Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa
File:                     8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa (raw, json)
Hash identifier:          owkgBJvKIwEikh8omto6jk5BtKgf50XzQK6RRDg7F8E=
Subject key identifier:   A3:68:CD:EA:BA:01:1E:E4:77:F2:B9:B0:82:2E:4D:6C:9C:0A:2F:04
Certificate issuer:       /CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
Certificate serial:       010D0C9F432858478D087F83BF97DEBF598C8EC0
Authority key identifier: 65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa
Signing time:             Tue 15 Oct 2024 15:46:03 +0000
ROA not before:           Tue 15 Oct 2024 15:46:03 +0000
ROA not after:            Mon 13 Jan 2025 16:46:03 +0000
asID:                     11700
IP address blocks:        205.207.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:08:7f:83:bf:97:de:bf:59:8c:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
        Validity
            Not Before: Oct 15 15:46:03 2024 GMT
            Not After : Jan 13 16:46:03 2025 GMT
        Subject: CN=3981f96d-8fec-49a2-9491-092977ed70b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:29:30:a3:32:3d:e2:14:3a:11:42:19:5a:
                    b5:71:e3:98:c1:c2:95:3e:f3:92:f0:4f:ba:0f:7e:
                    74:bc:41:22:3b:ae:63:72:8f:d7:f8:9f:80:e1:59:
                    b3:ac:45:36:3a:14:d1:32:fa:fd:11:b1:22:de:8b:
                    7d:16:49:5b:4e:da:02:f5:88:ab:1d:f3:e0:f6:59:
                    27:9b:0b:d3:88:e7:d7:51:f8:96:37:dc:c4:da:ae:
                    04:09:bd:ac:e7:e1:56:04:93:3c:e1:ba:fc:8b:06:
                    54:3f:3f:24:21:96:46:7a:01:cb:db:05:8e:6b:24:
                    74:2b:c0:21:09:c5:33:36:fb:5f:50:0a:ff:62:ad:
                    ba:3f:a2:9c:59:7c:a8:bf:23:1a:09:7e:4e:78:a1:
                    7f:a8:cd:41:6a:ae:8c:16:48:31:c5:ae:bd:8f:34:
                    e6:cb:a9:26:ef:55:be:d1:49:3b:7a:e7:a6:0a:79:
                    05:ef:3f:b5:5f:98:2a:cc:63:07:52:13:3c:be:f8:
                    2e:a1:11:5a:da:26:6e:5f:31:32:41:47:b5:ac:77:
                    74:b5:ff:28:ce:c8:d1:e1:5a:f1:f3:9f:89:47:3a:
                    72:bc:a8:fd:34:11:01:9e:3a:6c:9b:a8:fd:e0:da:
                    98:1f:3a:13:a5:a8:0c:9d:35:78:8f:6d:87:2e:92:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:CD:EA:BA:01:1E:E4:77:F2:B9:B0:82:2E:4D:6C:9C:0A:2F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl

            X509v3 Authority Key Identifier:
                keyid:65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:06:14:a7:49:b4:b3:a2:d1:7b:ca:0d:b8:54:dc:38:f7:7a:
         5b:c9:bd:0d:32:5a:60:72:15:aa:4d:91:ac:e3:d5:08:7e:f1:
         48:51:de:ef:7e:56:b6:9a:dd:a1:54:5a:2d:fe:9f:f5:62:e9:
         d9:e9:90:c2:37:fc:1c:5f:3e:af:bc:9e:bf:b8:f5:c6:70:77:
         2a:0c:ff:11:c5:c1:0a:25:ca:ac:8d:a6:68:6f:60:47:88:e7:
         76:f8:4f:8d:df:47:68:05:41:54:c7:47:b3:4c:e5:69:10:98:
         a3:a9:53:3a:3b:ca:c6:3a:f9:a1:e1:a6:23:4f:25:22:19:f3:
         4e:01:5f:1d:15:4b:ab:cd:36:01:96:be:10:02:c2:08:ae:3c:
         fd:f7:9e:09:a9:b9:1c:75:ac:4d:bc:03:ae:0a:56:66:56:c6:
         1d:a9:d7:67:e3:bd:83:1a:82:82:a5:e2:81:06:b9:c9:7a:8e:
         0a:1f:27:1a:e5:3e:1a:af:dd:44:40:28:c0:78:90:02:2d:cc:
         a9:3a:0f:56:d8:23:7d:d1:19:09:e3:f9:e5:f3:f2:21:3d:c9:
         88:03:d0:3f:88:51:1c:b1:e1:84:07:61:0f:d9:37:52:0e:bb:
         3b:81:22:da:fa:09:cd:d4:d7:e2:31:10:7a:f6:32:bd:e5:3a:
         99:8d:51:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeNCH+Dv5fev1mMjsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwOGE0ZmYtYzE3MC00MWVhLWE0NTQtYmYwZWNkNDBm
ODNkMB4XDTI0MTAxNTE1NDYwM1oXDTI1MDExMzE2NDYwM1owLzEtMCsGA1UEAxMk
Mzk4MWY5NmQtOGZlYy00OWEyLTk0OTEtMDkyOTc3ZWQ3MGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwopMKMyPeIUOhFCGVq1ceOYwcKVPvOS8E+6
D350vEEiO65jco/X+J+A4VmzrEU2OhTRMvr9EbEi3ot9FklbTtoC9YirHfPg9lkn
mwvTiOfXUfiWN9zE2q4ECb2s5+FWBJM84br8iwZUPz8kIZZGegHL2wWOayR0K8Ah
CcUzNvtfUAr/Yq26P6KcWXyovyMaCX5OeKF/qM1Baq6MFkgxxa69jzTmy6km71W+
0Uk7euemCnkF7z+1X5gqzGMHUhM8vvguoRFa2iZuXzEyQUe1rHd0tf8ozsjR4Vrx
85+JRzpyvKj9NBEBnjpsm6j94NqYHzoTpagMnTV4j22HLpLAAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNozeq6AR7kd/K5sIIuTWycCi8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4
YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBlY2Q0MGY4M2QvOGI3NmJiZmQtM2ZjYi0z
NTAyLWI2ZmUtYzEwODBjZjc4MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTYwOGE0ZmYtYzE3MC00MWVhLWE0
NTQtYmYwZWNkNDBmODNkL2U2MDhhNGZmLWMxNzAtNDFlYS1hNDU0LWJmMGVjZDQw
ZjgzZC5jcmwwHwYDVR0jBBgwFoAUZbtTdGgHjVn9ZMUKgYK5MSgVOicwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBl
Y2Q0MGY4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc/LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAGFKdJtLOi0XvKDbhU3Dj3elvJvQ0yWmByFapNkazj1Qh+8UhR3u9+
Vraa3aFUWi3+n/Vi6dnpkMI3/BxfPq+8nr+49cZwdyoM/xHFwQolyqyNpmhvYEeI
53b4T43fR2gFQVTHR7NM5WkQmKOpUzo7ysY6+aHhpiNPJSIZ804BXx0VS6vNNgGW
vhACwgiuPP33ngmpuRx1rE28A64KVmZWxh2p12fjvYMagoKl4oEGucl6jgofJxrl
Phqv3URAKMB4kAItzKk6D1bYI33RGQnj+eXz8iE9yYgD0D+IURyx4YQHYQ/ZN1IO
uzuBItr6Cc3U1+IxEHr2Mr3lOpmNUaM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:10 2024 by rpki-client on console-ams.rpki-client.org