Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/f931b053-b10d-38a6-9c21-73e08d2d0c4a.roa
File:                     f931b053-b10d-38a6-9c21-73e08d2d0c4a.roa (raw, json)
Hash identifier:          mkquRkJ2YkDYGDWybqMxxcILH+3KrqW7xrqgp9JtxjU=
Subject key identifier:   60:A6:13:25:2A:8F:2E:5F:0C:37:2F:C9:68:7D:83:A6:18:B8:CA:B0
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F43285847B5315529A43FC2F6B0DEC0E0
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/f931b053-b10d-38a6-9c21-73e08d2d0c4a.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     3477
IP address blocks:        206.197.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:55:29:a4:3f:c2:f6:b0:de:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=4a564b66-7e49-4d58-8ac7-0d211c22744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:98:9e:ac:6f:df:6e:3b:dd:0a:15:11:1c:
                    7b:b2:2f:f6:a3:c7:a9:46:2b:58:f0:60:e0:b8:1e:
                    5b:f4:01:7e:f5:1f:82:de:25:36:f9:c0:02:98:ef:
                    9d:94:cd:8f:bc:3c:25:83:3f:fb:cb:69:ab:b9:b0:
                    56:31:17:0e:59:ef:f0:85:9c:c7:46:3f:80:57:7a:
                    d1:eb:63:51:72:02:b3:3e:28:11:82:55:cf:d1:31:
                    9e:bb:e4:fe:07:f5:df:2c:ea:8c:9d:7c:71:fa:3d:
                    6b:25:13:a8:56:42:01:c0:f1:15:e5:cb:a6:d1:21:
                    bc:24:5b:a2:3a:94:54:26:81:6c:53:5b:2d:de:db:
                    9e:40:49:15:a6:b2:69:ac:56:03:7b:1e:3f:18:35:
                    b6:1d:96:d2:57:4d:db:20:1d:64:07:b8:7a:71:02:
                    0d:76:d6:d3:ec:49:2b:ef:de:ff:25:78:62:fe:cf:
                    45:97:f1:3f:2d:c8:e7:dd:f2:a7:a9:bd:f5:8e:a5:
                    8d:14:72:86:e6:48:91:f9:e4:cd:7e:a1:aa:33:88:
                    40:54:16:15:98:87:e4:0f:31:5f:15:41:b9:36:e9:
                    16:15:be:45:b4:3d:fd:5c:63:7f:eb:dd:86:aa:2b:
                    78:64:f0:6d:6f:c0:3f:4c:6d:ee:3b:fc:a7:fb:c5:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A6:13:25:2A:8F:2E:5F:0C:37:2F:C9:68:7D:83:A6:18:B8:CA:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/f931b053-b10d-38a6-9c21-73e08d2d0c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:49:9d:ca:83:5f:21:28:6b:0b:bb:ec:d0:e9:07:89:a9:
         23:84:e4:e2:8c:3a:4f:52:9f:d0:11:69:66:8b:b9:9c:9e:cb:
         cb:49:47:62:50:3b:d5:40:ed:25:48:5c:0b:77:8c:90:fb:ac:
         b3:b5:17:24:51:31:77:57:f8:67:cf:77:f9:42:95:85:2b:53:
         6d:60:80:11:57:ae:9a:02:3c:73:31:cf:18:b9:58:cd:48:e5:
         f2:a5:e2:42:72:24:93:91:86:18:e9:65:94:1f:d4:c8:90:af:
         58:e0:87:2b:89:4f:c4:07:30:b1:45:03:4a:a4:2a:07:69:c7:
         ce:d2:50:44:a8:c3:f4:ba:c2:01:99:34:dc:57:2b:44:da:02:
         d2:7e:b7:5e:f2:8a:e7:4a:48:e5:6c:85:60:3e:4c:ae:72:4f:
         ac:5f:b4:be:31:aa:2f:de:06:8b:08:25:d1:a6:17:0d:9c:3e:
         9c:f5:44:9c:b0:a8:85:19:93:35:5b:e8:a3:fd:9b:34:ab:78:
         1c:c4:13:4f:20:64:56:8d:94:4b:91:ee:87:1d:95:87:8a:b5:
         b4:48:7f:11:05:8e:6e:b6:a8:48:99:1f:e8:1f:67:ef:1d:24:
         c6:8a:41:7c:de:59:95:0c:7e:a2:3a:4f:ea:b9:73:ab:ef:1d:
         8f:eb:e1:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVUppD/C9rDewOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEyOTQ3NTktNWRhNC00YWNmLThmMzItN2MwMjI4MjRi
NDQzMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk
NGE1NjRiNjYtN2U0OS00ZDU4LThhYzctMGQyMTFjMjI3NDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOmYnqxv32473QoVERx7si/2o8epRitY8GDg
uB5b9AF+9R+C3iU2+cACmO+dlM2PvDwlgz/7y2mrubBWMRcOWe/whZzHRj+AV3rR
62NRcgKzPigRglXP0TGeu+T+B/XfLOqMnXxx+j1rJROoVkIBwPEV5cum0SG8JFui
OpRUJoFsU1st3tueQEkVprJprFYDex4/GDW2HZbSV03bIB1kB7h6cQINdtbT7Ekr
797/JXhi/s9Fl/E/Lcjn3fKnqb31jqWNFHKG5kiR+eTNfqGqM4hAVBYVmIfkDzFf
FUG5NukWFb5FtD39XGN/692Gqit4ZPBtb8A/TG3uO/yn+8UtRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCmEyUqjy5fDDcvyWh9g6YYuMqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTI5
NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAyMjgyNGI0NDMvZjkzMWIwNTMtYjEwZC0z
OGE2LTljMjEtNzNlMDhkMmQwYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTEyOTQ3NTktNWRhNC00YWNmLThm
MzItN2MwMjI4MjRiNDQzLzkxMjk0NzU5LTVkYTQtNGFjZi04ZjMyLTdjMDIyODI0
YjQ0My5jcmwwHwYDVR0jBBgwFoAUSuN5k6zYRUipskeneD83OSfgDyIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MTI5NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAy
MjgyNGI0NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsXuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKaSZ3Kg18hKGsLu+zQ6QeJqSOE5OKMOk9Sn9ARaWaLuZyey8tJR2JQ
O9VA7SVIXAt3jJD7rLO1FyRRMXdX+GfPd/lClYUrU21ggBFXrpoCPHMxzxi5WM1I
5fKl4kJyJJORhhjpZZQf1MiQr1jghyuJT8QHMLFFA0qkKgdpx87SUESow/S6wgGZ
NNxXK0TaAtJ+t17yiudKSOVshWA+TK5yT6xftL4xqi/eBosIJdGmFw2cPpz1RJyw
qIUZkzVb6KP9mzSreBzEE08gZFaNlEuR7ocdlYeKtbRIfxEFjm62qEiZH+gfZ+8d
JMaKQXzeWZUMfqI6T+q5c6vvHY/r4aw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org