Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/81bea281-76ca-3ea7-af8b-28787cd7da5f.roa
File:                     81bea281-76ca-3ea7-af8b-28787cd7da5f.roa (raw, json)
Hash identifier:          v+oPCgS7gsCPb4/l9H9bNiO0SYzy9TAAAxns8vYHpvs=
Subject key identifier:   4F:84:DF:02:41:89:6A:E3:C8:FC:1E:AB:19:9F:9F:CE:8F:9C:11:D6
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285847B5314D2994C475960BB419C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/81bea281-76ca-3ea7-af8b-28787cd7da5f.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     209
IP address blocks:        206.128.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:4d:29:94:c4:75:96:0b:b4:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=cf9570ac-7dc1-4459-9315-b65e9a6077ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5e:a7:d4:d5:74:e3:5c:8c:5f:00:d0:d4:57:
                    c8:15:5e:55:6a:61:b1:b0:6d:00:48:0b:cf:5b:88:
                    c8:88:0f:c9:05:11:0b:29:aa:01:15:61:99:09:72:
                    2f:c4:fc:d1:89:3e:1e:21:90:c0:ce:d2:95:17:78:
                    e0:0d:e0:ca:12:43:b4:9c:d9:68:3a:04:4a:1e:a6:
                    18:b1:14:a7:55:2c:36:8a:3f:a7:67:dd:57:94:d4:
                    d0:ec:72:d0:48:8d:b3:30:90:64:0d:94:85:78:56:
                    14:8c:0f:74:23:a6:8c:15:9f:d6:5f:6c:c7:1e:0f:
                    b5:dd:fc:fe:db:e1:4d:36:53:91:12:6f:7e:95:8a:
                    ec:0d:50:3b:5b:8c:56:62:0c:34:ff:ef:f7:bc:e6:
                    6d:02:99:3e:4c:14:5e:8b:4f:29:31:2d:42:62:ed:
                    22:62:38:10:42:85:a6:15:f1:fc:5c:be:52:7f:6a:
                    5e:5e:3a:2f:81:d7:b7:2c:0e:d5:79:f2:db:29:4f:
                    38:d5:e2:57:48:aa:ea:9e:95:0d:a7:23:8c:e7:e8:
                    5b:48:bc:ac:2a:e9:80:84:33:3f:af:fe:a9:61:3b:
                    41:08:e6:d0:f0:78:8e:90:b9:73:f8:3e:b0:87:84:
                    d4:c8:e2:d6:de:d3:97:b2:5b:4c:70:49:00:61:ff:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:DF:02:41:89:6A:E3:C8:FC:1E:AB:19:9F:9F:CE:8F:9C:11:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/81bea281-76ca-3ea7-af8b-28787cd7da5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.128.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c7:94:b3:d1:ec:e2:0e:00:3b:49:90:d0:f7:29:8b:80:bc:
         c4:06:9b:fa:10:9d:54:60:d8:f3:3e:ec:91:21:b3:11:2b:03:
         4f:ce:32:c4:9e:18:96:69:2d:3e:64:b3:e6:29:d7:bc:c2:cd:
         db:d9:2a:5d:48:c0:bb:09:c9:b2:4c:31:28:41:b7:b8:32:1a:
         2e:da:0f:5c:8a:0e:71:47:51:51:14:87:88:8e:99:8c:14:94:
         8c:be:71:89:37:17:ff:61:68:56:9d:e3:af:58:6b:50:04:17:
         e0:54:01:c2:9e:49:1e:81:cf:87:74:e2:b1:9d:28:09:a2:88:
         b4:2b:e2:e9:9b:62:52:92:e2:83:04:57:5d:43:83:39:57:72:
         b8:d6:5e:87:55:0d:ba:2b:d3:8c:a1:f4:b5:5f:45:9f:cd:88:
         cd:91:08:b2:65:89:83:f9:77:b0:85:38:d4:86:63:d8:5d:7e:
         cf:f0:8f:43:29:dc:a1:07:f4:a4:11:39:eb:63:d1:83:09:f7:
         fe:6d:f0:b0:87:9f:83:81:b8:b8:c7:0c:62:16:0b:bd:b8:44:
         38:c1:ef:14:76:b5:83:9f:72:d4:67:81:1e:52:ee:a9:82:24:
         0e:23:f7:53:04:95:85:db:90:5b:82:5d:4e:b4:59:6b:a4:16:
         e6:08:77:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MU0plMR1lgu0GcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk
Y2Y5NTcwYWMtN2RjMS00NDU5LTkzMTUtYjY1ZTlhNjA3N2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA316n1NV041yMXwDQ1FfIFV5VamGxsG0ASAvP
W4jIiA/JBRELKaoBFWGZCXIvxPzRiT4eIZDAztKVF3jgDeDKEkO0nNloOgRKHqYY
sRSnVSw2ij+nZ91XlNTQ7HLQSI2zMJBkDZSFeFYUjA90I6aMFZ/WX2zHHg+13fz+
2+FNNlOREm9+lYrsDVA7W4xWYgw0/+/3vOZtApk+TBRei08pMS1CYu0iYjgQQoWm
FfH8XL5Sf2peXjovgde3LA7VefLbKU841eJXSKrqnpUNpyOM5+hbSLysKumAhDM/
r/6pYTtBCObQ8HiOkLlz+D6wh4TUyOLW3tOXsltMcEkAYf/rTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+E3wJBiWrjyPweqxmfn86PnBHWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODFiZWEyODEtNzZjYS0z
ZWE3LWFmOGItMjg3ODdjZDdkYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzoDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjHlLPR7OIOADtJkND3KYuAvMQGm/oQnVRg2PM+7JEhsxErA0/OMsSe
GJZpLT5ks+Yp17zCzdvZKl1IwLsJybJMMShBt7gyGi7aD1yKDnFHUVEUh4iOmYwU
lIy+cYk3F/9haFad469Ya1AEF+BUAcKeSR6Bz4d04rGdKAmiiLQr4umbYlKS4oME
V11DgzlXcrjWXodVDbor04yh9LVfRZ/NiM2RCLJliYP5d7CFONSGY9hdfs/wj0Mp
3KEH9KQROetj0YMJ9/5t8LCHn4OBuLjHDGIWC724RDjB7xR2tYOfctRngR5S7qmC
JA4j91MElYXbkFuCXU60WWukFuYId9o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org