Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa
File:                     fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (raw, json)
Hash identifier:          OQk/Mj0GoQ7zPCQf1jeF/CPDukuI1ZKT9vp/IcZ2PEU=
Subject key identifier:   22:45:B8:5B:63:88:EA:FE:E7:59:FB:DD:ED:FA:F7:10:2B:52:24:3A
Certificate issuer:       /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial:       010D0C9F432858474B1B54278E79BB4BE5A88700
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     0
IP address blocks:        206.41.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:54:27:8e:79:bb:4b:e5:a8:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=e74c1d55-c491-49db-903c-6b61c1611304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:05:2b:5a:06:cd:c8:ee:96:bf:de:5c:8d:e4:
                    43:a3:b4:08:73:f7:80:04:53:08:bc:13:89:05:1e:
                    d6:c2:57:b7:fe:56:df:5d:c7:22:c8:d1:cc:e1:10:
                    ab:4d:7b:88:4d:0b:65:42:f7:3a:f9:ff:8c:61:8d:
                    79:6f:23:b7:f3:41:bb:a0:fa:b5:bc:05:f1:e4:49:
                    7e:75:7b:da:1f:5e:bb:cc:c8:b9:e3:3e:d3:33:1c:
                    a5:43:ef:f3:12:db:47:d4:fa:ed:7d:a6:b2:cb:09:
                    c3:d2:57:e0:d0:2e:f4:10:47:bc:c8:d2:24:a3:01:
                    79:8d:7b:ca:57:2d:28:c2:3c:7d:fe:f6:2a:d7:a7:
                    d9:af:1b:e5:0f:3d:7a:d3:62:21:8c:ec:20:01:ba:
                    98:72:f9:01:f0:89:b8:bf:2f:79:32:c1:67:c8:3b:
                    34:10:2d:74:23:73:b5:28:ad:30:07:9f:55:ad:83:
                    ef:b5:f5:68:79:f1:97:5e:97:68:d6:bb:14:d1:4e:
                    26:15:bd:39:ca:f4:d5:ff:51:e7:4b:e4:fc:ea:73:
                    71:71:22:fc:08:4a:8e:0c:65:08:9a:83:63:50:38:
                    14:5c:bb:f4:f2:88:d5:19:34:54:8c:35:e1:d1:64:
                    50:92:e3:49:e9:7d:35:6d:24:d2:23:8b:55:72:ef:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:B8:5B:63:88:EA:FE:E7:59:FB:DD:ED:FA:F7:10:2B:52:24:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:1a:13:d4:1d:7f:a5:b7:5a:a4:13:9a:2a:54:31:7d:ee:
         5a:5a:49:53:d2:e4:45:b1:8d:43:2d:4c:62:56:8c:c8:7b:18:
         57:03:4a:0e:c9:65:0d:5e:0c:27:d0:5b:e7:d1:03:02:3b:72:
         f4:94:a3:ac:f3:e7:db:97:2f:5d:91:3a:64:fd:bb:7c:47:ec:
         a3:9f:59:d9:4c:d5:18:e1:82:65:09:fb:c2:bd:50:35:c3:4d:
         ee:a2:75:b5:6c:84:5e:2e:86:d3:32:3e:84:7e:2e:34:72:b2:
         f2:55:22:b0:8e:9b:5c:7c:6a:95:bd:bd:82:68:84:1c:2f:77:
         65:6d:62:8c:26:59:d4:0e:74:28:e5:b8:b1:5b:2c:9f:2a:aa:
         7b:86:18:5a:53:6f:78:28:02:cd:d6:54:14:0c:f1:36:c0:3b:
         4f:ae:34:1d:8e:b8:f9:bb:5f:0a:5e:3d:c5:f7:dd:1e:ef:c3:
         30:0b:53:e3:61:7e:92:01:e1:27:cb:34:bb:44:ea:29:f7:a1:
         b5:96:b7:93:c5:f4:6f:1a:7d:b2:60:64:f4:f8:e2:d2:cc:a2:
         b4:73:75:44:76:5b:8b:63:8f:a8:46:de:8f:8e:ab:0e:b9:e4:
         59:2b:a1:0d:99:11:1d:56:ed:d2:6e:c6:6a:60:37:66:0b:a3:
         5e:a1:95:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG1Qnjnm7S+WohwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh
YTk5MB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTc0YzFkNTUtYzQ5MS00OWRiLTkwM2MtNmI2MWMxNjExMzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QUrWgbNyO6Wv95cjeRDo7QIc/eABFMIvBOJ
BR7Wwle3/lbfXcciyNHM4RCrTXuITQtlQvc6+f+MYY15byO380G7oPq1vAXx5El+
dXvaH167zMi54z7TMxylQ+/zEttH1PrtfaayywnD0lfg0C70EEe8yNIkowF5jXvK
Vy0owjx9/vYq16fZrxvlDz1602IhjOwgAbqYcvkB8Im4vy95MsFnyDs0EC10I3O1
KK0wB59VrYPvtfVoefGXXpdo1rsU0U4mFb05yvTV/1HnS+T86nNxcSL8CEqODGUI
moNjUDgUXLv08ojVGTRUjDXh0WRQkuNJ6X01bSTSI4tVcu/GWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJFuFtjiOr+51n73e369xArUiQ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl
MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvZmMyYmVlZGYtY2FmYy0z
NjU4LWIzZGQtMTI1ZjJiYTNkMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj
MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw
YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk
YmM3MGFhOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0FGhPUHX+lt1qkE5oqVDF97lpaSVPS5EWxjUMtTGJWjMh7GFcDSg7J
ZQ1eDCfQW+fRAwI7cvSUo6zz59uXL12ROmT9u3xH7KOfWdlM1RjhgmUJ+8K9UDXD
Te6idbVshF4uhtMyPoR+LjRysvJVIrCOm1x8apW9vYJohBwvd2VtYowmWdQOdCjl
uLFbLJ8qqnuGGFpTb3goAs3WVBQM8TbAO0+uNB2OuPm7XwpePcX33R7vwzALU+Nh
fpIB4SfLNLtE6in3obWWt5PF9G8afbJgZPT44tLMorRzdUR2W4tjj6hG3o+Oqw65
5FkroQ2ZER1W7dJuxmpgN2YLo16hlXI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:24 2024 by rpki-client on console-ams.rpki-client.org