Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa
File:                     dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa (raw, json)
Hash identifier:          zFjn1tZ85OOHvgPNU8iK1juC6Gl4ANR74LEHf11F360=
Subject key identifier:   CB:25:AD:3D:0D:84:D4:97:90:AA:5F:6F:27:99:06:6B:07:D9:7A:EA
Certificate issuer:       /CN=a896fb51-8357-466d-8186-a63abb732f66
Certificate serial:       010D0C9F4328584572F6D4EC3F4625CC58D4A6C0
Authority key identifier: 8D:A0:CD:7B:46:9A:1E:8C:CB:A9:8A:2D:BA:2F:76:1F:38:20:01:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa
Signing time:             Fri 05 Apr 2024 22:05:34 +0000
ROA not before:           Fri 05 Apr 2024 22:05:34 +0000
ROA not after:            Thu 04 Jul 2024 22:05:34 +0000
asID:                     397423
IP address blocks:        206.183.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/a896fb51-8357-466d-8186-a63abb732f66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/a896fb51-8357-466d-8186-a63abb732f66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:f6:d4:ec:3f:46:25:cc:58:d4:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a896fb51-8357-466d-8186-a63abb732f66
        Validity
            Not Before: Apr  5 22:05:34 2024 GMT
            Not After : Jul  4 22:05:34 2024 GMT
        Subject: CN=ca834db8-5590-4030-8ce4-71ce3e66b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:fd:71:a2:cf:68:aa:c4:15:d8:47:38:a9:
                    f9:bf:f7:d8:be:b8:2d:ed:f0:40:1c:7a:bc:78:d8:
                    20:46:35:a3:eb:5d:e7:43:8d:6d:73:6d:0d:a1:fa:
                    15:a6:ef:70:89:d0:cd:a4:e9:84:ac:f8:17:21:5c:
                    a2:0e:3a:4d:12:bf:ce:bf:60:07:6e:46:94:99:12:
                    4e:f8:20:98:07:b1:d2:df:b8:e8:58:5a:a3:bd:3f:
                    be:6d:89:6a:75:78:7e:8f:6a:12:0a:9e:d1:28:5a:
                    d6:02:14:8c:ee:f9:70:82:21:ed:f5:0b:e8:03:df:
                    53:b8:7b:68:e8:c7:98:28:a6:2a:df:7a:ea:a7:d1:
                    04:29:be:fa:00:df:13:90:3a:ad:52:14:90:e8:41:
                    62:46:83:3c:1e:05:ed:bf:42:a6:ba:d7:01:ef:95:
                    ad:6f:aa:47:94:4f:ba:4c:69:0c:ff:00:9e:28:2b:
                    d5:a1:86:90:e2:31:9e:3c:c7:19:3c:4c:8b:2a:52:
                    9c:6f:32:0f:0b:d4:a9:2b:01:e8:c8:0e:1a:53:c8:
                    a9:ef:6e:7a:e0:2d:22:c6:ac:48:42:df:ab:fd:9d:
                    ed:b0:c3:b5:c6:de:96:f3:77:81:ed:96:21:ee:e2:
                    cf:3f:79:86:27:2b:6f:ff:56:20:96:3b:6d:d1:ac:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:25:AD:3D:0D:84:D4:97:90:AA:5F:6F:27:99:06:6B:07:D9:7A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/a896fb51-8357-466d-8186-a63abb732f66.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:CD:7B:46:9A:1E:8C:CB:A9:8A:2D:BA:2F:76:1F:38:20:01:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:04:33:a5:f2:3f:8f:79:26:2d:87:55:bd:0a:d0:b5:a4:
         de:1b:59:8c:26:90:40:f5:e1:df:c4:2c:7c:6a:34:f6:ef:bc:
         68:02:8c:12:2a:7d:ea:c9:c9:f6:41:90:ea:a8:7e:5b:66:56:
         3a:c3:98:4e:6b:0b:b9:8b:2a:aa:44:5f:ae:ef:aa:37:98:9b:
         60:2a:9f:bb:ba:7f:d0:ce:f0:6a:d3:c4:b2:b4:99:15:49:7d:
         28:fe:64:62:87:9e:7d:bc:f6:f0:18:cd:3c:af:61:f0:01:bf:
         ef:e5:49:09:32:10:ca:e5:d0:14:9c:d4:10:79:1e:03:68:1c:
         0e:02:b1:7d:db:96:94:57:5e:29:d0:ba:72:f4:4e:f8:bf:30:
         cd:bd:83:29:bc:f1:d6:11:9b:30:63:27:a5:8f:44:ef:e2:ee:
         8f:42:2d:f9:19:0c:1b:08:c6:26:72:aa:6a:b3:ce:29:32:27:
         56:c2:8f:b5:a4:a0:ce:8e:46:9c:a8:98:9e:27:42:11:30:d8:
         31:0a:42:a3:79:c9:43:76:64:78:6a:a8:27:7a:a5:19:7e:37:
         34:aa:55:e0:ff:3b:27:80:2b:42:aa:12:e2:68:52:a3:cc:a8:
         7f:80:cd:5c:f9:29:e1:ec:2b:e9:10:88:03:08:80:69:3d:e7:
         be:7d:19:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVy9tTsP0YlzFjUpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg5NmZiNTEtODM1Ny00NjZkLTgxODYtYTYzYWJiNzMy
ZjY2MB4XDTI0MDQwNTIyMDUzNFoXDTI0MDcwNDIyMDUzNFowLzEtMCsGA1UEAxMk
Y2E4MzRkYjgtNTU5MC00MDMwLThjZTQtNzFjZTNlNjZiMGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZv9caLPaKrEFdhHOKn5v/fYvrgt7fBAHHq8
eNggRjWj613nQ41tc20NofoVpu9widDNpOmErPgXIVyiDjpNEr/Ov2AHbkaUmRJO
+CCYB7HS37joWFqjvT++bYlqdXh+j2oSCp7RKFrWAhSM7vlwgiHt9QvoA99TuHto
6MeYKKYq33rqp9EEKb76AN8TkDqtUhSQ6EFiRoM8HgXtv0KmutcB75Wtb6pHlE+6
TGkM/wCeKCvVoYaQ4jGePMcZPEyLKlKcbzIPC9SpKwHoyA4aU8ip72564C0ixqxI
Qt+r/Z3tsMO1xt6W83eB7ZYh7uLPP3mGJytv/1Ygljtt0azgXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMslrT0NhNSXkKpfbyeZBmsH2XrqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hODk2
ZmI1MS04MzU3LTQ2NmQtODE4Ni1hNjNhYmI3MzJmNjYvZGJjYmZmNGYtZWI1ZS0z
ODJkLTk4YTAtMTZiYjc5YjMwYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTg5NmZiNTEtODM1Ny00NjZkLTgx
ODYtYTYzYWJiNzMyZjY2L2E4OTZmYjUxLTgzNTctNDY2ZC04MTg2LWE2M2FiYjcz
MmY2Ni5jcmwwHwYDVR0jBBgwFoAUjaDNe0aaHozLqYotui92HzggAfowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hODk2ZmI1MS04MzU3LTQ2NmQtODE4Ni1hNjNh
YmI3MzJmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzreaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHyBDOl8j+PeSYth1W9CtC1pN4bWYwmkED14d/ELHxqNPbvvGgCjBIq
ferJyfZBkOqofltmVjrDmE5rC7mLKqpEX67vqjeYm2Aqn7u6f9DO8GrTxLK0mRVJ
fSj+ZGKHnn289vAYzTyvYfABv+/lSQkyEMrl0BSc1BB5HgNoHA4CsX3blpRXXinQ
unL0Tvi/MM29gym88dYRmzBjJ6WPRO/i7o9CLfkZDBsIxiZyqmqzzikyJ1bCj7Wk
oM6ORpyomJ4nQhEw2DEKQqN5yUN2ZHhqqCd6pRl+NzSqVeD/OyeAK0KqEuJoUqPM
qH+AzVz5KeHsK+kQiAMIgGk95759GQU=
-----END CERTIFICATE-----
Generated at Sat May 4 07:06:16 2024 by rpki-client on console-ams.rpki-client.org