Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa
File:                     06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa (raw, json)
Hash identifier:          VP6FPyt+fz2ROjtWTSCjU0el5aN+5t/yNpknEEQyEsE=
Subject key identifier:   C3:CE:60:B8:54:8E:C1:F9:BD:3C:EF:DA:C1:4D:98:54:66:66:9D:DA
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285847AF9BEBD078307148A0308A00
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     398324
IP address blocks:        206.168.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:eb:d0:78:30:71:48:a0:30:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=d1a67986-e145-4b6b-a64b-16d57168dc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:b0:ae:33:82:d7:60:ce:51:d4:a1:8f:96:
                    55:6a:c8:46:67:1c:a9:cb:c4:3d:e2:4b:cc:aa:5b:
                    3c:7d:d8:a9:0c:68:62:39:e6:cb:17:44:86:99:d8:
                    b4:fb:87:cc:91:9e:a9:1d:13:2b:89:8a:b2:af:9e:
                    6c:a3:74:57:ca:e2:a7:b4:ba:db:3f:72:96:ad:93:
                    a8:33:2c:11:a8:e2:a0:0a:be:57:81:f8:08:7e:fa:
                    15:d8:54:0d:20:8c:b1:23:23:2a:bc:fb:82:d5:6d:
                    76:b1:84:71:c6:d6:b6:d0:bb:6a:35:a7:e7:af:10:
                    84:6b:14:c6:8b:bd:d2:f3:89:b7:10:8d:b6:d2:3f:
                    8f:b2:a4:61:73:ac:2a:ed:97:6e:94:61:3e:b9:d7:
                    2c:cc:dc:36:6a:ba:7c:d4:83:55:7d:90:7e:1c:a2:
                    6a:1c:cd:34:e8:4c:fd:45:da:ec:37:8a:df:c0:5c:
                    ce:c9:79:65:9a:70:08:d2:ba:28:39:eb:6a:d5:1f:
                    53:80:6c:94:5e:29:39:1d:3f:b7:72:b2:bc:e0:6b:
                    77:63:41:5e:98:40:49:3d:bf:93:75:ef:f0:a1:9f:
                    ff:30:08:94:82:8c:d8:5c:a3:44:21:82:8b:5a:d5:
                    d0:e3:b2:75:b2:c5:b1:22:c1:9a:6a:e7:5f:fe:7e:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:60:B8:54:8E:C1:F9:BD:3C:EF:DA:C1:4D:98:54:66:66:9D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:28:dc:8c:e4:f1:ad:d2:a1:4a:e7:0e:b4:b8:b1:35:08:c6:
         87:a8:be:29:fe:b0:3a:51:b5:4d:c2:f5:fe:9e:b0:dd:d6:63:
         4e:c1:a3:78:16:44:03:97:33:61:21:6c:d5:23:74:61:64:af:
         ab:21:72:c5:0c:a6:db:e6:df:cd:fa:50:5f:46:41:1c:42:32:
         21:cf:5d:e9:e6:d4:b7:2d:19:e4:14:11:79:f9:7d:7c:7b:db:
         de:fc:b0:d2:3b:8f:2d:53:53:4a:c2:13:d7:81:4b:5e:8e:cf:
         a6:a3:63:1e:9c:b7:d2:82:d8:9c:99:6c:90:38:31:6d:42:65:
         05:71:c9:14:b9:4e:6a:34:36:c8:5a:94:67:bf:e5:66:97:f2:
         6a:30:7e:72:21:68:23:7d:2e:f4:ef:76:0c:c3:e0:b9:53:db:
         7f:be:84:e3:8b:7d:19:75:62:e9:ff:59:bf:d2:2f:c7:8b:87:
         2a:2d:1b:99:80:c1:c2:9a:67:38:7c:25:b7:1b:f5:8c:26:61:
         02:1b:41:b1:3d:46:9d:48:2d:eb:6c:4a:2b:b9:60:94:df:bb:
         0f:ed:d4:bb:a6:4b:9c:8c:f9:6c:d5:68:e2:75:eb:c1:88:af:
         a1:df:ea:2a:63:85:35:e4:f3:f4:96:5b:fc:b5:b7:1b:dc:67:
         68:11:4e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEevm+vQeDBxSKAwigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk
ZDFhNjc5ODYtZTE0NS00YjZiLWE2NGItMTZkNTcxNjhkYzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsISwrjOC12DOUdShj5ZVashGZxypy8Q94kvM
qls8fdipDGhiOebLF0SGmdi0+4fMkZ6pHRMriYqyr55so3RXyuKntLrbP3KWrZOo
MywRqOKgCr5XgfgIfvoV2FQNIIyxIyMqvPuC1W12sYRxxta20LtqNafnrxCEaxTG
i73S84m3EI220j+PsqRhc6wq7ZdulGE+udcszNw2arp81INVfZB+HKJqHM006Ez9
RdrsN4rfwFzOyXllmnAI0rooOetq1R9TgGyUXik5HT+3crK84Gt3Y0FemEBJPb+T
de/woZ//MAiUgozYXKNEIYKLWtXQ47J1ssWxIsGaaudf/n6SWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPOYLhUjsH5vTzv2sFNmFRmZp3aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvMDZmNDA4YzEtMTU3Yy0z
YzRhLTgxMmEtYzg4ZDRlZjRjMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqgiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAco3Izk8a3SoUrnDrS4sTUIxoeovin+sDpRtU3C9f6esN3WY07Bo3gW
RAOXM2EhbNUjdGFkr6shcsUMptvm3836UF9GQRxCMiHPXenm1LctGeQUEXn5fXx7
2978sNI7jy1TU0rCE9eBS16Oz6ajYx6ct9KC2JyZbJA4MW1CZQVxyRS5Tmo0Nsha
lGe/5WaX8mowfnIhaCN9LvTvdgzD4LlT23++hOOLfRl1Yun/Wb/SL8eLhyotG5mA
wcKaZzh8Jbcb9YwmYQIbQbE9Rp1ILetsSiu5YJTfuw/t1LumS5yM+WzVaOJ168GI
r6Hf6ipjhTXk8/SWW/y1txvcZ2gRTvo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org