Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3dbe4d2c-8bfe-381c-86ea-a842e3192cb7.roa
File:                     3dbe4d2c-8bfe-381c-86ea-a842e3192cb7.roa (raw, json)
Hash identifier:          MKSsSWdGDg6hyLcmiPwjQAWbkNHpuRSsaot2Dr8mK0w=
Subject key identifier:   59:13:A0:A5:63:D2:BD:40:83:BA:C9:56:C2:81:7D:20:6F:CB:71:61
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285847B3CC0E05A11BCF32AC1CEE00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3dbe4d2c-8bfe-381c-86ea-a842e3192cb7.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     6621
IP address blocks:        206.71.96.0/21 maxlen: 21
                          206.71.104.0/21 maxlen: 21
                          206.71.112.0/21 maxlen: 21
                          206.71.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0e:05:a1:1b:cf:32:ac:1c:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=2a52f8e5-bfdf-4b33-abde-aed8b8ca464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e3:30:da:b8:47:7e:37:66:87:55:99:b1:9a:
                    af:ea:9c:f7:b1:22:d4:5d:a6:a5:ca:65:1c:04:44:
                    32:1d:38:6d:de:06:62:26:18:a2:cd:67:b5:d7:3a:
                    00:9c:4f:d8:8f:4c:a6:b4:1b:3e:a8:80:8e:d2:8a:
                    3d:db:72:48:c7:49:ad:a6:7c:ec:38:b4:89:6d:5b:
                    9b:1c:a9:f9:ba:43:7b:95:0c:1c:17:70:56:a8:05:
                    e5:db:76:ed:90:7f:26:2b:66:26:7f:5e:b0:24:1e:
                    ff:cd:6b:51:04:d3:88:de:94:7a:d0:64:37:9e:94:
                    fd:71:77:c8:61:cd:79:78:cb:36:05:a8:4a:29:61:
                    6c:fc:72:1a:b1:9f:69:b4:90:a4:ca:27:91:7e:fe:
                    d9:f5:20:88:a5:c3:13:ae:1c:15:6d:39:d3:e5:28:
                    06:d7:e7:af:7d:00:f6:28:5e:c9:5a:b4:bb:77:15:
                    80:77:91:15:be:05:67:e6:d5:b2:91:3e:c9:25:1b:
                    96:bc:38:dd:36:7d:cc:83:93:9c:ec:44:3a:d8:2f:
                    52:98:68:7d:43:5d:1b:b4:ba:ae:b1:ab:4a:6a:4b:
                    00:08:4e:b9:c5:a4:7f:39:c3:14:50:a8:c0:3c:b2:
                    92:3f:bb:d3:c0:a6:58:8e:0a:bc:c7:02:53:a0:ea:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:A0:A5:63:D2:BD:40:83:BA:C9:56:C2:81:7D:20:6F:CB:71:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3dbe4d2c-8bfe-381c-86ea-a842e3192cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:5d:c9:78:d5:c4:c0:22:75:01:bf:98:24:16:7b:90:4b:
         fe:dd:a6:33:43:ee:90:8b:b2:be:26:1a:8b:45:40:ce:1d:c6:
         81:d7:93:b3:b4:ef:27:55:64:4d:ba:5b:30:13:59:b4:bb:0a:
         5c:6c:66:6a:25:9a:3e:9a:aa:09:b4:a9:27:c5:64:7c:ce:0c:
         16:4e:c0:08:30:c9:16:f6:32:05:49:ac:e9:33:07:cd:d3:49:
         99:b4:2b:ea:41:93:19:7a:63:4f:fd:97:f7:36:ef:42:da:25:
         89:f3:6b:9f:50:65:5b:d9:22:18:93:e6:9e:93:96:bd:05:0b:
         a7:41:8d:df:b2:93:47:8d:3e:06:42:f2:9f:85:20:d7:a7:ab:
         a6:f9:9f:41:3b:2e:5d:d9:23:c7:ae:8f:ee:1c:87:f4:5a:e9:
         36:27:85:3a:a1:c4:59:aa:00:d9:e2:1a:e7:ab:8a:16:19:2f:
         b3:e4:20:fe:67:34:d9:2c:80:05:5e:ed:92:24:54:8d:d6:73:
         7f:14:21:5a:1d:10:eb:d7:ab:a4:56:db:a8:12:5c:db:6c:3a:
         5b:a2:3d:b0:92:9c:b0:a4:33:4e:6d:68:1e:6b:fe:71:ca:e7:
         ef:57:3a:eb:c9:fe:55:6b:05:4f:0b:a5:70:4c:8f:de:0e:83:
         2d:fd:5b:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzA4FoRvPMqwc7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk
MmE1MmY4ZTUtYmZkZi00YjMzLWFiZGUtYWVkOGI4Y2E0NjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OMw2rhHfjdmh1WZsZqv6pz3sSLUXaalymUc
BEQyHTht3gZiJhiizWe11zoAnE/Yj0ymtBs+qICO0oo923JIx0mtpnzsOLSJbVub
HKn5ukN7lQwcF3BWqAXl23btkH8mK2Ymf16wJB7/zWtRBNOI3pR60GQ3npT9cXfI
Yc15eMs2BahKKWFs/HIasZ9ptJCkyieRfv7Z9SCIpcMTrhwVbTnT5SgG1+evfQD2
KF7JWrS7dxWAd5EVvgVn5tWykT7JJRuWvDjdNn3Mg5Oc7EQ62C9SmGh9Q10btLqu
satKaksACE65xaR/OcMUUKjAPLKSP7vTwKZYjgq8xwJToOp1DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkToKVj0r1Ag7rJVsKBfSBvy3FhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2RiZTRkMmMtOGJmZS0z
ODFjLTg2ZWEtYTg0MmUzMTkyY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzkdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWMXcl41cTAInUBv5gkFnuQS/7dpjND7pCLsr4mGotFQM4dxoHXk7O0
7ydVZE26WzATWbS7ClxsZmolmj6aqgm0qSfFZHzODBZOwAgwyRb2MgVJrOkzB83T
SZm0K+pBkxl6Y0/9l/c270LaJYnza59QZVvZIhiT5p6Tlr0FC6dBjd+yk0eNPgZC
8p+FINenq6b5n0E7Ll3ZI8euj+4ch/Ra6TYnhTqhxFmqANniGuerihYZL7PkIP5n
NNksgAVe7ZIkVI3Wc38UIVodEOvXq6RW26gSXNtsOluiPbCSnLCkM05taB5r/nHK
5+9XOuvJ/lVrBU8LpXBMj94Ogy39W/4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org