Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa
File:                     4a4129fa-4096-36d7-890e-24309443f711.roa (raw, json)
Hash identifier:          IDmPIb3c+lqgOZnWVaH9976Qsbo5tytTUBAwZAElAEA=
Subject key identifier:   09:54:FB:35:19:4A:07:20:D0:29:FD:BF:7D:CC:5D:58:C9:9A:2F:5D
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F432858473360A0518571817E73B1F960
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     7794
IP address blocks:        206.131.224.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a0:51:85:71:81:7e:73:b1:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=73149ed6-2a6f-4d7e-bf6d-c5804603ae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:3e:6a:27:27:49:ba:b3:95:fb:01:f8:e0:
                    2f:fb:4c:e2:8e:24:81:aa:2d:4c:83:2c:e9:db:50:
                    88:9b:2f:b7:4b:33:9d:ba:22:98:0e:85:a4:7c:78:
                    51:2f:d6:74:d4:fc:63:c2:ae:74:3e:a6:52:85:1d:
                    09:01:e0:f3:da:d8:fc:af:26:18:93:91:cb:7b:db:
                    02:70:46:12:b4:0d:66:0a:c7:34:1f:c7:e3:d5:3d:
                    18:fb:26:37:07:1f:ec:32:07:8d:eb:7d:62:e1:aa:
                    e8:f5:3e:c9:6c:1a:65:d6:22:04:81:c2:e5:2a:81:
                    7d:29:6c:98:3f:10:ab:f2:4c:f2:dc:26:3c:ad:72:
                    3e:cf:30:88:3f:54:42:57:b1:eb:65:3e:04:7c:31:
                    9c:b7:3b:3e:62:cb:ae:55:69:ca:b1:75:da:d6:df:
                    5e:68:9a:bf:d7:42:47:03:19:93:6a:d3:dc:14:23:
                    af:85:a3:e2:7d:93:e1:5e:39:fe:23:4c:29:35:3b:
                    40:94:74:ea:72:2c:2b:4d:6f:30:9e:36:2a:e6:b2:
                    f8:97:09:33:06:b5:b4:01:0b:75:93:19:9b:17:3d:
                    56:cd:de:23:37:54:1a:4e:a5:21:5f:15:bf:10:ec:
                    7f:78:01:09:82:71:25:1c:4f:c8:1e:16:76:94:49:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:FB:35:19:4A:07:20:D0:29:FD:BF:7D:CC:5D:58:C9:9A:2F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:2c:ee:f1:61:93:c2:40:96:1e:9d:fd:e0:e6:bb:b5:7e:
         ee:9a:ce:28:84:23:a3:02:c9:c0:cf:c9:eb:44:56:ca:1b:fc:
         12:63:4e:53:82:f6:88:fc:6f:35:41:81:e8:c0:84:c5:f5:a0:
         4c:33:2f:0d:3a:fc:fd:d1:d6:c4:d7:b9:b2:d8:16:8d:72:a1:
         88:5d:b7:98:59:a9:b4:fa:f7:03:42:ad:be:2b:3c:b1:48:db:
         43:48:57:38:c1:ed:4d:e1:ac:8e:16:e7:24:2b:5f:4d:96:01:
         c8:71:df:f3:f0:7e:f0:96:cf:18:07:d1:83:16:8f:6b:47:8a:
         bd:18:7c:8f:fa:e4:5e:c0:94:71:e9:8a:77:6d:34:6a:2a:bc:
         8a:b5:0c:79:17:a3:e9:10:20:78:e3:ca:0d:f9:a7:21:90:bb:
         b1:95:8d:e1:01:e1:24:6f:0c:a0:f9:48:84:9d:35:7c:fc:11:
         b7:cc:35:2c:95:b9:e3:14:dd:72:a3:72:c0:2d:f4:df:1f:a4:
         92:d7:95:ae:8e:bc:51:e3:a3:91:1c:8d:54:8d:39:88:3d:d3:
         cf:19:af:61:22:36:cb:8d:93:19:07:b0:d2:bb:89:d6:b7:d8:
         56:1a:50:37:f7:22:48:8f:62:88:ba:b1:1b:e3:a0:36:87:f8:
         8d:63:45:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYKBRhXGBfnOx+WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx
NzZlMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
NzMxNDllZDYtMmE2Zi00ZDdlLWJmNmQtYzU4MDQ2MDNhZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lA+aicnSbqzlfsB+OAv+0zijiSBqi1Mgyzp
21CImy+3SzOduiKYDoWkfHhRL9Z01Pxjwq50PqZShR0JAeDz2tj8ryYYk5HLe9sC
cEYStA1mCsc0H8fj1T0Y+yY3Bx/sMgeN631i4aro9T7JbBpl1iIEgcLlKoF9KWyY
PxCr8kzy3CY8rXI+zzCIP1RCV7HrZT4EfDGctzs+YsuuVWnKsXXa1t9eaJq/10JH
AxmTatPcFCOvhaPifZPhXjn+I0wpNTtAlHTqciwrTW8wnjYq5rL4lwkzBrW0AQt1
kxmbFz1Wzd4jN1QaTqUhXxW/EOx/eAEJgnElHE/IHhZ2lEmHRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlU+zUZSgcg0Cn9v33MXVjJmi9dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk
Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvNGE0MTI5ZmEtNDA5Ni0z
NmQ3LTg5MGUtMjQzMDk0NDNmNzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1
ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz
MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm
Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzoPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvRLO7xYZPCQJYenf3g5ru1fu6aziiEI6MCycDPyetEVsob/BJjTlOC
9oj8bzVBgejAhMX1oEwzLw06/P3R1sTXubLYFo1yoYhdt5hZqbT69wNCrb4rPLFI
20NIVzjB7U3hrI4W5yQrX02WAchx3/PwfvCWzxgH0YMWj2tHir0YfI/65F7AlHHp
indtNGoqvIq1DHkXo+kQIHjjyg35pyGQu7GVjeEB4SRvDKD5SISdNXz8EbfMNSyV
ueMU3XKjcsAt9N8fpJLXla6OvFHjo5EcjVSNOYg9088Zr2EiNsuNkxkHsNK7ida3
2FYaUDf3IkiPYoi6sRvjoDaH+I1jRQw=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:56 2024 by rpki-client on console-ams.rpki-client.org