Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c719f4fc-a020-37cd-a928-024c35ffa598.roa
File:                     c719f4fc-a020-37cd-a928-024c35ffa598.roa (raw, json)
Hash identifier:          gEY1SgK2paLQ4oSt9jYSXbr9a3MvCtMWefKyiwGRAQY=
Subject key identifier:   DB:2B:33:B9:FB:70:3D:B3:78:1B:33:CC:2F:64:CB:63:03:5F:96:7D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452EE7E5ED95830342E0E71280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c719f4fc-a020-37cd-a928-024c35ffa598.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     376
IP address blocks:        206.116.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e5:ed:95:83:03:42:e0:e7:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=daa53789-86e5-4c2c-a21f-835f261ecab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:cf:9a:e0:a6:af:43:01:4d:25:eb:fb:07:
                    ee:46:3f:6c:a0:5f:e5:a3:6d:bf:1a:d9:55:4f:88:
                    77:76:ed:df:44:40:e9:20:2c:08:a4:f2:7a:8d:a8:
                    30:73:9a:34:0a:6e:2c:1f:6c:a6:ae:6e:d8:b5:e3:
                    1b:ac:03:64:d4:02:a5:65:62:1c:7b:c2:9c:aa:ed:
                    73:79:3f:2e:5f:1a:f9:1d:82:e8:13:bb:f5:5e:6f:
                    e2:29:08:87:6e:4e:dd:85:d0:0d:f8:a6:27:39:ca:
                    4b:f1:e8:cd:ce:94:d7:82:aa:f4:37:27:50:28:47:
                    34:da:98:bf:a5:4b:de:33:a0:89:bf:2d:78:7e:f2:
                    c1:12:ad:95:a1:9b:09:7b:8a:fe:8e:0f:69:95:7e:
                    c2:ef:55:cb:9f:c5:e4:83:b5:42:b9:f7:c8:e5:f7:
                    69:09:71:34:29:96:56:b8:7b:35:c0:99:8d:5d:f5:
                    d2:3b:5a:a3:27:be:df:af:93:66:d8:d6:63:54:fe:
                    e3:f4:71:37:5e:a2:a7:75:77:5b:7c:8a:f7:d6:c4:
                    d8:26:2c:ce:47:bf:d5:af:c6:78:7a:2b:46:df:96:
                    93:93:3b:fc:b7:92:8a:ab:fd:51:22:c5:13:31:c6:
                    3d:38:d1:45:df:fc:4f:9c:c3:d4:a0:4e:5a:59:38:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:33:B9:FB:70:3D:B3:78:1B:33:CC:2F:64:CB:63:03:5F:96:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c719f4fc-a020-37cd-a928-024c35ffa598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.116.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:f1:36:0c:8a:da:c3:46:c2:69:25:b8:60:b4:83:73:3c:
         16:37:3d:e1:9c:3b:1c:5f:3d:73:ec:60:22:4a:c8:a2:77:e2:
         88:d9:e8:75:89:7a:0e:ca:81:43:c4:b8:9c:78:e5:9b:0c:b5:
         d1:dc:2e:d0:e6:85:9b:a9:0a:60:29:66:ae:82:d3:34:eb:e7:
         6d:43:ab:da:13:fb:1b:7d:88:51:e8:ee:46:6e:06:21:0b:cf:
         15:78:d4:12:11:8e:f8:72:4d:1b:7f:80:d9:f8:4f:3d:fd:ec:
         0a:f0:f5:11:55:d6:08:a7:23:33:45:99:20:3c:5d:be:73:fb:
         d4:0c:21:6c:4e:0c:2e:41:fe:e4:b8:72:6d:74:3f:75:9f:c9:
         ab:a6:fa:6e:ba:8b:88:88:b5:c4:07:5f:e4:28:1f:44:d8:34:
         14:d8:a7:67:09:b7:29:2b:4e:ab:24:11:22:29:76:37:e4:26:
         46:70:40:dd:9b:97:32:4a:80:a7:c9:aa:e3:88:d3:b6:8e:6d:
         5a:7d:b2:b5:17:98:a6:86:38:9e:2d:f4:57:b5:25:e8:c8:97:
         05:bc:9c:8f:89:1f:fb:9b:29:b2:b6:b0:a7:66:3c:71:fc:cc:
         2f:89:d7:f8:82:57:04:6c:c0:fa:da:fd:d1:b0:9f:32:29:01:
         b3:f5:39:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+XtlYMDQuDnEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk
ZGFhNTM3ODktODZlNS00YzJjLWEyMWYtODM1ZjI2MWVjYWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vTPmuCmr0MBTSXr+wfuRj9soF/lo22/GtlV
T4h3du3fREDpICwIpPJ6jagwc5o0Cm4sH2ymrm7YteMbrANk1AKlZWIce8Kcqu1z
eT8uXxr5HYLoE7v1Xm/iKQiHbk7dhdAN+KYnOcpL8ejNzpTXgqr0NydQKEc02pi/
pUveM6CJvy14fvLBEq2VoZsJe4r+jg9plX7C71XLn8Xkg7VCuffI5fdpCXE0KZZW
uHs1wJmNXfXSO1qjJ77fr5Nm2NZjVP7j9HE3XqKndXdbfIr31sTYJizOR7/Vr8Z4
eitG35aTkzv8t5KKq/1RIsUTMcY9ONFF3/xPnMPUoE5aWThABwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsrM7n7cD2zeBszzC9ky2MDX5Z9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzcxOWY0ZmMtYTAyMC0z
N2NkLWE5MjgtMDI0YzM1ZmZhNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBznRWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyM8TYMitrDRsJpJbhgtINzPBY3PeGcOxxfPXPsYCJKyKJ34ojZ6HWJ
eg7KgUPEuJx45ZsMtdHcLtDmhZupCmApZq6C0zTr521Dq9oT+xt9iFHo7kZuBiEL
zxV41BIRjvhyTRt/gNn4Tz397Arw9RFV1ginIzNFmSA8Xb5z+9QMIWxODC5B/uS4
cm10P3Wfyaum+m66i4iItcQHX+QoH0TYNBTYp2cJtykrTqskESIpdjfkJkZwQN2b
lzJKgKfJquOI07aObVp9srUXmKaGOJ4t9Fe1JejIlwW8nI+JH/ubKbK2sKdmPHH8
zC+J1/iCVwRswPra/dGwnzIpAbP1OQk=
-----END CERTIFICATE-----
Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org