Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa
File:                     39a77810-30a3-372e-830e-aae5c89981a4.roa (raw, json)
Hash identifier:          VWaCGB186RKVrFJiX2OlzeOVzctkIPpUtHL7zm2iay8=
Subject key identifier:   00:2B:40:F9:91:33:74:39:2C:59:C4:92:6D:BE:4C:F6:30:DC:AC:0B
Certificate issuer:       /CN=0c9dde20-a0e5-43e3-909b-aae15eae3752
Certificate serial:       010D0C9F432858458DD354D588B894D3AC816080
Authority key identifier: 24:74:F8:7F:03:0D:99:15:CD:B7:C0:74:44:5C:B4:43:31:17:96:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     32681
IP address blocks:        206.197.44.0/24 maxlen: 24
                          2620:b8:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:54:d5:88:b8:94:d3:ac:81:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9dde20-a0e5-43e3-909b-aae15eae3752
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=2e37ba66-816b-4373-a6f8-9a1293714f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:b1:29:71:e8:93:29:36:5a:0f:55:e9:24:
                    41:c9:dd:af:5c:2f:1d:21:43:c0:7b:33:65:b7:49:
                    8c:41:dc:75:0c:c0:8e:93:94:f3:dd:8e:fa:24:b6:
                    65:04:0d:8b:90:1d:de:f1:6b:ef:5e:cf:8c:52:05:
                    53:5f:c9:ae:91:48:f9:38:02:42:5a:56:97:23:10:
                    61:00:5c:67:dc:86:23:94:4d:70:7f:74:a9:57:32:
                    fc:0c:8f:ed:bb:5e:e0:9c:4a:37:38:20:96:74:c0:
                    40:1f:4f:48:a6:1c:2a:2e:30:cc:42:fa:ec:90:6e:
                    0a:dd:9c:8b:86:dc:ab:b7:a8:b4:6c:a2:1f:a9:5e:
                    8e:86:b1:0b:d8:27:55:f6:9d:87:3c:02:8b:c5:4c:
                    23:94:0d:4a:8c:e5:8b:48:1e:ef:b0:46:50:67:d0:
                    76:c5:a4:ee:10:24:5d:b0:ec:50:5c:8f:2d:e0:bc:
                    04:1b:e4:ed:0c:e1:22:7e:27:15:e5:67:da:1f:21:
                    32:f8:e3:77:00:b6:cd:19:e9:99:7b:27:fc:35:ff:
                    bf:25:65:91:45:3c:29:22:40:66:29:73:ff:1c:c1:
                    35:75:1d:fe:02:18:fe:01:cf:d3:7e:26:24:fd:bc:
                    da:ba:c7:ad:aa:59:8d:e1:77:13:ad:17:12:05:84:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:40:F9:91:33:74:39:2C:59:C4:92:6D:BE:4C:F6:30:DC:AC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.crl

            X509v3 Authority Key Identifier:
                keyid:24:74:F8:7F:03:0D:99:15:CD:B7:C0:74:44:5C:B4:43:31:17:96:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.44.0/24
                IPv6:
                  2620:b8:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:c0:8e:91:84:ed:88:b3:58:ce:11:db:d9:e8:a8:dc:1f:
         c4:36:66:07:ed:05:38:14:d0:0f:b4:5e:00:e6:c4:24:b8:f8:
         20:9b:fe:9d:91:99:fa:1e:99:7a:48:31:a1:47:cb:3f:92:9d:
         ad:dd:77:98:67:47:a5:61:59:46:b9:56:79:25:eb:59:0f:a1:
         bc:bc:3e:02:bb:0f:9b:fa:f0:cd:63:73:9b:a3:06:b8:7c:95:
         33:fb:aa:03:df:b3:53:31:ee:e8:14:81:57:83:93:77:29:03:
         fc:e1:c6:43:c0:2c:1e:44:dc:c4:55:78:d2:5f:f0:b5:1d:dc:
         b4:d5:e8:52:0b:c0:4c:03:d2:22:cb:03:da:91:c5:28:a8:04:
         b8:38:a2:60:3a:b8:a2:68:82:48:15:9a:48:b4:b0:cc:f7:c0:
         5d:0f:a1:05:9b:ec:64:60:b6:42:60:f7:e2:52:e6:95:21:93:
         56:61:45:71:05:8f:91:71:83:bf:28:04:06:a2:20:98:f0:05:
         a4:52:d5:15:27:60:eb:a6:89:80:a9:31:89:bc:53:39:e9:9e:
         69:40:ba:50:85:40:12:e2:a4:89:35:ab:7f:49:5c:79:c1:1b:
         5b:12:3f:b5:2c:85:3f:8e:b6:76:e8:28:b8:c8:93:90:f4:af:
         70:19:c6:42
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEWN01TViLiU06yBYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5ZGRlMjAtYTBlNS00M2UzLTkwOWItYWFlMTVlYWUz
NzUyMB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk
MmUzN2JhNjYtODE2Yi00MzczLWE2ZjgtOWExMjkzNzE0ZjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XGxKXHokyk2Wg9V6SRByd2vXC8dIUPAezNl
t0mMQdx1DMCOk5Tz3Y76JLZlBA2LkB3e8WvvXs+MUgVTX8mukUj5OAJCWlaXIxBh
AFxn3IYjlE1wf3SpVzL8DI/tu17gnEo3OCCWdMBAH09IphwqLjDMQvrskG4K3ZyL
htyrt6i0bKIfqV6OhrEL2CdV9p2HPAKLxUwjlA1KjOWLSB7vsEZQZ9B2xaTuECRd
sOxQXI8t4LwEG+TtDOEificV5WfaHyEy+ON3ALbNGemZeyf8Nf+/JWWRRTwpIkBm
KXP/HME1dR3+Ahj+Ac/TfiYk/bzausetqlmN4XcTrRcSBYS0AwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFAArQPmRM3Q5LFnEkm2+TPYw3KwLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYzlk
ZGUyMC1hMGU1LTQzZTMtOTA5Yi1hYWUxNWVhZTM3NTIvMzlhNzc4MTAtMzBhMy0z
NzJlLTgzMGUtYWFlNWM4OTk4MWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGM5ZGRlMjAtYTBlNS00M2UzLTkw
OWItYWFlMTVlYWUzNzUyLzBjOWRkZTIwLWEwZTUtNDNlMy05MDliLWFhZTE1ZWFl
Mzc1Mi5jcmwwHwYDVR0jBBgwFoAUJHT4fwMNmRXNt8B0RFy0QzEXlgswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYzlkZGUyMC1hMGU1LTQzZTMtOTA5Yi1hYWUx
NWVhZTM3NTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzsUsMA8E
AgACMAkDBwAmIAC4oAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXBbAjpGE7YizWM4R29noqNwfxDZmB+0F
OBTQD7ReAObEJLj4IJv+nZGZ+h6ZekgxoUfLP5Kdrd13mGdHpWFZRrlWeSXrWQ+h
vLw+ArsPm/rwzWNzm6MGuHyVM/uqA9+zUzHu6BSBV4OTdykD/OHGQ8AsHkTcxFV4
0l/wtR3ctNXoUgvATAPSIssD2pHFKKgEuDiiYDq4omiCSBWaSLSwzPfAXQ+hBZvs
ZGC2QmD34lLmlSGTVmFFcQWPkXGDvygEBqIgmPAFpFLVFSdg66aJgKkxibxTOeme
aUC6UIVAEuKkiTWrf0lcecEbWxI/tSyFP462dugouMiTkPSvcBnGQg==
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:36 2024 by rpki-client on console-fra.rpki-client.org