Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa
File:                     6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa (raw, json)
Hash identifier:          tFsSxbfbYIb3IhGJn0vrTTGEex7dWU/XYwcBuIfBetk=
Subject key identifier:   4F:E8:54:5A:75:AB:45:1E:5D:D0:36:78:AE:56:13:D5:00:8C:D7:A2
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F4328584569F9BDFBB035ED0B91C96878
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa
Signing time:             Tue 02 Apr 2024 16:49:09 +0000
ROA not before:           Tue 02 Apr 2024 16:49:09 +0000
ROA not after:            Mon 01 Jul 2024 16:49:09 +0000
asID:                     14618
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:f9:bd:fb:b0:35:ed:0b:91:c9:68:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Apr  2 16:49:09 2024 GMT
            Not After : Jul  1 16:49:09 2024 GMT
        Subject: CN=cf596dd0-fa77-46aa-bf6c-aa3676b0408b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:c2:0a:93:93:b9:74:85:92:e7:41:99:24:
                    78:34:23:61:df:51:f1:56:ea:a1:43:93:ec:51:31:
                    99:7a:0c:b8:b3:cc:2e:b4:d7:b4:11:c5:cd:08:09:
                    93:b3:97:30:c1:88:96:27:83:c5:b6:de:3f:b0:a2:
                    42:23:dc:d6:98:94:b5:c8:2e:77:17:8e:87:08:2f:
                    80:b7:0a:1a:fd:7c:f1:c2:49:cc:ae:b1:ad:b7:d3:
                    94:63:82:11:09:22:95:6f:3f:77:ec:a3:47:5c:d9:
                    94:de:b9:01:f5:06:9e:c6:21:af:c2:f5:40:4d:f2:
                    71:20:d0:77:34:a4:0b:de:27:13:ba:3a:04:d7:1a:
                    a7:e1:c5:2a:70:b2:14:9e:5b:e8:b1:80:dd:04:77:
                    3c:b5:7b:a3:1c:0f:a2:b8:69:f5:53:92:cb:48:ff:
                    10:b3:13:eb:26:be:b6:ec:db:0c:ff:b3:10:53:e1:
                    88:ae:a6:47:83:65:08:7c:17:0e:13:b5:52:a2:08:
                    60:ef:6f:ff:1f:af:03:09:d4:6b:73:19:90:6c:72:
                    de:02:76:87:22:f5:9f:bc:74:39:0f:3b:85:42:f7:
                    98:a4:19:85:ab:ee:b7:9a:b7:61:9d:e0:d0:01:46:
                    92:5b:bc:19:65:b9:fb:99:aa:a9:10:75:91:5b:c7:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E8:54:5A:75:AB:45:1E:5D:D0:36:78:AE:56:13:D5:00:8C:D7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:0c:c7:f5:e1:bd:b5:c2:2c:76:9f:e5:ce:ac:b7:7a:a6:
         84:06:26:c1:ca:0e:47:82:b2:99:fe:65:3c:21:c9:42:f6:35:
         0c:d6:2e:0e:9d:86:1f:9d:01:f9:c9:80:60:57:85:59:f1:21:
         ce:05:11:cf:4c:cc:6c:c6:91:59:92:6f:cd:85:4e:e8:4a:38:
         70:2c:7e:54:3f:a2:07:8c:e2:2c:a1:15:44:fa:11:97:78:79:
         19:6a:e9:32:c3:82:4d:5d:c1:2e:f0:3a:f6:24:12:30:b4:3e:
         51:ed:8f:77:98:f3:58:1d:b3:2b:8d:95:24:b2:09:df:53:23:
         ef:d9:15:e6:24:bd:4a:cb:1c:5b:9b:0b:9b:75:41:89:5b:44:
         b3:97:32:15:20:51:29:f1:9b:fe:ab:dc:f8:46:e3:31:f2:1d:
         d2:58:21:83:b4:38:de:37:ee:be:c7:6a:9f:2f:86:1b:0c:54:
         6b:15:81:9f:a9:7d:10:4f:85:cb:4d:bc:09:e4:65:53:de:a2:
         a8:d5:9c:19:3e:1e:7d:e9:a8:33:9f:a0:1c:30:cc:28:c8:6c:
         22:67:3f:a1:6e:f2:8f:77:d5:e4:77:0f:07:9b:16:b8:b9:da:
         d3:c0:96:01:f3:e0:9c:4c:f2:e9:4c:28:62:96:c7:18:f6:cc:
         73:ea:6e:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVp+b37sDXtC5HJaHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY1ZTliNWMtMDU2ZS00NWQzLTg5YjItNjNjYjYyYjg0
MjEwMB4XDTI0MDQwMjE2NDkwOVoXDTI0MDcwMTE2NDkwOVowLzEtMCsGA1UEAxMk
Y2Y1OTZkZDAtZmE3Ny00NmFhLWJmNmMtYWEzNjc2YjA0MDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+rCCpOTuXSFkudBmSR4NCNh31HxVuqhQ5Ps
UTGZegy4s8wutNe0EcXNCAmTs5cwwYiWJ4PFtt4/sKJCI9zWmJS1yC53F46HCC+A
twoa/XzxwknMrrGtt9OUY4IRCSKVbz937KNHXNmU3rkB9QaexiGvwvVATfJxINB3
NKQL3icTujoE1xqn4cUqcLIUnlvosYDdBHc8tXujHA+iuGn1U5LLSP8QsxPrJr62
7NsM/7MQU+GIrqZHg2UIfBcOE7VSoghg72//H68DCdRrcxmQbHLeAnaHIvWfvHQ5
DzuFQveYpBmFq+63mrdhneDQAUaSW7wZZbn7maqpEHWRW8ftVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/oVFp1q0UeXdA2eK5WE9UAjNeiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNjVl
OWI1Yy0wNTZlLTQ1ZDMtODliMi02M2NiNjJiODQyMTAvNmJmNzRkOTItZWI3NC0z
ZjJlLWJlM2MtMmU3ZjBiM2U3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjY1ZTliNWMtMDU2ZS00NWQzLTg5
YjItNjNjYjYyYjg0MjEwL2Y2NWU5YjVjLTA1NmUtNDVkMy04OWIyLTYzY2I2MmI4
NDIxMC5jcmwwHwYDVR0jBBgwFoAUo5pTCNpO4oU1ZvDqjbS6GOe0ZkIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mNjVlOWI1Yy0wNTZlLTQ1ZDMtODliMi02M2Ni
NjJiODQyMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsmoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1CDMf14b21wix2n+XOrLd6poQGJsHKDkeCspn+ZTwhyUL2NQzWLg6d
hh+dAfnJgGBXhVnxIc4FEc9MzGzGkVmSb82FTuhKOHAsflQ/ogeM4iyhFUT6EZd4
eRlq6TLDgk1dwS7wOvYkEjC0PlHtj3eY81gdsyuNlSSyCd9TI+/ZFeYkvUrLHFub
C5t1QYlbRLOXMhUgUSnxm/6r3PhG4zHyHdJYIYO0ON437r7Hap8vhhsMVGsVgZ+p
fRBPhctNvAnkZVPeoqjVnBk+Hn3pqDOfoBwwzCjIbCJnP6Fu8o931eR3DwebFri5
2tPAlgHz4JxM8ulMKGKWxxj2zHPqbqU=
-----END CERTIFICATE-----
Generated at Thu May 2 01:25:28 2024 by rpki-client on console-fra.rpki-client.org