Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa
File:                     9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa (raw, json)
Hash identifier:          E+ODclFw9sualh7RucOL9ARx4AbFHENrvllsOfUeY3E=
Subject key identifier:   F5:16:FE:7F:DA:7A:05:CD:36:66:73:2B:BA:70:B1:C8:70:47:2A:1A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584742BB52272656EB4DFAB22E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     3223
IP address blocks:        206.123.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:52:27:26:56:eb:4d:fa:b2:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=cca1c34d-e92c-4703-9044-391935e90109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:d6:02:94:9e:1a:13:83:02:e1:49:8f:ea:
                    3a:5f:fb:e7:c9:4e:a0:8c:d8:64:27:0a:21:05:4f:
                    f2:bb:b4:8c:05:09:22:02:c3:0b:11:f6:07:62:0f:
                    46:b6:64:91:41:54:08:40:70:dc:d3:4c:d8:96:21:
                    cc:15:34:0f:2b:ed:9d:c1:08:a6:0b:d6:d5:53:b4:
                    8b:86:50:b2:5f:b4:69:79:d9:c2:73:33:c8:cc:5c:
                    ed:0a:6f:3c:e8:89:d7:37:21:79:45:08:9a:a2:68:
                    21:df:03:4a:1f:03:58:2f:72:a0:54:24:8e:4a:4e:
                    bd:0a:72:d6:14:9d:dc:cc:8f:37:7a:e1:a2:d9:6d:
                    ab:d9:e3:5b:d5:57:e8:67:31:d6:3e:73:08:a3:be:
                    e6:07:0b:4d:7c:3e:b0:dd:9f:a2:6c:17:63:c7:d8:
                    61:ab:75:76:83:ae:93:24:54:43:97:8d:6e:2c:24:
                    f9:0f:52:d5:7d:e1:98:07:97:c0:b0:25:95:91:9c:
                    81:2b:04:34:40:da:64:cd:eb:1d:1a:e8:d4:8b:7d:
                    c6:f3:e1:68:21:dc:c8:80:9b:97:cb:3b:eb:3e:06:
                    ac:c2:a8:96:65:4e:4b:a7:cd:ff:40:7c:24:ad:fe:
                    b4:e9:f3:3a:85:19:5d:ec:bd:66:5f:c0:69:91:4f:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:FE:7F:DA:7A:05:CD:36:66:73:2B:BA:70:B1:C8:70:47:2A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:97:37:5e:8b:fb:53:df:5d:c0:70:bc:7c:8c:ed:f4:a2:37:
         c9:57:fb:f2:96:a8:6f:6a:37:09:c9:25:62:90:66:b3:b2:1e:
         bf:10:c6:3d:9b:0e:7e:a0:8b:67:dc:0b:28:a9:df:a8:92:67:
         30:2a:6c:82:8c:3d:68:9b:12:ad:e2:83:81:a1:d2:c0:00:32:
         33:b9:5e:68:ed:2e:07:02:88:1b:7d:9a:c0:21:2c:41:3b:c7:
         0b:a6:f2:92:d7:00:e3:44:d2:3c:b4:55:5c:f2:62:75:91:0f:
         89:b1:00:80:13:08:c8:45:10:4a:d9:83:9b:f9:b2:12:0a:f7:
         da:ab:88:02:1b:d8:7b:90:18:47:f1:6d:b5:23:12:c1:db:66:
         00:05:80:90:56:50:b1:2c:0d:c0:b7:a9:59:2b:26:49:4c:3c:
         a8:53:61:c0:63:9c:da:ea:1c:31:2c:44:37:39:f3:ec:de:7b:
         24:b1:47:0d:9e:77:3b:b7:0d:d5:21:13:80:20:12:c7:6b:f8:
         2f:11:30:69:c0:76:79:8d:5f:f8:49:f0:3d:16:79:94:4b:43:
         18:7a:77:f9:3e:69:55:3f:9c:2b:b1:2b:f2:55:ca:f1:00:05:
         44:86:ce:3a:66:c8:c7:b4:ad:e3:4c:75:2a:62:ff:fa:5a:70:
         29:e8:54:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu1InJlbrTfqyLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
Y2NhMWMzNGQtZTkyYy00NzAzLTkwNDQtMzkxOTM1ZTkwMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRXWApSeGhODAuFJj+o6X/vnyU6gjNhkJwoh
BU/yu7SMBQkiAsMLEfYHYg9GtmSRQVQIQHDc00zYliHMFTQPK+2dwQimC9bVU7SL
hlCyX7RpednCczPIzFztCm886InXNyF5RQiaomgh3wNKHwNYL3KgVCSOSk69CnLW
FJ3czI83euGi2W2r2eNb1VfoZzHWPnMIo77mBwtNfD6w3Z+ibBdjx9hhq3V2g66T
JFRDl41uLCT5D1LVfeGYB5fAsCWVkZyBKwQ0QNpkzesdGujUi33G8+FoIdzIgJuX
yzvrPgaswqiWZU5Lp83/QHwkrf606fM6hRld7L1mX8BpkU+HdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUW/n/aegXNNmZzK7pwschwRyoaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWU2NmEyYjYtMzdmYy0z
OTI2LThhODMtOGMyNGYxZjRkZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeXN16L+1PfXcBwvHyM7fSiN8lX+/KWqG9qNwnJJWKQZrOyHr8Qxj2b
Dn6gi2fcCyip36iSZzAqbIKMPWibEq3ig4Gh0sAAMjO5XmjtLgcCiBt9msAhLEE7
xwum8pLXAONE0jy0VVzyYnWRD4mxAIATCMhFEErZg5v5shIK99qriAIb2HuQGEfx
bbUjEsHbZgAFgJBWULEsDcC3qVkrJklMPKhTYcBjnNrqHDEsRDc58+zeeySxRw2e
dzu3DdUhE4AgEsdr+C8RMGnAdnmNX/hJ8D0WeZRLQxh6d/k+aVU/nCuxK/JVyvEA
BUSGzjpmyMe0reNMdSpi//pacCnoVOM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org