Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa
File:                     3631451c-499a-316e-8a60-064b30097352.roa (raw, json)
Hash identifier:          8gSdZJ44kDFsEXVa0Is/cHQY0h+Mfg7wYjhbYFngUsQ=
Subject key identifier:   33:B2:DE:01:38:F4:EA:85:1E:B9:31:D2:50:89:23:F8:41:A1:8E:3C
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847686B8CE1E04D214C6CFFB060
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     26545
IP address blocks:        206.123.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8c:e1:e0:4d:21:4c:6c:ff:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=d23af7ae-895c-494c-a04f-d0b719163950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:79:88:56:95:ab:2c:58:9a:34:fc:af:c6:
                    80:81:5d:bc:8d:87:d6:8c:3f:ce:84:a1:67:b6:84:
                    2a:ad:70:2b:e9:8e:05:79:0a:96:9a:a4:1e:6f:f7:
                    e7:12:61:89:66:65:9a:65:6d:75:1c:93:b4:07:ce:
                    2a:3b:a4:9b:e3:bf:a9:f8:16:3f:c0:13:5f:4e:9d:
                    c1:6b:21:78:ef:09:ca:1a:4c:f9:d9:1c:ab:40:10:
                    05:89:9e:3e:50:79:93:b0:56:ba:bd:51:1d:a7:2d:
                    4d:6a:e3:fb:d4:f9:47:fe:30:71:71:46:52:09:26:
                    ca:f0:d6:5e:44:47:69:de:89:32:87:30:2e:f5:90:
                    79:19:c4:75:6c:1b:03:d1:c2:fe:dc:24:62:8b:26:
                    51:ae:16:a2:87:9f:be:e7:63:36:21:a3:74:c4:f8:
                    8e:ea:dd:a1:98:ae:a7:2c:4c:b7:53:21:cb:b6:39:
                    d7:43:74:10:56:5e:7d:e3:0d:16:8b:a2:1f:93:4c:
                    82:f7:6c:50:66:07:4d:3b:1c:a0:65:49:93:37:55:
                    c0:fa:2f:d6:0d:07:38:23:a7:4d:c5:6e:ef:ff:6f:
                    d2:63:02:bf:36:86:28:26:d7:2a:3c:35:83:57:d9:
                    e8:0d:44:e3:b7:cd:27:b5:44:77:88:31:27:58:e4:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B2:DE:01:38:F4:EA:85:1E:B9:31:D2:50:89:23:F8:41:A1:8E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:48:30:cf:b1:82:26:a4:d1:63:a5:a1:a7:d6:3b:d9:e7:10:
         3f:ee:83:a7:40:33:5b:2b:1d:c5:9a:4b:30:7f:c7:fe:f2:7c:
         08:b0:0d:01:c2:4a:e7:ed:ab:29:0a:a5:cd:89:ac:cd:cf:71:
         0f:0f:1f:dc:6b:51:15:6b:f3:a1:9b:70:54:49:09:11:c5:ee:
         27:34:55:67:fc:d9:4e:d1:56:ca:85:08:57:63:94:eb:ee:03:
         61:1d:38:11:a9:e1:59:1a:e2:1d:7b:bc:ed:eb:ff:c4:81:78:
         43:06:70:b4:cf:ae:c8:63:98:04:b9:8e:79:59:0b:63:ee:2a:
         c6:0d:09:00:6e:8e:e0:01:0b:15:50:a1:98:09:60:fc:26:3b:
         af:93:b6:e3:4d:76:7a:cd:e1:ed:f9:fa:8a:15:f2:e6:67:d2:
         cc:4e:4e:c7:82:ed:5b:d1:60:de:b1:61:9f:ef:e2:4c:a9:47:
         f4:af:81:93:d7:49:fd:2c:e9:c3:47:d3:f0:51:fc:d6:c5:aa:
         fb:6f:65:a7:ce:b6:cb:38:d9:ca:ed:ba:1c:7b:1b:58:2a:55:
         de:69:fe:c7:a5:fd:d9:89:10:c2:10:b0:e8:65:e4:88:8b:00:
         cd:3e:be:96:eb:c7:37:2f:ac:c8:ce:64:f2:56:2b:d1:26:ce:
         8d:5e:40:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdoa4zh4E0hTGz/sGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZDIzYWY3YWUtODk1Yy00OTRjLWEwNGYtZDBiNzE5MTYzOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCN5iFaVqyxYmjT8r8aAgV28jYfWjD/OhKFn
toQqrXAr6Y4FeQqWmqQeb/fnEmGJZmWaZW11HJO0B84qO6Sb47+p+BY/wBNfTp3B
ayF47wnKGkz52RyrQBAFiZ4+UHmTsFa6vVEdpy1NauP71PlH/jBxcUZSCSbK8NZe
REdp3okyhzAu9ZB5GcR1bBsD0cL+3CRiiyZRrhaih5++52M2IaN0xPiO6t2hmK6n
LEy3UyHLtjnXQ3QQVl594w0Wi6Ifk0yC92xQZgdNOxygZUmTN1XA+i/WDQc4I6dN
xW7v/2/SYwK/NoYoJtcqPDWDV9noDUTjt80ntUR3iDEnWOSgewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOy3gE49OqFHrkx0lCJI/hBoY48MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMzYzMTQ1MWMtNDk5YS0z
MTZlLThhNjAtMDY0YjMwMDk3MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzntaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5IMM+xgiak0WOloafWO9nnED/ug6dAM1srHcWaSzB/x/7yfAiwDQHC
SuftqykKpc2JrM3PcQ8PH9xrURVr86GbcFRJCRHF7ic0VWf82U7RVsqFCFdjlOvu
A2EdOBGp4Vka4h17vO3r/8SBeEMGcLTPrshjmAS5jnlZC2PuKsYNCQBujuABCxVQ
oZgJYPwmO6+TtuNNdnrN4e35+ooV8uZn0sxOTseC7VvRYN6xYZ/v4kypR/SvgZPX
Sf0s6cNH0/BR/NbFqvtvZafOtss42crtuhx7G1gqVd5p/sel/dmJEMIQsOhl5IiL
AM0+vpbrxzcvrMjOZPJWK9Emzo1eQPk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org