Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa
File:                     aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa (raw, json)
Hash identifier:          xHkf8tcMc+jx6GkIC5F3sCPMskGcwzgA4xM2y7J4JzA=
Subject key identifier:   4D:7F:B5:85:50:CE:28:50:A7:BE:03:94:06:F6:C8:D7:15:FB:99:1A
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F432858474420B5A89A5D5B5C2674D980
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     10929
IP address blocks:        184.170.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b5:a8:9a:5d:5b:5c:26:74:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=c5b2cd3e-8584-4ebc-a221-3fb4fbf069ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:65:04:28:ad:e8:01:bf:35:48:85:ea:ec:
                    e5:3a:05:0d:9f:df:a9:f7:59:9c:b3:63:24:ba:50:
                    9a:01:54:a2:7a:8c:00:fc:cc:f0:bb:6a:d9:3b:01:
                    8e:dd:b6:18:2d:ac:d6:7a:b5:aa:ec:24:7c:e1:f4:
                    d6:4c:ce:7c:4d:75:44:8f:49:dc:bb:1f:a7:d2:f6:
                    5f:36:43:2c:b9:9e:52:8d:cd:2f:0e:09:3d:ac:fe:
                    62:5e:ea:6c:1a:1c:6d:a4:90:95:a0:02:8a:df:7f:
                    c4:c3:75:ca:a3:41:ef:c4:4c:fa:35:9d:a7:79:c4:
                    38:7f:f9:af:0f:d2:62:6b:76:61:68:8e:38:e6:bd:
                    60:b3:c0:f7:fd:0c:d1:81:5a:0a:8f:48:a0:dd:46:
                    a4:9f:00:aa:6b:15:29:00:fa:aa:21:53:ef:68:01:
                    05:ea:be:22:d2:77:84:08:c8:12:ea:58:a6:63:57:
                    55:f7:6a:65:40:05:7d:4a:7e:9d:de:df:e3:83:40:
                    f6:73:01:83:0e:a0:86:b6:69:81:0a:95:bd:9a:6e:
                    93:75:4e:90:fc:f3:4d:c0:94:d6:dc:5d:9f:b2:72:
                    ac:ea:b4:05:e9:4e:57:9a:1f:a6:77:8d:4e:76:5b:
                    8a:bb:de:01:38:be:70:73:3b:f4:33:de:ed:c6:f4:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7F:B5:85:50:CE:28:50:A7:BE:03:94:06:F6:C8:D7:15:FB:99:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:59:5f:8b:0d:99:33:f7:3b:04:6a:23:a1:21:3f:5e:3e:fa:
         d4:c4:4e:23:32:03:dd:a3:e9:0d:9f:72:6b:e4:3f:16:72:a6:
         ad:c1:37:d3:a0:66:a1:11:77:40:e5:dc:f1:d4:ff:85:36:55:
         8c:2d:d1:dd:32:a7:97:59:03:d9:b4:1d:35:ab:b8:c0:da:bb:
         f9:9a:59:b1:7b:5e:51:04:50:8f:bf:fa:b8:8b:ef:97:3e:4e:
         05:4c:2c:53:8e:6b:b8:95:04:3e:52:74:d9:9a:83:e7:58:fd:
         1e:0f:ef:1b:85:09:f5:56:a2:29:d8:e2:5f:3b:b3:b5:dd:7d:
         bd:11:a3:9c:e2:d4:46:81:13:90:96:da:87:87:48:6c:fb:54:
         1a:a5:63:b7:eb:1f:aa:09:6d:cc:84:64:05:b6:88:cf:08:9f:
         8e:39:be:2d:51:cd:b8:bf:ea:ad:c9:aa:6a:15:42:99:56:27:
         73:bf:f4:47:e4:8c:6e:3c:1f:a0:5c:e2:68:fa:03:b6:91:bc:
         0f:37:d9:5c:14:c2:de:28:d1:ba:44:4f:80:40:ba:06:95:ee:
         79:77:7a:c4:37:e1:6f:f9:24:61:98:2f:a6:1a:9a:77:58:55:
         2d:8d:63:32:80:09:ac:e9:cf:e2:1f:06:0e:ff:c6:f1:65:3b:
         7e:6b:3a:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEILWoml1bXCZ02YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz
NWUwMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
YzViMmNkM2UtODU4NC00ZWJjLWEyMjEtM2ZiNGZiZjA2OWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ1lBCit6AG/NUiF6uzlOgUNn9+p91mcs2Mk
ulCaAVSieowA/Mzwu2rZOwGO3bYYLazWerWq7CR84fTWTM58TXVEj0ncux+n0vZf
NkMsuZ5Sjc0vDgk9rP5iXupsGhxtpJCVoAKK33/Ew3XKo0HvxEz6NZ2necQ4f/mv
D9Jia3ZhaI445r1gs8D3/QzRgVoKj0ig3UaknwCqaxUpAPqqIVPvaAEF6r4i0neE
CMgS6limY1dV92plQAV9Sn6d3t/jg0D2cwGDDqCGtmmBCpW9mm6TdU6Q/PNNwJTW
3F2fsnKs6rQF6U5Xmh+md41OdluKu94BOL5wczv0M97txvS/8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1/tYVQzihQp74DlAb2yNcV+5kaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3
ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvYWFiZjcwM2YtMTAwMy0z
YjZiLWJiYTAtZmE4MmRhM2RkZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1
Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi
MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2
NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuKqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRZX4sNmTP3OwRqI6EhP14++tTETiMyA92j6Q2fcmvkPxZypq3BN9Og
ZqERd0Dl3PHU/4U2VYwt0d0yp5dZA9m0HTWruMDau/maWbF7XlEEUI+/+riL75c+
TgVMLFOOa7iVBD5SdNmag+dY/R4P7xuFCfVWoinY4l87s7Xdfb0Ro5zi1EaBE5CW
2oeHSGz7VBqlY7frH6oJbcyEZAW2iM8In445vi1Rzbi/6q3JqmoVQplWJ3O/9Efk
jG48H6Bc4mj6A7aRvA832VwUwt4o0bpET4BAugaV7nl3esQ34W/5JGGYL6YamndY
VS2NYzKACazpz+IfBg7/xvFlO35rOvU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:05 2024 by rpki-client on console-ams.rpki-client.org