Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b47db1d9-3e11-3561-a69c-0f8682a71970.roa
File:                     b47db1d9-3e11-3561-a69c-0f8682a71970.roa (raw, json)
Hash identifier:          dw5f+q0ESg7gSERRFuDeGHd4kDixBTJ4aCC3BMi5feI=
Subject key identifier:   48:3B:A0:D3:39:75:1E:9E:BA:5F:23:DB:27:EC:84:86:EA:B5:C3:E7
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F432858475910B2847D27255FD622D980
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b47db1d9-3e11-3561-a69c-0f8682a71970.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     23188
IP address blocks:        206.125.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b2:84:7d:27:25:5f:d6:22:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=78b948e3-7584-4635-9d5c-5a5de308510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:af:b6:82:eb:4d:5f:c0:29:65:a8:e6:d8:
                    66:5d:8a:d0:d7:a9:73:67:24:9b:e0:05:b4:76:27:
                    8f:1a:c0:17:25:1a:5e:4f:b9:bd:09:70:5c:ee:b3:
                    4e:51:88:4d:e5:4e:fd:4c:cd:1b:f6:ab:c8:a6:90:
                    d0:00:52:fe:67:00:fe:cc:3f:4f:05:6a:b8:d9:42:
                    47:a1:f2:79:16:49:a7:dc:d2:bb:a7:1c:78:51:43:
                    f8:fd:dc:1d:32:4c:30:bc:84:cc:6b:91:6f:d3:d6:
                    d3:a7:5c:4b:4a:a7:59:c0:a8:04:ef:5c:e0:b4:04:
                    97:3d:ca:b1:ae:23:05:69:fc:3b:e9:6b:07:16:3d:
                    84:96:36:6b:36:e4:e3:ad:ca:9e:9c:0c:3d:16:5f:
                    bd:85:32:04:d6:a2:cb:e4:f0:f8:fe:75:79:ae:12:
                    7e:42:35:a9:ff:90:28:df:73:78:0f:22:9e:7c:16:
                    57:99:92:cd:0f:bb:9d:25:44:96:ec:3c:28:be:bd:
                    3e:ee:8e:63:31:b8:f4:85:c5:f1:b0:33:61:27:f7:
                    d3:3c:d4:98:ea:ca:da:73:87:39:70:64:7a:96:c4:
                    ab:ba:4a:09:93:f4:71:a1:56:88:f4:ab:31:95:8c:
                    12:81:a3:ea:99:94:0c:42:f0:f8:85:e7:19:62:13:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3B:A0:D3:39:75:1E:9E:BA:5F:23:DB:27:EC:84:86:EA:B5:C3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b47db1d9-3e11-3561-a69c-0f8682a71970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b4:fe:04:4e:7f:4b:d1:2e:8c:a5:51:12:df:d9:a3:f8:7c:
         bc:54:4f:51:19:92:1c:71:b5:81:0f:89:34:29:75:86:69:fd:
         0f:41:92:e5:66:01:2b:b1:df:06:fc:44:2e:d6:c4:36:79:a4:
         7a:5f:70:13:f2:c5:ab:27:48:10:9a:0d:a8:f4:ac:93:68:b5:
         c9:4b:e1:5b:99:bb:90:23:e9:fb:5f:86:77:9e:11:ba:3c:23:
         df:07:4c:24:f7:d5:9e:0e:20:b7:f1:33:1b:2d:7b:05:f2:cf:
         8b:dd:25:25:51:b5:29:c3:d7:c7:ba:f0:ea:4f:c7:e0:5a:80:
         ec:6d:da:31:7e:ca:9c:46:c5:b4:64:5e:53:6e:b1:8e:dd:4c:
         d2:68:d5:7b:f5:8b:bf:f7:af:01:c0:6a:ff:d6:91:fb:08:6c:
         46:f5:35:d4:3a:e8:ca:3f:93:2c:32:c1:8b:01:b5:e9:69:d4:
         62:d9:13:84:02:6a:50:33:3c:51:03:9a:5d:b7:06:1c:b3:47:
         77:e3:d2:e6:6b:4f:81:60:b0:0a:b1:b2:07:f1:d0:56:ff:2d:
         07:82:55:39:09:d6:58:20:0f:4e:7c:ca:8b:70:68:78:75:a0:
         bf:ec:df:88:58:68:50:33:76:d4:81:bf:83:61:f4:57:35:ea:
         b8:e5:80:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZELKEfSclX9Yi2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2MTNlODQtYmU5My00ZDdhLWE1NmMtNTdhMzc4ZjJj
MzI1MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NzhiOTQ4ZTMtNzU4NC00NjM1LTlkNWMtNWE1ZGUzMDg1MTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ2vtoLrTV/AKWWo5thmXYrQ16lzZySb4AW0
diePGsAXJRpeT7m9CXBc7rNOUYhN5U79TM0b9qvIppDQAFL+ZwD+zD9PBWq42UJH
ofJ5Fkmn3NK7pxx4UUP4/dwdMkwwvITMa5Fv09bTp1xLSqdZwKgE71zgtASXPcqx
riMFafw76WsHFj2EljZrNuTjrcqenAw9Fl+9hTIE1qLL5PD4/nV5rhJ+QjWp/5Ao
33N4DyKefBZXmZLND7udJUSW7Dwovr0+7o5jMbj0hcXxsDNhJ/fTPNSY6srac4c5
cGR6lsSrukoJk/RxoVaI9KsxlYwSgaPqmZQMQvD4hecZYhOmdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEg7oNM5dR6eul8j2yfshIbqtcPnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDYx
M2U4NC1iZTkzLTRkN2EtYTU2Yy01N2EzNzhmMmMzMjUvYjQ3ZGIxZDktM2UxMS0z
NTYxLWE2OWMtMGY4NjgyYTcxOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQ2MTNlODQtYmU5My00ZDdhLWE1
NmMtNTdhMzc4ZjJjMzI1LzVkNjEzZTg0LWJlOTMtNGQ3YS1hNTZjLTU3YTM3OGYy
YzMyNS5jcmwwHwYDVR0jBBgwFoAUg9l+5YkNlHKjca9r0BTQzHTTHZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZDYxM2U4NC1iZTkzLTRkN2EtYTU2Yy01N2Ez
NzhmMmMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzn2aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADO0/gROf0vRLoylURLf2aP4fLxUT1EZkhxxtYEPiTQpdYZp/Q9BkuVm
ASux3wb8RC7WxDZ5pHpfcBPyxasnSBCaDaj0rJNotclL4VuZu5Aj6ftfhneeEbo8
I98HTCT31Z4OILfxMxstewXyz4vdJSVRtSnD18e68OpPx+BagOxt2jF+ypxGxbRk
XlNusY7dTNJo1Xv1i7/3rwHAav/WkfsIbEb1NdQ66Mo/kywywYsBtelp1GLZE4QC
alAzPFEDml23BhyzR3fj0uZrT4FgsAqxsgfx0Fb/LQeCVTkJ1lggD058yotwaHh1
oL/s34hYaFAzdtSBv4Nh9Fc16rjlgL8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:17 2024 by rpki-client on console-ams.rpki-client.org