Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa
File:                     2725235d-11ba-361f-b603-889fb3fed103.roa (raw, json)
Hash identifier:          Pc9jNpS3J82RJ4l+8lNJNUAMpw9pqTPeTHTG5sjnN0M=
Subject key identifier:   8D:08:6D:F4:EC:E0:D9:80:D4:86:F6:8A:53:DF:4C:62:22:6F:0B:FD
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F43285845C01394603030641467B60D80
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     0
IP address blocks:        206.53.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:94:60:30:30:64:14:67:b6:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=c1a25af6-7c04-4248-a47b-1546f2c902bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:46:06:63:42:cd:9f:ed:9d:f3:88:4f:55:68:
                    fc:ec:c9:59:5c:ae:97:53:54:38:65:2a:8e:c3:cb:
                    e0:91:02:4f:53:fb:b1:fd:4f:bc:3b:82:c1:a0:61:
                    14:7a:2b:5c:60:34:8d:21:08:f7:9f:1d:99:40:9a:
                    9d:85:01:d4:8e:de:33:c7:be:fb:f3:6d:1a:c6:db:
                    24:7c:72:4c:ff:98:cf:06:8a:00:a9:0b:40:7b:d4:
                    34:10:4b:11:1d:e5:1f:c6:4f:1a:8f:62:93:ce:37:
                    60:97:0b:34:91:22:56:99:90:42:dd:af:6a:69:15:
                    38:74:fb:7b:23:bc:41:6a:81:5b:64:56:31:13:1f:
                    71:80:ba:58:64:10:c8:cf:58:e0:54:f4:d1:13:13:
                    01:81:b3:da:92:d0:ab:f5:4d:e4:37:85:31:1e:f4:
                    2a:32:8d:47:e9:51:81:70:14:3f:1a:82:24:47:95:
                    de:00:82:ce:63:88:11:83:9c:88:a3:9d:2c:ee:76:
                    13:8a:55:7b:5f:9f:81:94:0f:b2:b2:d0:85:15:84:
                    15:0e:56:8d:e7:f6:9c:a5:00:3d:79:de:e8:b1:c8:
                    bf:51:e8:06:9b:1d:3a:34:b5:4d:26:76:74:7a:74:
                    07:9b:26:04:a6:7c:92:4a:76:eb:a8:91:0c:1b:a9:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:6D:F4:EC:E0:D9:80:D4:86:F6:8A:53:DF:4C:62:22:6F:0B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:97:d7:c4:65:b4:ba:5e:54:5b:7e:b0:2a:9e:2e:5b:eb:92:
         ff:13:a1:40:cb:24:fd:3e:b6:6c:b9:8b:bb:1d:2e:09:bd:d1:
         39:3c:37:1a:78:4f:95:8f:e4:a7:41:08:31:6c:a3:06:cb:6c:
         46:2e:e0:c5:83:89:aa:c8:b1:b8:ab:09:bd:29:4c:aa:f0:0c:
         0a:a1:d9:fd:1c:8e:11:13:d3:74:4d:e0:b1:0d:65:fa:f8:7c:
         61:d0:ee:4e:e2:45:e6:34:65:e1:cb:9d:cf:de:93:9f:99:03:
         8b:5b:46:dd:a7:00:8c:fc:b5:e9:8c:36:f3:e0:04:73:12:ca:
         df:d3:c1:78:ee:a2:0e:e2:90:cd:12:29:85:a2:94:a9:6b:6b:
         8c:bc:41:4a:d4:c4:e9:a7:6d:2b:45:7a:f5:1f:f4:c3:e3:21:
         d6:f6:f1:6b:14:06:d8:7b:92:f5:f5:04:2d:43:fe:90:2e:71:
         43:4f:1c:be:0a:83:f8:95:f7:04:13:05:3e:33:a1:3f:b8:87:
         e3:ea:1a:42:5f:56:73:ae:7e:96:f5:50:45:81:b0:d3:c2:ca:
         c3:97:8e:5e:1c:6e:73:e8:ab:4d:e8:d7:61:1b:c7:e9:51:ea:
         f9:aa:8a:81:c3:5b:e4:1c:f9:32:ef:1f:89:4a:77:46:06:aa:
         40:f0:25:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE5RgMDBkFGe2DYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2
ZmE3MB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
YzFhMjVhZjYtN2MwNC00MjQ4LWE0N2ItMTU0NmYyYzkwMmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0YGY0LNn+2d84hPVWj87MlZXK6XU1Q4ZSqO
w8vgkQJPU/ux/U+8O4LBoGEUeitcYDSNIQj3nx2ZQJqdhQHUjt4zx777820axtsk
fHJM/5jPBooAqQtAe9Q0EEsRHeUfxk8aj2KTzjdglws0kSJWmZBC3a9qaRU4dPt7
I7xBaoFbZFYxEx9xgLpYZBDIz1jgVPTRExMBgbPaktCr9U3kN4UxHvQqMo1H6VGB
cBQ/GoIkR5XeAILOY4gRg5yIo50s7nYTilV7X5+BlA+ystCFFYQVDlaN5/acpQA9
ed7osci/UegGmx06NLVNJnZ0enQHmyYEpnySSnbrqJEMG6lopQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0IbfTs4NmA1Ib2ilPfTGIibwv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1
MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMjcyNTIzNWQtMTFiYS0z
NjFmLWI2MDMtODg5ZmIzZmVkMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj
NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz
NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1
ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjWJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCX18RltLpeVFt+sCqeLlvrkv8ToUDLJP0+tmy5i7sdLgm90Tk8Nxp4
T5WP5KdBCDFsowbLbEYu4MWDiarIsbirCb0pTKrwDAqh2f0cjhET03RN4LENZfr4
fGHQ7k7iReY0ZeHLnc/ek5+ZA4tbRt2nAIz8temMNvPgBHMSyt/TwXjuog7ikM0S
KYWilKlra4y8QUrUxOmnbStFevUf9MPjIdb28WsUBth7kvX1BC1D/pAucUNPHL4K
g/iV9wQTBT4zoT+4h+PqGkJfVnOufpb1UEWBsNPCysOXjl4cbnPoq03o12Ebx+lR
6vmqioHDW+Qc+TLvH4lKd0YGqkDwJZk=
-----END CERTIFICATE-----
Generated at Sat May 4 15:00:36 2024 by rpki-client on console-ams.rpki-client.org