Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/def0f716-2e24-38b1-ad2a-e47bf10bf940.roa
File:                     def0f716-2e24-38b1-ad2a-e47bf10bf940.roa (raw, json)
Hash identifier:          TrR3RFlm6OFHbW4Q3xUF9UTu4yZUTXSKaFyCkzm70ls=
Subject key identifier:   4A:76:74:5F:DF:2A:24:2E:F6:D4:88:29:1F:6B:37:B9:4B:D6:E9:37
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D759838FA2F0AC092D68500
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/def0f716-2e24-38b1-ad2a-e47bf10bf940.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     26744
IP address blocks:        206.180.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:98:38:fa:2f:0a:c0:92:d6:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=45ece77d-e94b-4dbb-990c-ac19cf5a40c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:08:33:66:0e:27:17:d8:5b:f0:78:63:ce:
                    51:38:a4:b1:a4:00:46:f0:85:b1:a2:68:55:cd:e5:
                    07:f3:09:5e:3d:d3:ea:ee:41:e8:8a:8e:d3:7d:ee:
                    72:c4:fc:8c:35:f9:ec:dd:a7:57:20:d7:03:a5:88:
                    ab:b0:52:7b:9b:0e:e3:e2:86:64:56:0d:6a:fb:60:
                    12:3f:69:b8:9e:f8:aa:91:46:e8:81:ff:24:7c:22:
                    53:c3:26:e7:51:af:de:2e:c1:31:cc:86:fd:c9:1e:
                    30:a8:1d:58:55:36:ab:f0:48:f7:95:10:73:88:49:
                    f7:0f:45:e8:d7:1f:43:ec:b3:c2:fc:da:65:3e:3f:
                    1e:63:5a:d5:a9:17:c8:b0:ed:7c:16:2d:82:13:91:
                    f4:ba:6b:1c:25:fc:33:3c:8b:87:2c:77:c4:0c:5c:
                    04:4a:bd:3f:c6:60:29:39:f8:2d:87:d6:77:d8:29:
                    5c:fb:02:22:c4:e7:5a:8e:30:93:f5:cd:cc:6a:50:
                    a9:a3:f8:67:03:b0:19:0b:b7:74:fe:b3:ef:66:7d:
                    c1:ab:ab:45:04:aa:d9:88:f2:cd:23:c5:df:f5:1a:
                    7e:27:a0:7e:ab:2b:84:76:cb:94:15:14:96:63:3f:
                    ec:93:49:6d:c8:56:bf:2e:e8:33:c6:70:4c:91:8d:
                    93:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:74:5F:DF:2A:24:2E:F6:D4:88:29:1F:6B:37:B9:4B:D6:E9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/def0f716-2e24-38b1-ad2a-e47bf10bf940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:13:c2:f2:18:c4:51:1f:df:f1:9d:82:32:73:60:f0:fc:45:
         9c:8f:fc:c6:d7:5c:6b:59:42:1f:3a:71:81:10:93:86:29:08:
         1d:34:7f:ce:f5:0a:f8:5d:e4:45:91:98:ae:12:22:32:4c:2a:
         9d:85:3a:f3:d3:1d:c9:d4:2e:72:a8:24:8f:fd:63:41:3f:f8:
         38:4c:0c:ac:6f:83:ad:8f:a9:2a:59:a4:6c:de:69:50:c2:c4:
         9d:7f:02:a0:87:54:7a:05:ed:06:79:62:ca:9a:76:a5:5f:0a:
         28:d9:a7:b0:df:5a:15:6b:88:05:3b:f5:14:d5:c6:c0:b9:9f:
         3a:10:4b:c6:8c:74:61:f5:8a:fe:d6:71:52:70:e4:15:be:f3:
         1e:15:05:46:9e:dc:60:bb:9d:25:1e:90:d7:4e:85:9c:f2:ea:
         82:25:79:ee:24:48:84:ba:93:64:87:6d:95:4d:85:db:f9:26:
         17:96:4f:65:7d:3e:90:af:e2:06:97:e6:69:09:f6:af:7a:26:
         25:19:a6:7e:63:73:13:33:d0:8a:30:b8:1c:c1:9b:6d:c6:23:
         d5:64:c8:2c:95:8c:01:20:b2:e4:7e:ae:47:82:7f:88:34:89:
         93:a3:70:ec:d3:1e:c6:08:88:ef:a9:83:11:d8:c4:99:fc:bb:
         93:30:01:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZg4+i8KwJLWhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
NDVlY2U3N2QtZTk0Yi00ZGJiLTk5MGMtYWMxOWNmNWE0MGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxcIM2YOJxfYW/B4Y85ROKSxpABG8IWxomhV
zeUH8wlePdPq7kHoio7Tfe5yxPyMNfns3adXINcDpYirsFJ7mw7j4oZkVg1q+2AS
P2m4nviqkUbogf8kfCJTwybnUa/eLsExzIb9yR4wqB1YVTar8Ej3lRBziEn3D0Xo
1x9D7LPC/NplPj8eY1rVqRfIsO18Fi2CE5H0umscJfwzPIuHLHfEDFwESr0/xmAp
Ofgth9Z32Clc+wIixOdajjCT9c3MalCpo/hnA7AZC7d0/rPvZn3Bq6tFBKrZiPLN
I8Xf9Rp+J6B+qyuEdsuUFRSWYz/sk0ltyFa/LugzxnBMkY2TTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEp2dF/fKiQu9tSIKR9rN7lL1uk3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZGVmMGY3MTYtMmUyNC0z
OGIxLWFkMmEtZTQ3YmYxMGJmOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrSEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcTwvIYxFEf3/GdgjJzYPD8RZyP/MbXXGtZQh86cYEQk4YpCB00f871
Cvhd5EWRmK4SIjJMKp2FOvPTHcnULnKoJI/9Y0E/+DhMDKxvg62PqSpZpGzeaVDC
xJ1/AqCHVHoF7QZ5YsqadqVfCijZp7DfWhVriAU79RTVxsC5nzoQS8aMdGH1iv7W
cVJw5BW+8x4VBUae3GC7nSUekNdOhZzy6oIlee4kSIS6k2SHbZVNhdv5JheWT2V9
PpCv4gaX5mkJ9q96JiUZpn5jcxMz0IowuBzBm23GI9VkyCyVjAEgsuR+rkeCf4g0
iZOjcOzTHsYIiO+pgxHYxJn8u5MwARI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:39 2025 by rpki-client