Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/fbf30685-04e3-36db-b832-56e8fe4681ad.roa
File:                     fbf30685-04e3-36db-b832-56e8fe4681ad.roa (raw, json)
Hash identifier:          gXMjXf5QiZFwdapCEkf1wZ+grsmaPm1GjnhBfFeUY/8=
Subject key identifier:   7B:7A:A8:F0:19:67:79:C0:7D:D9:3A:C1:0E:B1:DD:FE:9C:BF:93:B5
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584561286CE0FA32F225A5ADD700
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/fbf30685-04e3-36db-b832-56e8fe4681ad.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     33211
IP address blocks:        206.41.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:6c:e0:fa:32:f2:25:a5:ad:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=d51856ee-0853-428d-8416-9186cc2069ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:eb:b5:18:83:f5:9f:6d:00:62:f0:d3:5e:
                    ee:6a:4f:f8:b2:da:54:1c:ad:70:67:b5:2a:a3:a8:
                    6b:d4:da:fc:21:6b:e9:8d:12:35:f6:39:13:e0:f0:
                    20:07:f1:5a:7f:d8:92:fa:00:43:87:e1:65:1e:4b:
                    cd:26:b4:90:8d:be:bb:48:b0:fc:6c:79:1c:e5:1d:
                    54:38:b5:6f:f3:6c:b7:ca:1e:c0:5a:2b:0d:3b:bd:
                    11:63:4e:5c:50:10:94:96:e5:81:73:d8:99:2d:20:
                    fe:06:79:63:a5:90:c6:72:53:40:58:7e:42:71:55:
                    70:fe:ba:84:eb:d9:e8:5b:4f:42:07:03:9f:19:57:
                    77:00:81:0a:c5:8e:33:18:07:06:6b:9f:d2:d3:6c:
                    fc:19:b2:dd:73:14:9b:24:9b:9f:de:6b:d8:a6:9d:
                    4d:9b:ce:6f:ac:87:59:ef:fe:aa:55:64:a8:44:9f:
                    e4:39:e1:6b:1c:23:7a:75:6a:61:e7:cc:73:f3:d5:
                    15:f4:95:79:3d:43:e7:fe:c1:22:10:3e:fc:40:2b:
                    e9:ad:cc:ad:70:9f:dd:c5:77:c2:a8:10:c8:7e:ec:
                    d0:51:92:7c:3c:76:a6:80:af:b6:f2:7e:9f:22:cc:
                    f9:05:ea:9a:66:b6:93:21:55:57:1e:01:5d:ac:40:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:A8:F0:19:67:79:C0:7D:D9:3A:C1:0E:B1:DD:FE:9C:BF:93:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/fbf30685-04e3-36db-b832-56e8fe4681ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:09:4c:b1:0d:34:fa:57:49:d2:70:38:ed:90:60:27:89:
         11:72:55:2b:4c:ae:81:65:a4:b2:13:66:31:36:c8:21:39:46:
         e1:71:80:13:75:71:bb:a7:10:78:32:f2:da:88:22:89:b2:95:
         42:9f:b1:13:09:f2:ca:69:93:b1:d5:6a:3e:c2:fa:1c:b1:01:
         0b:b6:3e:35:3a:a5:48:ab:9e:73:66:57:25:eb:29:95:be:eb:
         c8:3d:1a:71:dc:87:b3:5d:32:37:dc:e4:24:3d:81:92:bf:31:
         9b:77:62:37:b6:b3:d8:ce:09:d4:10:20:86:9f:f6:11:b5:b0:
         b1:c0:9d:c6:4e:83:b4:e7:bd:22:00:5b:b2:cd:6c:2e:73:1e:
         93:f3:0a:1c:ce:86:c2:35:be:2c:dd:ca:7d:33:73:ed:38:4d:
         26:65:72:f7:0d:96:dd:8a:0e:cf:53:3c:4e:c5:f8:e9:d5:d8:
         f9:1d:28:cf:00:18:58:e8:82:ad:77:9d:c3:c0:52:d2:6c:2d:
         33:90:23:fe:ee:1c:3e:79:bf:d9:91:cb:bc:41:7a:95:dc:8e:
         0b:f8:d9:33:9e:8f:bd:56:53:8e:f6:1e:29:bf:dc:83:e8:84:
         2a:d8:5c:6a:50:47:49:d3:77:6f:44:d5:ec:1d:4c:2b:f2:b2:
         ce:48:9d:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKGzg+jLyJaWt1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0
ZDZlMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
ZDUxODU2ZWUtMDg1My00MjhkLTg0MTYtOTE4NmNjMjA2OWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3HrtRiD9Z9tAGLw017uak/4stpUHK1wZ7Uq
o6hr1Nr8IWvpjRI19jkT4PAgB/Faf9iS+gBDh+FlHkvNJrSQjb67SLD8bHkc5R1U
OLVv82y3yh7AWisNO70RY05cUBCUluWBc9iZLSD+BnljpZDGclNAWH5CcVVw/rqE
69noW09CBwOfGVd3AIEKxY4zGAcGa5/S02z8GbLdcxSbJJuf3mvYpp1Nm85vrIdZ
7/6qVWSoRJ/kOeFrHCN6dWph58xz89UV9JV5PUPn/sEiED78QCvprcytcJ/dxXfC
qBDIfuzQUZJ8PHamgK+28n6fIsz5BeqaZraTIVVXHgFdrEAuJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHt6qPAZZ3nAfdk6wQ6x3f6cv5O1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz
MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZmJmMzA2ODUtMDRlMy0z
NmRiLWI4MzItNTZlOGZlNDY4MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz
MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl
NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy
MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLACUyxDTT6V0nScDjtkGAniRFyVStMroFlpLITZjE2yCE5RuFxgBN1
cbunEHgy8tqIIomylUKfsRMJ8sppk7HVaj7C+hyxAQu2PjU6pUirnnNmVyXrKZW+
68g9GnHch7NdMjfc5CQ9gZK/MZt3Yje2s9jOCdQQIIaf9hG1sLHAncZOg7TnvSIA
W7LNbC5zHpPzChzOhsI1vizdyn0zc+04TSZlcvcNlt2KDs9TPE7F+OnV2PkdKM8A
GFjogq13ncPAUtJsLTOQI/7uHD55v9mRy7xBepXcjgv42TOej71WU472Him/3IPo
hCrYXGpQR0nTd29E1ewdTCvyss5InWQ=
-----END CERTIFICATE-----
Generated at Fri May 10 19:20:28 2024 by rpki-client on console-ams.rpki-client.org