Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa
File:                     1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa (raw, json)
Hash identifier:          qMFsxtXvLVvHHeTJlkFqVPQn/NJv8HDfUsaCC/1tmlY=
Subject key identifier:   F6:6F:A5:BA:B9:7F:8D:7F:1B:39:61:19:1E:31:5F:3B:A3:AE:45:97
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584750B0A8A2E11AA934EBDBB840
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     215311
IP address blocks:        206.206.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a8:a2:e1:1a:a9:34:eb:db:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=a6ba0b55-2695-425c-84a7-4a32dbba81f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:ed:83:e2:67:6a:85:31:ac:a7:1a:46:89:
                    0b:77:3f:98:8b:fe:16:83:dd:4b:f7:62:ed:c4:dc:
                    c5:45:6d:03:9b:91:93:40:68:07:de:ef:4c:75:b9:
                    1d:bb:b4:72:ca:aa:c5:47:a3:41:11:a2:a6:db:a9:
                    a5:3e:0b:e9:e1:86:4c:22:e3:18:5b:a6:16:e9:60:
                    66:bc:7b:b2:09:49:61:87:48:f3:97:4e:cf:a6:32:
                    6d:4d:5d:21:db:45:80:58:9d:b1:d9:d2:ff:31:4a:
                    c6:68:c2:b2:36:d4:93:3b:b4:b6:90:82:c9:39:a4:
                    54:20:cd:6d:d0:a9:c7:ed:98:b2:22:57:fa:f3:0c:
                    b7:21:b5:1b:6f:36:df:16:7b:9d:f9:1c:18:40:bc:
                    a4:84:43:47:be:2a:6d:d7:22:95:7b:c3:4e:3b:b8:
                    24:9a:f7:99:92:a1:a5:d0:e6:2f:f6:e4:a3:54:61:
                    d0:f7:f1:02:11:7b:6e:2e:05:cd:0a:0b:d1:ba:ac:
                    3f:c8:5c:39:38:f3:78:42:5f:5a:23:6b:3f:48:3f:
                    4d:33:5f:c7:77:c9:f1:e4:f4:01:f6:76:ac:f1:68:
                    b7:b0:60:20:f5:c5:ac:10:fd:7e:4d:5a:a5:2e:fb:
                    45:fa:eb:81:d3:58:f5:35:f7:9d:28:52:95:fb:3c:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:A5:BA:B9:7F:8D:7F:1B:39:61:19:1E:31:5F:3B:A3:AE:45:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c28ef08-0aa2-3f02-b30f-28a1984c3c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:d3:0d:60:e2:a5:38:b0:f6:a3:5a:9d:73:5d:30:23:64:74:
         fd:9e:6a:a9:e0:8e:82:de:ec:72:19:14:7e:9e:fc:91:7e:2f:
         9d:b8:5c:80:d9:31:7e:4a:71:00:a2:f6:4f:53:09:ef:2f:0a:
         6b:14:e1:5b:fc:d6:78:7d:0b:6a:db:a8:05:a0:00:2c:53:75:
         18:60:ab:d8:bd:b2:cf:ec:3d:17:1b:a5:1a:e6:da:cb:4a:fb:
         97:f3:5e:60:eb:8e:d1:1c:18:73:7a:e7:b7:d3:8b:bd:f9:79:
         a9:6c:6f:29:be:15:f5:b4:0e:8b:68:92:c9:12:38:ca:3f:b3:
         ac:63:14:ed:b5:8c:a4:6d:6a:80:dd:a6:97:f8:49:3e:f1:98:
         02:39:61:45:d3:57:d7:27:fc:b7:75:df:60:92:8d:84:90:8e:
         4a:19:93:ec:9a:53:08:dc:46:7c:48:0d:fc:19:d9:b6:a6:3d:
         c2:cd:f1:d5:54:fb:28:ef:9e:96:fe:0c:2c:60:7b:dc:ce:af:
         f7:98:33:a0:1b:96:f6:0f:77:72:dc:41:ad:d6:6a:75:e9:8d:
         ec:5f:b8:15:b1:4b:62:ad:77:d8:90:ce:e1:89:a8:08:f0:2b:
         7a:76:ab:0a:7d:37:22:0e:74:70:78:a7:1d:2c:d7:bb:ff:a3:
         7a:a6:d4:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQsKii4RqpNOvbuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDkyNDAxMDAzMVoXDTI0MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
YTZiYTBiNTUtMjY5NS00MjVjLTg0YTctNGEzMmRiYmE4MWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0rtg+JnaoUxrKcaRokLdz+Yi/4Wg91L92Lt
xNzFRW0Dm5GTQGgH3u9Mdbkdu7RyyqrFR6NBEaKm26mlPgvp4YZMIuMYW6YW6WBm
vHuyCUlhh0jzl07PpjJtTV0h20WAWJ2x2dL/MUrGaMKyNtSTO7S2kILJOaRUIM1t
0KnH7ZiyIlf68wy3IbUbbzbfFnud+RwYQLykhENHvipt1yKVe8NOO7gkmveZkqGl
0OYv9uSjVGHQ9/ECEXtuLgXNCgvRuqw/yFw5OPN4Ql9aI2s/SD9NM1/Hd8nx5PQB
9nas8Wi3sGAg9cWsEP1+TVqlLvtF+uuB01j1NfedKFKV+zzRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZvpbq5f41/GzlhGR4xXzujrkWXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMWMyOGVmMDgtMGFhMi0z
ZjAyLWIzMGYtMjhhMTk4NGMzYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzs5MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMjTDWDipTiw9qNanXNdMCNkdP2eaqngjoLe7HIZFH6e/JF+L524XIDZ
MX5KcQCi9k9TCe8vCmsU4Vv81nh9C2rbqAWgACxTdRhgq9i9ss/sPRcbpRrm2stK
+5fzXmDrjtEcGHN657fTi735ealsbym+FfW0DotokskSOMo/s6xjFO21jKRtaoDd
ppf4ST7xmAI5YUXTV9cn/Ld132CSjYSQjkoZk+yaUwjcRnxIDfwZ2bamPcLN8dVU
+yjvnpb+DCxge9zOr/eYM6AblvYPd3LcQa3WanXpjexfuBWxS2Ktd9iQzuGJqAjw
K3p2qwp9NyIOdHB4px0s17v/o3qm1C8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org