Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa
File:                     0f423575-11f9-3728-ae9b-8c70332062e1.roa (raw, json)
Hash identifier:          p8ogVcRz1+sXbnmpOyDFcF3HWwPEe5aal7mHAK3SMO8=
Subject key identifier:   93:89:9F:53:AC:96:E4:BD:97:E2:6D:3F:BD:D5:E3:6B:65:E1:DD:50
Certificate issuer:       /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Certificate serial:       010D0C9F43285845BB661D11FA540F79A66706B0
Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa
Signing time:             Wed 01 May 2024 20:47:59 +0000
ROA not before:           Wed 01 May 2024 20:47:59 +0000
ROA not after:            Tue 30 Jul 2024 20:47:59 +0000
asID:                     400701
IP address blocks:        206.168.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bb:66:1d:11:fa:54:0f:79:a6:67:06:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
        Validity
            Not Before: May  1 20:47:59 2024 GMT
            Not After : Jul 30 20:47:59 2024 GMT
        Subject: CN=3110e285-003f-467e-8d20-f22e876fde00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:a7:57:8f:d2:a2:28:61:ca:88:81:0a:7b:
                    29:0f:ec:2f:bc:91:fe:aa:67:52:78:be:72:42:22:
                    53:0c:34:40:6d:f0:da:75:1c:11:c1:db:c9:2e:41:
                    2e:7d:d8:83:ea:1e:e6:94:58:51:ef:75:79:e6:ca:
                    c5:d5:8a:f1:23:42:b5:0f:f2:12:96:4e:76:13:93:
                    27:af:00:23:cf:38:c9:c5:55:14:8d:91:42:b1:12:
                    78:33:21:2e:92:0a:7f:f1:87:95:7d:7c:80:58:89:
                    9c:5a:f3:2a:8f:9f:73:71:2c:ff:fd:76:62:8c:ee:
                    0b:7d:39:74:f3:c9:6b:a1:07:79:2f:19:0a:84:3c:
                    86:01:72:7c:bb:05:89:68:6c:48:eb:d5:d5:f5:01:
                    c8:29:cc:4c:a0:e1:75:ec:0b:6a:fc:ca:36:aa:cb:
                    09:c4:c1:46:13:b6:65:75:c6:24:1d:e8:aa:9b:51:
                    a5:b0:dd:ac:d5:74:3b:dd:49:8a:8b:f4:bf:aa:43:
                    eb:31:9b:67:0f:50:db:65:43:c7:65:d4:ff:27:5f:
                    a8:5e:a5:71:71:37:f6:4a:ed:a3:0b:0a:1b:b6:80:
                    1a:5a:10:9d:80:25:f1:64:04:ff:cd:18:bb:ba:0d:
                    ea:32:b4:c1:78:13:b6:cf:80:56:e3:56:11:c4:35:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:89:9F:53:AC:96:E4:BD:97:E2:6D:3F:BD:D5:E3:6B:65:E1:DD:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl

            X509v3 Authority Key Identifier:
                keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:39:cb:e9:55:11:da:a4:81:fc:e6:99:61:eb:89:45:e5:
         d4:38:55:f6:05:b1:fe:f0:79:32:95:8f:64:d6:4b:5e:15:d1:
         e3:cf:99:6b:ad:0e:5a:37:a2:50:63:d9:26:c4:84:7e:91:12:
         68:bd:c2:64:15:40:ad:8a:32:b1:57:5b:99:cd:c9:64:51:f6:
         07:ee:e9:dd:ac:a1:68:f3:21:35:3b:d5:98:35:25:0f:5c:36:
         9f:66:b6:3b:19:90:43:d8:dd:29:69:9b:c3:3e:1a:10:ec:61:
         11:96:d8:12:ac:1a:b8:9e:4e:91:8e:63:b7:4c:79:fb:1a:92:
         83:72:52:ee:c7:79:fc:e6:b0:4f:5d:82:dd:2c:18:27:92:6d:
         07:6a:fb:1f:3e:4a:30:e3:7f:e0:3f:aa:c1:09:04:e2:b9:f7:
         59:12:8d:3c:b1:82:e5:0a:76:24:72:78:4f:b4:f7:1d:1e:b9:
         2c:c6:22:d2:0f:15:14:91:ae:a6:fe:39:75:e1:e8:bb:17:67:
         eb:83:71:c6:e4:fc:6a:4a:51:d0:c5:8b:65:ca:13:38:74:b4:
         e7:ca:f3:c3:97:be:27:2a:94:e8:82:55:d3:08:b3:69:3e:e3:
         2b:1a:8d:4f:bf:d1:8b:10:87:95:09:a5:8a:11:f7:a6:69:51:
         02:90:0a:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW7Zh0R+lQPeaZnBrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmN2Y2ZmItMGJhZS00YzIxLWJjZjItMmY5OTg1NDFk
YjNmMB4XDTI0MDUwMTIwNDc1OVoXDTI0MDczMDIwNDc1OVowLzEtMCsGA1UEAxMk
MzExMGUyODUtMDAzZi00NjdlLThkMjAtZjIyZTg3NmZkZTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN6nV4/SoihhyoiBCnspD+wvvJH+qmdSeL5y
QiJTDDRAbfDadRwRwdvJLkEufdiD6h7mlFhR73V55srF1YrxI0K1D/ISlk52E5Mn
rwAjzzjJxVUUjZFCsRJ4MyEukgp/8YeVfXyAWImcWvMqj59zcSz//XZijO4LfTl0
88lroQd5LxkKhDyGAXJ8uwWJaGxI69XV9QHIKcxMoOF17Atq/Mo2qssJxMFGE7Zl
dcYkHeiqm1GlsN2s1XQ73UmKi/S/qkPrMZtnD1DbZUPHZdT/J1+oXqVxcTf2Su2j
CwobtoAaWhCdgCXxZAT/zRi7ug3qMrTBeBO2z4BW41YRxDWWJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOJn1OsluS9l+JtP73V42tl4d1QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3
ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5ODU0MWRiM2YvMGY0MjM1NzUtMTFmOS0z
NzI4LWFlOWItOGM3MDMzMjA2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGNmN2Y2ZmItMGJhZS00YzIxLWJj
ZjItMmY5OTg1NDFkYjNmL2RjZjdmNmZiLTBiYWUtNGMyMS1iY2YyLTJmOTk4NTQx
ZGIzZi5jcmwwHwYDVR0jBBgwFoAUzC+dbcy2HM4e41A5Y5HqY9GPuAIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5
ODU0MWRiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqiMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5OOcvpVRHapIH85plh64lF5dQ4VfYFsf7weTKVj2TWS14V0ePPmWut
Dlo3olBj2SbEhH6REmi9wmQVQK2KMrFXW5nNyWRR9gfu6d2soWjzITU71Zg1JQ9c
Np9mtjsZkEPY3Slpm8M+GhDsYRGW2BKsGrieTpGOY7dMefsakoNyUu7HefzmsE9d
gt0sGCeSbQdq+x8+SjDjf+A/qsEJBOK591kSjTyxguUKdiRyeE+09x0euSzGItIP
FRSRrqb+OXXh6LsXZ+uDccbk/GpKUdDFi2XKEzh0tOfK88OXvicqlOiCVdMIs2k+
4ysajU+/0YsQh5UJpYoR96ZpUQKQCrY=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:45 2024 by rpki-client on console-ams.rpki-client.org