Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c8c2f63e-ac01-39b1-b3eb-1180b0ff4ea5.roa
File:                     c8c2f63e-ac01-39b1-b3eb-1180b0ff4ea5.roa (raw, json)
Hash identifier:          6E+8s3rzr5C+z0RBpKFV2LZSABob3wschQj0fKstQAM=
Subject key identifier:   D6:68:FA:B1:22:17:EA:71:23:B2:EA:68:BE:A3:A4:C6:C8:30:75:26
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5003C7420F2491B48F7F40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c8c2f63e-ac01-39b1-b3eb-1180b0ff4ea5.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        206.191.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:03:c7:42:0f:24:91:b4:8f:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=c67c32e8-7eee-4c7e-a5ac-78e6808d8a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:66:23:35:32:10:47:38:10:6d:fc:80:db:
                    c9:fc:5b:ad:53:e0:e2:b3:4b:1f:41:1f:fd:15:a7:
                    d4:1d:c5:43:b4:22:3c:3e:64:7b:c3:d5:70:25:d1:
                    7b:da:2d:91:d9:10:57:fb:17:19:e5:46:d8:e2:d3:
                    95:b5:3d:a8:4f:d0:88:e8:24:63:d0:2b:6d:54:69:
                    0e:b1:15:75:94:27:1c:3a:14:f1:57:ae:c4:90:19:
                    fb:f2:c4:62:82:19:64:15:55:14:6a:f1:42:48:18:
                    01:ea:b2:f9:38:db:37:4d:f4:6d:24:f6:4d:0e:de:
                    c6:f6:9e:7d:6c:b0:15:d8:df:e3:72:ba:66:56:f7:
                    35:97:cb:3b:25:73:c8:01:57:7a:5b:25:12:0d:3a:
                    ca:33:da:6e:24:9c:03:7e:86:91:b5:6a:8b:57:d2:
                    b6:93:16:ca:9c:5a:a7:8a:12:cb:67:22:5b:c7:04:
                    95:27:53:79:3e:3b:49:0a:48:3a:cd:70:51:0e:91:
                    23:6b:58:bf:18:50:71:e4:31:09:e2:a0:56:76:7a:
                    38:bb:8e:5f:4a:e2:22:6d:e2:ee:28:3b:c0:a6:68:
                    1c:d7:b7:f2:7c:5c:9e:15:30:1a:23:76:d2:b1:fd:
                    cd:42:7f:dc:a6:66:1f:02:53:86:59:a3:99:91:a5:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:68:FA:B1:22:17:EA:71:23:B2:EA:68:BE:A3:A4:C6:C8:30:75:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c8c2f63e-ac01-39b1-b3eb-1180b0ff4ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:da:5d:ec:c8:da:2e:ba:88:8a:27:9f:28:89:25:d8:f8:
         29:9e:5d:a2:f1:b4:69:29:77:ff:a4:ce:13:a5:54:c1:2a:19:
         96:5e:7d:3b:7a:5e:79:06:8f:68:52:9c:43:fa:7d:b9:6a:a8:
         e7:ef:9a:67:f9:3a:15:0e:d8:eb:af:7c:2f:ef:dd:7e:4b:36:
         45:e8:e4:93:6a:4b:51:19:6e:3d:3e:16:c8:75:65:25:7f:db:
         9b:e7:a8:7e:c5:35:71:93:49:5c:91:65:e6:dd:e3:6a:77:76:
         bc:7e:11:30:94:bd:9e:1b:0e:c6:0d:4a:15:9d:dd:cf:8b:3f:
         b6:59:29:ff:65:ad:06:75:3a:52:a4:17:3d:77:0b:d1:73:b9:
         9d:6a:cb:da:a5:3e:fc:f1:de:7f:49:47:6f:06:34:10:0f:98:
         36:aa:9b:e6:9f:a8:b3:cb:68:c7:b0:a7:91:02:5b:d8:f6:45:
         dd:4e:a3:b2:83:72:11:3c:d9:6a:e8:92:9d:31:f2:9c:30:27:
         ab:63:64:60:43:23:71:44:df:00:18:bb:a7:e0:21:0e:79:43:
         f3:e7:b0:63:2c:1c:d8:88:4f:71:0c:60:07:04:4c:45:a2:be:
         7e:05:c6:6c:b6:c7:7c:d2:51:bd:8b:19:95:00:6c:69:26:df:
         d0:62:33:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAPHQg8kkbSPf0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
YzY3YzMyZTgtN2VlZS00YzdlLWE1YWMtNzhlNjgwOGQ4YTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ehmIzUyEEc4EG38gNvJ/FutU+Dis0sfQR/9
FafUHcVDtCI8PmR7w9VwJdF72i2R2RBX+xcZ5UbY4tOVtT2oT9CI6CRj0CttVGkO
sRV1lCccOhTxV67EkBn78sRighlkFVUUavFCSBgB6rL5ONs3TfRtJPZNDt7G9p59
bLAV2N/jcrpmVvc1l8s7JXPIAVd6WyUSDTrKM9puJJwDfoaRtWqLV9K2kxbKnFqn
ihLLZyJbxwSVJ1N5PjtJCkg6zXBRDpEja1i/GFBx5DEJ4qBWdno4u45fSuIibeLu
KDvApmgc17fyfFyeFTAaI3bSsf3NQn/cpmYfAlOGWaOZkaUVmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZo+rEiF+pxI7LqaL6jpMbIMHUmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYzhjMmY2M2UtYWMwMS0z
OWIxLWIzZWItMTE4MGIwZmY0ZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzr9XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqx2l3syNouuoiKJ58oiSXY+CmeXaLxtGkpd/+kzhOlVMEqGZZefTt6
XnkGj2hSnEP6fblqqOfvmmf5OhUO2OuvfC/v3X5LNkXo5JNqS1EZbj0+Fsh1ZSV/
25vnqH7FNXGTSVyRZebd42p3drx+ETCUvZ4bDsYNShWd3c+LP7ZZKf9lrQZ1OlKk
Fz13C9FzuZ1qy9qlPvzx3n9JR28GNBAPmDaqm+afqLPLaMewp5ECW9j2Rd1Oo7KD
chE82Wrokp0x8pwwJ6tjZGBDI3FE3wAYu6fgIQ55Q/PnsGMsHNiIT3EMYAcETEWi
vn4Fxmy2x3zSUb2LGZUAbGkm39BiM3g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:08 2025 by rpki-client