Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/3bc6f1e8-e3af-3a07-8aed-b9c8f94b9eff.roa
File:                     3bc6f1e8-e3af-3a07-8aed-b9c8f94b9eff.roa (raw, json)
Hash identifier:          VEgAkftR7dwsDafD1A8iTrksmIAhqxXfCd0v0zzEnjU=
Subject key identifier:   7D:79:52:15:6D:58:A9:F1:7C:5F:22:9F:CA:15:7E:1A:17:90:49:E8
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F432858455498288EEACA3602C657C420
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/3bc6f1e8-e3af-3a07-8aed-b9c8f94b9eff.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     18615
IP address blocks:        206.126.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:28:8e:ea:ca:36:02:c6:57:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=83f694a7-2e37-4c2d-8b2e-f49d7b67bc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:21:19:fc:bf:31:9e:51:94:d3:25:a1:6a:
                    6c:e7:b3:23:f1:cd:39:21:9b:0c:53:a3:d7:de:fb:
                    38:3b:89:8d:ff:a5:0b:41:b3:27:65:a5:1a:10:c2:
                    6c:59:bb:38:94:d0:27:45:3b:0d:72:0f:02:03:7a:
                    a2:c8:b6:eb:b7:a6:ad:f8:f4:91:87:06:5a:41:3f:
                    7b:1b:93:6f:82:19:15:6d:9e:70:29:5d:ef:92:2e:
                    d1:ab:cb:a9:f5:3d:22:52:b4:0d:4c:d7:5e:1c:84:
                    10:27:cf:79:7b:5c:4c:cd:fb:41:64:f3:7f:b7:61:
                    41:cb:66:0e:a9:05:d8:7e:1c:2f:a0:df:51:c0:0f:
                    76:34:3b:4e:65:db:f6:0a:0f:77:16:9a:9c:0b:72:
                    90:19:10:9c:89:6d:1a:ca:d3:4f:66:d7:c9:31:fd:
                    55:57:50:3a:68:49:ed:86:d2:b2:3d:34:90:60:e7:
                    f4:79:a3:2b:3b:33:ae:5b:8d:1a:00:0d:33:4c:b6:
                    17:08:5a:02:e2:a7:8e:de:ff:0b:0b:52:22:f2:f2:
                    61:33:e9:60:d3:e6:7e:b7:90:64:ad:3d:29:48:51:
                    3b:69:2b:38:b8:4e:bc:5b:4f:eb:0a:2c:79:90:4e:
                    35:a2:9a:d6:70:30:fc:11:dc:d7:43:38:20:31:09:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:52:15:6D:58:A9:F1:7C:5F:22:9F:CA:15:7E:1A:17:90:49:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/3bc6f1e8-e3af-3a07-8aed-b9c8f94b9eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:b5:7b:2e:9b:73:f8:e9:ae:60:c8:59:28:80:5c:18:c6:
         8c:c0:01:64:fc:fc:06:a6:d5:4a:f6:53:57:5e:f9:15:c5:95:
         2b:89:6d:bf:e2:3b:b8:33:41:ab:f6:6e:d9:80:c8:7b:ef:92:
         d4:9a:ec:4a:b5:53:c3:51:db:8a:9e:c8:de:7a:72:eb:34:34:
         9d:8a:fe:cf:1d:42:0b:f0:c3:d1:97:fc:33:27:eb:df:57:7d:
         65:5f:5f:8a:f9:57:9d:52:d9:a2:29:48:12:25:d0:4c:9c:63:
         86:78:c1:ed:e4:4b:d1:84:22:7f:8f:9b:49:f1:5d:72:68:b1:
         bc:4d:f8:67:93:8d:27:49:79:dd:a0:5b:4d:7d:be:00:43:d0:
         47:3f:20:8a:80:9f:f7:89:be:03:a1:c1:fa:1c:10:ba:f7:2d:
         d7:53:89:1f:e7:a7:b5:81:35:24:c5:53:9d:75:3a:b0:30:69:
         a1:38:75:5f:75:1a:1b:20:db:f8:c4:f4:0b:55:94:94:b4:c4:
         1b:72:75:c0:85:69:79:19:3c:0f:73:8a:cf:04:82:59:e1:8b:
         ec:0d:3d:39:c0:03:3d:e6:f9:55:f0:23:6e:55:a6:18:7a:2f:
         c1:9d:8a:3c:3c:94:0c:f4:14:46:3f:ec:19:fc:6e:d1:75:b6:
         93:37:25:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmCiO6so2AsZXxCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx
MDg2MB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk
ODNmNjk0YTctMmUzNy00YzJkLThiMmUtZjQ5ZDdiNjdiYzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQhGfy/MZ5RlNMloWps57Mj8c05IZsMU6PX
3vs4O4mN/6ULQbMnZaUaEMJsWbs4lNAnRTsNcg8CA3qiyLbrt6at+PSRhwZaQT97
G5NvghkVbZ5wKV3vki7Rq8up9T0iUrQNTNdeHIQQJ895e1xMzftBZPN/t2FBy2YO
qQXYfhwvoN9RwA92NDtOZdv2Cg93FpqcC3KQGRCciW0aytNPZtfJMf1VV1A6aEnt
htKyPTSQYOf0eaMrOzOuW40aAA0zTLYXCFoC4qeO3v8LC1Ii8vJhM+lg0+Z+t5Bk
rT0pSFE7aSs4uE68W0/rCix5kE41oprWcDD8EdzXQzggMQk1lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH15UhVtWKnxfF8in8oVfhoXkEnoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj
MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvM2JjNmYxZTgtZTNhZi0z
YTA3LThhZWQtYjljOGY5NGI5ZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi
YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw
MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0
MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzn7yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKstXsum3P46a5gyFkogFwYxozAAWT8/Aam1Ur2U1de+RXFlSuJbb/i
O7gzQav2btmAyHvvktSa7Eq1U8NR24qeyN56cus0NJ2K/s8dQgvww9GX/DMn699X
fWVfX4r5V51S2aIpSBIl0EycY4Z4we3kS9GEIn+Pm0nxXXJosbxN+GeTjSdJed2g
W019vgBD0Ec/IIqAn/eJvgOhwfocELr3LddTiR/np7WBNSTFU511OrAwaaE4dV91
Ghsg2/jE9AtVlJS0xBtydcCFaXkZPA9zis8Eglnhi+wNPTnAAz3m+VXwI25Vphh6
L8Gdijw8lAz0FEY/7Bn8btF1tpM3JQ0=
-----END CERTIFICATE-----
Generated at Fri May 17 02:02:38 2024 by rpki-client on console-ams.rpki-client.org