Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/49764212-3861-344d-a417-c68133136ee7.roa
File:                     49764212-3861-344d-a417-c68133136ee7.roa (raw, json)
Hash identifier:          9wK2Bzli6g5TXfRlO0YMU2OwrGhefZk9ZUz/aP+vDEQ=
Subject key identifier:   F1:DA:5A:29:93:20:0F:63:0E:C6:F7:9C:EF:90:85:A2:78:3E:60:87
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F432858482BF556DF22425323DE5F7BC0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/49764212-3861-344d-a417-c68133136ee7.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        206.146.135.0/24 maxlen: 24
                          206.146.136.0/24 maxlen: 24
                          206.146.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:56:df:22:42:53:23:de:5f:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=17018e69-0dda-4d75-b50f-1f839b8af8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:72:ec:ac:3a:ab:39:33:d1:75:ce:34:b9:
                    e4:43:38:cd:63:15:2e:84:4e:39:c0:96:e5:9c:79:
                    d2:f4:60:71:fa:fe:df:46:a5:d8:32:b9:85:48:30:
                    6e:27:cd:75:3d:62:ec:f1:b7:e2:a9:f3:04:52:aa:
                    31:57:b3:20:f0:86:03:9d:14:cc:92:57:08:45:eb:
                    f7:89:31:22:ca:56:40:22:64:b5:f5:24:eb:d3:57:
                    71:83:d4:9c:87:c2:ed:7c:a1:38:21:6b:b1:48:19:
                    3e:bd:ec:01:7c:74:b8:dd:1d:69:10:43:83:15:41:
                    01:f4:de:e6:4f:b2:91:05:ae:4f:b4:2a:6e:51:90:
                    86:2f:6a:60:2f:b3:51:af:03:2a:1d:63:e0:37:08:
                    7d:b7:16:33:42:26:7b:81:a4:09:c0:68:30:4f:af:
                    39:4d:bd:97:77:9b:7e:24:7a:72:76:e3:c1:6d:48:
                    a4:dc:39:33:bb:56:c9:2c:f8:93:2f:fb:5e:e9:e1:
                    bb:6e:51:b3:28:c3:50:ce:de:9b:0b:54:be:75:b4:
                    84:5f:f1:91:37:e7:e4:e5:d1:2e:ea:76:c6:fd:f0:
                    f2:1a:df:80:5f:47:48:4a:d4:86:d2:07:4a:bd:25:
                    89:13:de:14:f7:60:df:66:d7:3c:d6:d2:e6:cc:79:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:5A:29:93:20:0F:63:0E:C6:F7:9C:EF:90:85:A2:78:3E:60:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/49764212-3861-344d-a417-c68133136ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.135.0-206.146.137.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:95:32:e3:f0:6b:db:98:0c:9e:50:ae:68:c0:a7:60:f1:eb:
         4e:10:bd:cf:8b:8a:1c:58:9c:02:e9:69:b9:f1:73:19:42:cf:
         8e:00:59:07:48:91:05:b2:67:fc:62:c3:ac:b5:59:9f:9c:2f:
         1b:17:2b:fe:68:bf:61:15:5a:3a:e5:71:23:6e:34:35:96:3f:
         d4:96:37:db:a3:70:9b:8a:c4:e1:d4:e2:65:fb:35:95:48:ac:
         89:60:99:69:5c:03:f0:7a:bd:0e:33:06:12:ab:b6:cd:56:5e:
         9c:b2:e3:9b:65:21:17:45:2b:8a:b5:99:1b:1c:6d:72:79:7b:
         d8:d8:fa:77:84:34:f6:a0:2b:4a:b4:e2:ed:f2:68:5b:0f:30:
         2c:5e:2c:6c:2c:3e:62:af:ca:26:4d:4d:1f:9e:dc:11:8c:45:
         ee:24:35:e9:27:10:12:09:d6:f6:9a:30:5b:7a:28:e6:4b:10:
         9c:bd:95:b4:cf:4f:7f:8c:56:c6:c0:d4:16:84:6b:a1:27:dc:
         97:7d:ab:c8:25:d6:27:6a:31:d1:35:b2:b9:89:5a:2c:90:41:
         51:ca:06:52:e7:21:20:6c:ca:76:c5:57:47:ef:3d:96:6a:c6:
         e5:52:6b:db:07:e7:43:bd:52:b0:a4:79:94:ed:a8:12:60:00:
         86:4c:d3:2c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgr9VbfIkJTI95fe8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk
ZTNkMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTcwMThlNjktMGRkYS00ZDc1LWI1MGYtMWY4MzliOGFmOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZNy7Kw6qzkz0XXONLnkQzjNYxUuhE45wJbl
nHnS9GBx+v7fRqXYMrmFSDBuJ811PWLs8bfiqfMEUqoxV7Mg8IYDnRTMklcIRev3
iTEiylZAImS19STr01dxg9Sch8LtfKE4IWuxSBk+vewBfHS43R1pEEODFUEB9N7m
T7KRBa5PtCpuUZCGL2pgL7NRrwMqHWPgNwh9txYzQiZ7gaQJwGgwT685Tb2Xd5t+
JHpyduPBbUik3Dkzu1bJLPiTL/te6eG7blGzKMNQzt6bC1S+dbSEX/GRN+fk5dEu
6nbG/fDyGt+AX0dIStSG0gdKvSWJE94U92DfZtc81tLmzHmf6wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFPHaWimTIA9jDsb3nO+QhaJ4PmCHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0
MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNDk3NjQyMTItMzg2MS0z
NDRkLWE0MTctYzY4MTMzMTM2ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm
YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl
ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz
NGYxZWRlM2QuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADOkocD
BAHOkogwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAM5Uy4/Br25gMnlCuaMCnYPHrThC9z4uKHFicAulpufFz
GULPjgBZB0iRBbJn/GLDrLVZn5wvGxcr/mi/YRVaOuVxI240NZY/1JY326Nwm4rE
4dTiZfs1lUisiWCZaVwD8Hq9DjMGEqu2zVZenLLjm2UhF0UrirWZGxxtcnl72Nj6
d4Q09qArSrTi7fJoWw8wLF4sbCw+Yq/KJk1NH57cEYxF7iQ16ScQEgnW9powW3oo
5ksQnL2VtM9Pf4xWxsDUFoRroSfcl32ryCXWJ2ox0TWyuYlaLJBBUcoGUuchIGzK
dsVXR+89lmrG5VJr2wfnQ71SsKR5lO2oEmAAhkzTLA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:27 2025 by rpki-client