bb:1e:04:a2:9f:70:
                    ea:23:55:1f:d1:f3:30:86:bc:41:bf:fb:a4:30:11:
                    1d:28:18:aa:e2:1c:2c:39:f6:c1:13:10:3d:3e:d1:
                    d7:4d:9d:bc:b1:85:bf:ac:99:cd:43:2c:8e:a6:36:
                    8d:56:82:ca:ba:0d:97:14:a8:3a:44:c0:f8:f4:8a:
                    f8:ff:0e:51:ca:1c:f2:30:a2:96:59:c9:88:10:dc:
                    a4:23:56:43:7d:b1:c9:82:9e:0d:7a:f6:c4:89:18:
                    6c:f0:1a:d8:b6:57:b9:07:1b:49:d9:00:76:8c:ec:
                    5b:34:6c:bd:b2:15:15:82:09:d3:df:28:3b:71:bd:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:77:BF:D3:8C:09:0B:93:CB:E7:80:7F:B9:28:C6:EA:E7:01:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ae922a28-a193-34eb-a07b-dc2aeea50255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:e4:2b:57:1f:d0:f5:36:33:72:90:8d:8f:19:eb:ac:01:
         71:d6:3b:82:49:2a:b1:1b:0a:6b:3a:f1:48:6c:94:fd:1b:31:
         6f:08:9a:f1:1e:2b:fe:13:5a:fa:22:b0:e6:31:08:88:4d:be:
         9d:ec:9e:85:30:6e:f5:08:16:55:0f:da:96:fe:ef:1a:51:20:
         61:11:e9:1d:87:0e:f9:3d:06:9c:d6:04:c5:bf:d6:48:0a:5d:
         d0:e4:d2:1e:43:12:a6:16:15:58:65:f0:fb:aa:a5:ff:df:bf:
         0e:02:55:2b:36:23:27:d8:6e:6d:90:fb:9e:2a:b8:e3:7e:5d:
         6c:bd:5b:c6:ce:f4:e8:75:6b:94:f2:c6:35:ed:49:66:22:95:
         e5:b9:3b:2a:f5:02:f2:1a:99:cd:ae:bd:0d:1b:46:2d:6b:16:
         08:a7:a4:2d:d2:5a:e0:e8:84:b0:3c:c7:2c:e4:44:8a:5f:2e:
         aa:bc:f1:3a:5b:9c:d5:95:c2:7a:32:65:6e:c1:3a:a4:d9:90:
         ab:a0:4a:19:79:9a:13:30:ae:e3:f8:74:1d:d3:c9:71:8c:38:
         a8:a2:cd:02:e8:18:9c:7b:44:aa:1b:c6:87:3e:9f:fd:b8:d3:
         a3:01:21:99:09:b8:13:68:cd:b9:60:0f:d2:bd:f1:89:7f:55:
         82:ef:da:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7gWwbxdiaR7rrMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
OTBlOGJhNTctNzk3Zi00NWVmLWI0NzctOWM1MTEwNDgxMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNLGb9bdlmvLgHs5ql1QhYJdP+7W/xhPEP0P
uosbMcNH47NVKJBKoP4hiHO2kAFoEpSOphKL1P4k1dwbpBGDTbYUXf78t48uVIEI
7hEzAzkzml428spRvsozZO+nfZGdXejedCx9PN80UJL/EALhkHbyVqWdWmACvdwE
yO3OAxy7HgSin3DqI1Uf0fMwhrxBv/ukMBEdKBiq4hwsOfbBExA9PtHXTZ28sYW/
rJnNQyyOpjaNVoLKug2XFKg6RMD49Ir4/w5RyhzyMKKWWcmIENykI1ZDfbHJgp4N
evbEiRhs8BrYtle5BxtJ2QB2jOxbNGy9shUVggnT3yg7cb2XkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINUd7/TjAkLk8vngH+5KMbq5wFHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYWU5MjJhMjgtYTE5My0z
NGViLWEwN2ItZGMyYWVlYTUwMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD905CtXH9D1NjNykI2PGeusAXHWO4JJKrEbCms68UhslP0bMW8ImvEe
K/4TWvoisOYxCIhNvp3snoUwbvUIFlUP2pb+7xpRIGER6R2HDvk9BpzWBMW/1kgK
XdDk0h5DEqYWFVhl8Puqpf/fvw4CVSs2IyfYbm2Q+54quON+XWy9W8bO9Oh1a5Ty
xjXtSWYileW5Oyr1AvIamc2uvQ0bRi1rFginpC3SWuDohLA8xyzkRIpfLqq88Tpb
nNWVwnoyZW7BOqTZkKugShl5mhMwruP4dB3TyXGMOKiizQLoGJx7RKobxoc+n/24
06MBIZkJuBNozblgD9K98Yl/VYLv2kU=
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:15 2024 by rpki-client on console-ams.rpki-client.org