Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa
File:                     ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa (raw, json)
Hash identifier:          b4WhhgEL5+q6ByBYtWig3Au4nRE8fcwCISTVlovEXlc=
Subject key identifier:   F9:F1:99:1F:3E:9F:E5:FC:FB:64:1B:54:06:3C:AF:55:B5:B6:55:B2
Certificate issuer:       /CN=f229bba4-1d66-4a9f-8e40-159e94bdd015
Certificate serial:       010D0C9F432858473095F0E965CFD06E2721F480
Authority key identifier: 56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        206.198.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f0:e9:65:cf:d0:6e:27:21:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f229bba4-1d66-4a9f-8e40-159e94bdd015
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=e642e917-a08b-40df-85f7-7845747b8d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:9a:7c:d6:7b:a9:f8:31:1c:7e:b0:e0:46:
                    39:39:d0:96:82:8e:9b:21:3a:1c:83:d3:c9:a2:93:
                    9f:15:6a:62:d7:33:14:f7:46:c4:66:60:24:24:0a:
                    50:ef:90:d2:dc:c8:d0:fb:0f:99:4b:b3:9e:29:5c:
                    91:bc:61:91:0f:1b:19:e0:96:0d:c8:13:48:bb:b8:
                    b3:44:96:87:31:17:88:41:56:2c:0f:e7:c7:f6:74:
                    e4:35:42:5d:a7:fc:cf:85:76:56:d8:60:a5:66:32:
                    ce:e8:ba:47:01:c6:f4:95:20:33:f8:35:b8:a6:15:
                    50:7a:a6:07:d0:0a:0c:d7:a2:9c:20:f5:fa:b4:7d:
                    12:d7:96:ec:13:02:5a:bd:4f:81:2a:e4:1e:a1:cf:
                    e6:2e:4d:26:d0:a7:94:ee:a6:55:8d:fd:02:fe:6a:
                    83:9a:fc:13:15:3b:57:60:e9:c5:ce:19:22:52:ac:
                    89:f0:2e:81:3a:d2:8f:de:86:7b:70:0a:a3:a9:cf:
                    fb:29:20:be:11:fc:65:2e:cf:78:64:cd:12:5d:cc:
                    78:0a:ba:ce:ae:06:ec:fe:7f:68:0e:de:50:55:cb:
                    8d:5f:31:e6:de:1b:8d:9c:f4:80:5b:f1:01:5f:52:
                    1f:34:a9:3a:ab:8c:78:1d:29:2e:16:7d:9e:73:3b:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:99:1F:3E:9F:E5:FC:FB:64:1B:54:06:3C:AF:55:B5:B6:55:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl

            X509v3 Authority Key Identifier:
                keyid:56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:1e:2d:76:a4:b7:cb:d4:a5:63:2e:57:a6:b7:92:89:6a:
         09:2f:3e:bc:14:11:c5:64:63:d0:1c:26:78:4a:e7:e3:90:cc:
         b6:b8:14:73:c9:4f:73:90:18:83:95:e0:41:b1:fc:e2:46:b5:
         dc:1f:01:6f:10:25:08:63:53:23:b7:e0:84:0a:c7:2b:7e:43:
         67:a9:29:3f:42:dc:b5:45:f2:b2:45:7c:55:53:ca:eb:1c:32:
         13:3d:ab:f5:86:07:97:ff:ad:31:45:d4:a5:fe:a7:d6:54:d3:
         7e:1b:96:44:eb:b2:16:92:80:97:4d:07:0c:b4:56:d5:aa:c0:
         6e:a2:49:81:0c:7d:41:d0:7d:2f:f6:0b:18:0d:05:09:5a:b3:
         55:d4:0e:6b:31:bb:9a:c9:b8:20:9b:ea:3e:63:5f:9a:ec:4e:
         a5:5f:53:a8:bc:c6:25:b4:e6:85:3d:c1:bc:e4:d2:88:c4:bd:
         96:e4:8a:89:ac:7d:e3:54:6b:c0:32:6c:5c:43:f7:2e:9b:fa:
         1e:99:ef:ad:4d:ac:15:1f:33:d2:ac:1c:e1:89:fe:dc:a5:97:
         b7:02:86:aa:8a:04:77:a0:46:c8:0f:a9:94:33:d6:16:5c:01:
         f4:73:04:dc:11:1e:42:71:9f:30:4c:90:07:35:e7:89:7f:d1:
         b7:69:3a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlfDpZc/Qbich9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjIyOWJiYTQtMWQ2Ni00YTlmLThlNDAtMTU5ZTk0YmRk
MDE1MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTY0MmU5MTctYTA4Yi00MGRmLTg1ZjctNzg0NTc0N2I4ZDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhaafNZ7qfgxHH6w4EY5OdCWgo6bITocg9PJ
opOfFWpi1zMU90bEZmAkJApQ75DS3MjQ+w+ZS7OeKVyRvGGRDxsZ4JYNyBNIu7iz
RJaHMReIQVYsD+fH9nTkNUJdp/zPhXZW2GClZjLO6LpHAcb0lSAz+DW4phVQeqYH
0AoM16KcIPX6tH0S15bsEwJavU+BKuQeoc/mLk0m0KeU7qZVjf0C/mqDmvwTFTtX
YOnFzhkiUqyJ8C6BOtKP3oZ7cAqjqc/7KSC+EfxlLs94ZM0SXcx4CrrOrgbs/n9o
Dt5QVcuNXzHm3huNnPSAW/EBX1IfNKk6q4x4HSkuFn2ecztltwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnxmR8+n+X8+2QbVAY8r1W1tlWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5
YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTllOTRiZGQwMTUvYWM4YmZhZmQtNzgyZC0z
ZjJhLWJhZGEtOGY1MTA3M2E5MmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjIyOWJiYTQtMWQ2Ni00YTlmLThl
NDAtMTU5ZTk0YmRkMDE1L2YyMjliYmE0LTFkNjYtNGE5Zi04ZTQwLTE1OWU5NGJk
ZDAxNS5jcmwwHwYDVR0jBBgwFoAUVkHYSKy5KXkKGIzNdOJUnD31htkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTll
OTRiZGQwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsYlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPXHi12pLfL1KVjLlemt5KJagkvPrwUEcVkY9AcJnhK5+OQzLa4FHPJ
T3OQGIOV4EGx/OJGtdwfAW8QJQhjUyO34IQKxyt+Q2epKT9C3LVF8rJFfFVTyusc
MhM9q/WGB5f/rTFF1KX+p9ZU034blkTrshaSgJdNBwy0VtWqwG6iSYEMfUHQfS/2
CxgNBQlas1XUDmsxu5rJuCCb6j5jX5rsTqVfU6i8xiW05oU9wbzk0ojEvZbkioms
feNUa8AybFxD9y6b+h6Z761NrBUfM9KsHOGJ/tyll7cChqqKBHegRsgPqZQz1hZc
AfRzBNwRHkJxnzBMkAc154l/0bdpOqw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:05 2024 by rpki-client on console-ams.rpki-client.org