Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/506b230d-9f56-3324-9c98-408d80cec277.roa
File:                     506b230d-9f56-3324-9c98-408d80cec277.roa (raw, json)
Hash identifier:          03Gtbj/G5/g9K0r8h/aEkH9xjT8W4uxo4hov/jegEWI=
Subject key identifier:   4C:9C:27:DF:91:3C:24:E2:1F:17:39:4F:17:21:A4:A8:68:50:33:02
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F43285845AA0FB0D00A0A2894E26FC980
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/506b230d-9f56-3324-9c98-408d80cec277.roa
Signing time:             Thu 25 Apr 2024 15:45:07 +0000
ROA not before:           Thu 25 Apr 2024 15:45:07 +0000
ROA not after:            Wed 24 Jul 2024 15:45:07 +0000
asID:                     0
IP address blocks:        107.180.146.0/23 maxlen: 24
                          107.180.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:0f:b0:d0:0a:0a:28:94:e2:6f:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Apr 25 15:45:07 2024 GMT
            Not After : Jul 24 15:45:07 2024 GMT
        Subject: CN=6715372b-7aab-4514-9d20-f21c615bbc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d7:04:40:ef:b8:bc:14:2a:4c:04:94:f9:75:
                    91:28:5d:88:d9:50:48:ad:a2:ee:6a:ca:09:f4:c3:
                    e1:3a:9f:5f:35:4f:a2:fe:44:fd:18:c6:6a:49:d2:
                    15:99:15:b9:c6:90:4b:d0:74:ab:56:65:50:35:d4:
                    fd:bf:11:c3:ee:73:2f:bc:6c:ed:4e:77:f6:bd:d7:
                    49:db:c1:17:5a:a0:5e:68:07:3f:dd:f1:5b:5b:17:
                    53:2f:f0:3d:27:1f:c4:ea:e2:40:eb:72:a0:ba:84:
                    10:95:3f:8d:cf:2b:46:15:de:54:98:8b:d9:69:1a:
                    91:60:ec:34:fe:c9:11:04:c1:d0:2b:82:d3:62:7f:
                    5d:12:f4:f4:df:99:fb:7f:2c:6a:99:7a:db:ff:a2:
                    8e:f3:34:a3:90:f6:9c:c4:44:9d:fe:bd:b1:cf:cb:
                    25:cf:df:d4:4b:24:1a:bc:cc:77:9d:39:15:ce:70:
                    81:84:dd:8e:88:0d:13:3d:8c:ea:a9:81:5e:f5:c9:
                    9f:26:3b:a2:f4:f8:87:74:1f:79:ac:e9:74:94:91:
                    3c:b1:7e:cb:09:d5:24:7f:f5:f6:34:1d:44:19:1e:
                    4f:4c:24:1d:56:53:9c:93:71:5e:7b:d0:99:e4:2e:
                    6b:7d:47:0c:d7:73:f3:38:5e:7d:9f:15:24:1d:b2:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9C:27:DF:91:3C:24:E2:1F:17:39:4F:17:21:A4:A8:68:50:33:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/506b230d-9f56-3324-9c98-408d80cec277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.146.0/23
                  107.180.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:5d:3e:d0:59:46:cd:c3:7c:89:43:34:75:f5:08:8c:c8:
         c4:4c:a1:93:46:b9:e6:13:3d:a1:5b:a3:93:85:8a:d5:82:12:
         fa:c5:a8:01:a5:ae:bb:35:1a:78:1e:69:dd:39:ef:e6:82:ce:
         58:dc:89:89:9b:bd:48:50:bc:51:44:3b:5e:2f:2b:31:b8:64:
         63:57:6a:51:75:ed:64:89:75:4c:b0:cc:17:e8:eb:fb:14:c4:
         93:49:d2:a1:49:34:2b:ed:43:98:91:77:ba:91:5c:3e:41:c8:
         ad:be:2b:8e:82:a2:2b:0b:6a:b1:8e:31:32:5c:1e:5c:4e:49:
         a6:9e:59:c9:98:6a:07:54:f7:8a:06:e3:9b:1b:4d:50:df:59:
         e7:19:10:97:8e:f9:1f:c6:1b:15:9d:7a:c3:cc:bf:ce:87:3a:
         c2:6b:7a:23:e0:9f:0d:a6:1e:ff:53:19:6a:b6:66:8f:5a:c0:
         f1:8e:c0:1f:e3:cc:1d:65:18:04:6e:f0:94:56:b2:a0:b3:1b:
         82:5f:b7:b1:fd:91:d2:93:bf:39:3c:36:5f:9a:1f:0f:7e:e7:
         a1:93:18:95:6d:54:7c:32:96:1c:ba:11:ba:c8:83:89:c8:69:
         c6:08:88:2d:53:46:f9:c5:4c:60:73:a4:dd:db:5e:77:9e:49:
         71:91:77:12
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWqD7DQCgoolOJvyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm
NjhiMB4XDTI0MDQyNTE1NDUwN1oXDTI0MDcyNDE1NDUwN1owLzEtMCsGA1UEAxMk
NjcxNTM3MmItN2FhYi00NTE0LTlkMjAtZjIxYzYxNWJiYzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9cEQO+4vBQqTASU+XWRKF2I2VBIraLuasoJ
9MPhOp9fNU+i/kT9GMZqSdIVmRW5xpBL0HSrVmVQNdT9vxHD7nMvvGztTnf2vddJ
28EXWqBeaAc/3fFbWxdTL/A9Jx/E6uJA63KguoQQlT+NzytGFd5UmIvZaRqRYOw0
/skRBMHQK4LTYn9dEvT035n7fyxqmXrb/6KO8zSjkPacxESd/r2xz8slz9/USyQa
vMx3nTkVznCBhN2OiA0TPYzqqYFe9cmfJjui9PiHdB95rOl0lJE8sX7LCdUkf/X2
NB1EGR5PTCQdVlOck3Fee9CZ5C5rfUcM13PzOF59nxUkHbJ3QQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEycJ9+RPCTiHxc5TxchpKhoUDMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0
Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvNTA2YjIzMGQtOWY1Ni0z
MzI0LTljOTgtNDA4ZDgwY2VjMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1
OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0
ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi
ZDI1NGY2OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBa7SSAwQE
a7TAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHXtXT7QWUbNw3yJQzR19QiMyMRMoZNGueYTPaFbo5OFitWC
EvrFqAGlrrs1Gngead057+aCzljciYmbvUhQvFFEO14vKzG4ZGNXalF17WSJdUyw
zBfo6/sUxJNJ0qFJNCvtQ5iRd7qRXD5ByK2+K46CoisLarGOMTJcHlxOSaaeWcmY
agdU94oG45sbTVDfWecZEJeO+R/GGxWdesPMv86HOsJreiPgnw2mHv9TGWq2Zo9a
wPGOwB/jzB1lGARu8JRWsqCzG4Jft7H9kdKTvzk8Nl+aHw9+56GTGJVtVHwylhy6
EbrIg4nIacYIiC1TRvnFTGBzpN3bXneeSXGRdxI=
-----END CERTIFICATE-----
Generated at Wed May 15 15:08:29 2024 by rpki-client on console-fra.rpki-client.org