Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
File:                     9f89589a-17cb-34cc-9116-cdb2d9be527e.roa (raw, json)
Hash identifier:          8ggU/Ncj1UsJzAYKUc/su/ynRMRoKwhmnFXJw9Xk+j4=
Subject key identifier:   49:6A:D5:FB:1C:BC:BF:A4:4A:D7:C7:F3:A5:ED:C7:5B:4E:2F:CB:0F
Certificate issuer:       /CN=a619cbd3-121a-4de5-b31a-efa0c294c430
Certificate serial:       010D0C9F43285847A0414A8F828A0614F8A77240
Authority key identifier: 20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        192.206.146.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4a:8f:82:8a:06:14:f8:a7:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a619cbd3-121a-4de5-b31a-efa0c294c430
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=d53c81e8-9373-4703-9194-192c04320345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:2b:8c:5d:41:54:9d:c9:0c:9d:7f:5d:31:
                    ad:fe:c0:81:dd:3f:e1:bc:34:3e:4d:09:df:8f:df:
                    fd:7f:6f:dc:c7:56:d5:d8:0a:57:19:0d:89:3d:06:
                    71:64:6e:8d:f5:82:78:a1:f7:54:32:4f:87:b4:15:
                    92:27:de:0e:30:ab:b3:39:17:e3:fb:15:32:f8:e1:
                    0a:64:9d:5e:7d:e5:8e:85:63:22:ae:05:c0:1e:5f:
                    73:6a:8c:f7:87:10:ee:6a:73:fa:5e:3b:c0:54:0e:
                    40:0a:4c:3c:3c:ad:ab:3f:f1:b2:75:6e:ce:b2:91:
                    49:f0:b9:fb:4b:62:e4:ee:94:7b:4a:3f:c7:8a:c0:
                    fb:f4:67:be:8e:d3:aa:e1:4c:33:da:97:21:04:fc:
                    bf:0a:85:81:a7:91:fc:25:84:55:2e:9f:cd:92:ca:
                    70:d9:58:0b:b7:78:27:1f:9e:1e:d1:2f:ec:68:1f:
                    81:66:5a:dd:f9:b3:45:28:b4:c9:27:49:ac:57:2e:
                    c5:ec:5d:fc:c0:ed:29:53:05:92:b2:dd:38:e2:18:
                    7d:3f:c6:ff:85:db:38:50:cd:37:f2:b9:03:e8:12:
                    d1:70:06:8f:f5:b2:2f:96:5c:6f:14:b0:bf:96:dd:
                    53:82:e0:77:07:bd:fa:a1:91:8c:77:76:78:38:a2:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:D5:FB:1C:BC:BF:A4:4A:D7:C7:F3:A5:ED:C7:5B:4E:2F:CB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl

            X509v3 Authority Key Identifier:
                keyid:20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:4c:a7:b9:a4:ad:e7:ba:45:1b:08:e2:a7:91:5e:98:ef:
         14:51:c4:ab:09:93:89:a3:f3:84:b3:0c:e7:49:13:09:c6:f5:
         58:29:2e:43:d8:03:f4:4f:11:e4:2f:03:21:d5:7f:14:e5:70:
         84:a2:07:e9:c8:dd:e3:da:c8:cc:0d:17:5c:9a:5b:34:e1:fc:
         20:3f:f2:49:20:66:fd:43:c9:28:af:90:88:ed:a6:7d:c6:ec:
         43:5b:08:58:2a:5f:45:f5:41:12:63:90:04:c4:5e:1a:f3:71:
         f0:4d:30:5f:5c:61:40:bb:52:d9:19:f2:15:bc:ed:73:20:e4:
         93:ab:38:24:07:ee:70:d0:ae:16:45:ec:c5:38:58:94:15:36:
         ef:d9:6f:d1:f0:79:6a:2c:9e:43:43:96:a7:6d:89:bd:4c:55:
         2e:0a:1a:1e:dc:15:aa:fb:59:4b:ec:ad:a1:77:e6:9d:3f:44:
         d5:48:9d:7f:c1:75:36:8b:c5:55:5a:9d:85:72:69:ff:34:fc:
         54:bc:75:0a:fc:9a:ce:c7:2a:ee:f4:f4:1c:75:09:ff:eb:e2:
         f8:d8:21:b7:ef:89:d9:3b:3f:92:4b:e6:d2:d3:8e:c2:d5:90:
         ce:b2:8a:75:ee:aa:cc:a1:18:92:8a:0c:8b:3b:05:e3:0f:50:
         3f:f9:84:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUqPgooGFPinckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYxOWNiZDMtMTIxYS00ZGU1LWIzMWEtZWZhMGMyOTRj
NDMwMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
ZDUzYzgxZTgtOTM3My00NzAzLTkxOTQtMTkyYzA0MzIwMzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuErjF1BVJ3JDJ1/XTGt/sCB3T/hvDQ+TQnf
j9/9f2/cx1bV2ApXGQ2JPQZxZG6N9YJ4ofdUMk+HtBWSJ94OMKuzORfj+xUy+OEK
ZJ1efeWOhWMirgXAHl9zaoz3hxDuanP6XjvAVA5ACkw8PK2rP/GydW7OspFJ8Ln7
S2Lk7pR7Sj/HisD79Ge+jtOq4Uwz2pchBPy/CoWBp5H8JYRVLp/Nkspw2VgLt3gn
H54e0S/saB+BZlrd+bNFKLTJJ0msVy7F7F38wO0pUwWSst044hh9P8b/hds4UM03
8rkD6BLRcAaP9bIvllxvFLC/lt1TguB3B736oZGMd3Z4OKJxQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElq1fscvL+kStfH86Xtx1tOL8sPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjE5
Y2JkMy0xMjFhLTRkZTUtYjMxYS1lZmEwYzI5NGM0MzAvOWY4OTU4OWEtMTdjYi0z
NGNjLTkxMTYtY2RiMmQ5YmU1MjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYxOWNiZDMtMTIxYS00ZGU1LWIz
MWEtZWZhMGMyOTRjNDMwL2E2MTljYmQzLTEyMWEtNGRlNS1iMzFhLWVmYTBjMjk0
YzQzMC5jcmwwHwYDVR0jBBgwFoAUIONLRCUwNKCGj6N1ll5l2ti+FiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjE5Y2JkMy0xMjFhLTRkZTUtYjMxYS1lZmEw
YzI5NGM0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwM6SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0pTKe5pK3nukUbCOKnkV6Y7xRRxKsJk4mj84SzDOdJEwnG9VgpLkPY
A/RPEeQvAyHVfxTlcISiB+nI3ePayMwNF1yaWzTh/CA/8kkgZv1DySivkIjtpn3G
7ENbCFgqX0X1QRJjkATEXhrzcfBNMF9cYUC7UtkZ8hW87XMg5JOrOCQH7nDQrhZF
7MU4WJQVNu/Zb9HweWosnkNDlqdtib1MVS4KGh7cFar7WUvsraF35p0/RNVInX/B
dTaLxVVanYVyaf80/FS8dQr8ms7HKu709Bx1Cf/r4vjYIbfvidk7P5JL5tLTjsLV
kM6yinXuqsyhGJKKDIs7BeMPUD/5hNw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:19 2024 by rpki-client on console-fra.rpki-client.org