Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b321a6e-9c61-38b9-ba8d-aa687a884f20.roa
File:                     5b321a6e-9c61-38b9-ba8d-aa687a884f20.roa (raw, json)
Hash identifier:          yEmFIqQRvkFldAvPPRCWiqvWlfdZEcIhNG/cmmHQS1s=
Subject key identifier:   F2:07:A3:E5:A1:26:46:AA:F7:A6:6E:21:53:13:1D:61:41:1F:84:A7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845191901B9D0F896BB778D9880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b321a6e-9c61-38b9-ba8d-aa687a884f20.roa
Signing time:             Mon 04 Mar 2024 17:31:40 +0000
ROA not before:           Mon 04 Mar 2024 17:31:40 +0000
ROA not after:            Sun 02 Jun 2024 16:31:40 +0000
asID:                     834
IP address blocks:        206.206.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:19:19:01:b9:d0:f8:96:bb:77:8d:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  4 17:31:40 2024 GMT
            Not After : Jun  2 16:31:40 2024 GMT
        Subject: CN=c1cb983a-bc8c-4978-8687-5eaa791fe614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d4:8a:60:b5:6f:e3:d8:87:31:9f:56:c5:2f:
                    dd:a5:2a:61:25:15:95:7e:85:98:ec:fc:46:9e:ba:
                    ef:ff:c1:48:34:9b:93:12:35:ce:59:05:1c:69:30:
                    3a:40:be:71:13:91:97:97:7b:6c:45:31:cf:a9:9b:
                    59:4d:75:e7:3c:e7:0b:72:03:bf:e1:97:32:fe:40:
                    4b:64:3a:a4:3d:ca:10:6a:74:03:83:c2:e0:44:fe:
                    3c:c8:5c:e0:de:bd:88:30:68:f0:ff:01:15:fe:b1:
                    9a:ca:35:bf:c6:f9:1d:f1:d2:3e:b6:69:69:da:8b:
                    1e:d1:4b:bd:32:0d:2e:c2:3d:37:35:51:86:71:63:
                    4a:f0:c5:6c:8e:39:37:f1:55:9c:df:f8:6e:a3:b3:
                    63:ac:a8:57:49:f2:93:60:f0:e7:cb:13:2a:f8:93:
                    fd:68:e1:e4:4c:9a:7e:2e:f9:aa:3a:b2:b4:06:90:
                    0d:06:d6:0a:01:5e:a2:c9:01:54:77:b1:32:28:0d:
                    10:95:ab:ab:da:a7:1c:ea:20:a8:b2:f0:f2:54:b3:
                    1a:e1:2d:95:06:4d:9b:9c:e2:18:07:3e:ec:b2:47:
                    6d:70:7a:d1:bb:9d:1c:21:df:c9:6e:05:e1:e3:80:
                    99:b8:a6:53:85:c2:31:c7:8f:a9:68:bc:18:d2:65:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:A3:E5:A1:26:46:AA:F7:A6:6E:21:53:13:1D:61:41:1F:84:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5b321a6e-9c61-38b9-ba8d-aa687a884f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:70:41:5a:51:ad:23:a3:e3:5e:5a:4d:07:99:3a:b9:41:ab:
         5c:44:15:9e:2b:a9:d2:28:23:2f:56:32:a7:ae:db:f6:0b:72:
         61:74:c3:d5:02:14:b1:a7:98:94:f4:01:81:6f:0e:25:da:95:
         66:8d:d2:12:39:19:47:7d:f9:db:fe:dc:97:d7:40:2a:4b:c7:
         7a:a4:2c:1c:0a:14:52:0a:e0:34:a5:95:46:e5:93:dd:b1:08:
         e3:2d:9b:2d:5b:c3:0b:a8:b8:3d:3e:8e:5b:6d:52:bd:cb:23:
         58:1e:4f:7d:ec:fe:e8:c6:19:bb:90:ec:78:ee:4a:b8:d1:66:
         81:c6:cd:72:ee:8b:05:0e:87:cd:10:0f:83:71:85:bd:8d:24:
         e8:d4:86:71:ad:d6:e2:ab:b6:a2:75:d3:45:fe:e3:57:c4:f3:
         01:87:b5:28:27:d2:9e:44:12:98:aa:e0:6b:d0:7a:0b:99:68:
         2b:0c:c7:7e:5a:ac:07:53:0b:c9:b0:e3:e6:39:cf:a7:82:2c:
         70:f3:9c:72:0f:f5:2b:e5:e3:6b:92:ff:14:88:be:64:d6:d3:
         0e:b3:10:a3:b3:f3:30:73:73:82:f8:57:fc:13:b6:39:73:d8:
         78:76:b4:30:91:99:8b:0f:72:db:9c:6d:4a:97:4c:bb:92:cf:
         7e:72:ea:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUZGQG50PiWu3eNmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMwNDE3MzE0MFoXDTI0MDYwMjE2MzE0MFowLzEtMCsGA1UEAxMk
YzFjYjk4M2EtYmM4Yy00OTc4LTg2ODctNWVhYTc5MWZlNjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitSKYLVv49iHMZ9WxS/dpSphJRWVfoWY7PxG
nrrv/8FINJuTEjXOWQUcaTA6QL5xE5GXl3tsRTHPqZtZTXXnPOcLcgO/4Zcy/kBL
ZDqkPcoQanQDg8LgRP48yFzg3r2IMGjw/wEV/rGayjW/xvkd8dI+tmlp2ose0Uu9
Mg0uwj03NVGGcWNK8MVsjjk38VWc3/huo7NjrKhXSfKTYPDnyxMq+JP9aOHkTJp+
LvmqOrK0BpANBtYKAV6iyQFUd7EyKA0Qlaur2qcc6iCosvDyVLMa4S2VBk2bnOIY
Bz7sskdtcHrRu50cId/JbgXh44CZuKZThcIxx4+paLwY0mU3SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIHo+WhJkaq96ZuIVMTHWFBH4SnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWIzMjFhNmUtOWM2MS0z
OGI5LWJhOGQtYWE2ODdhODg0ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1wQVpRrSOj415aTQeZOrlBq1xEFZ4rqdIoIy9WMqeu2/YLcmF0w9UC
FLGnmJT0AYFvDiXalWaN0hI5GUd9+dv+3JfXQCpLx3qkLBwKFFIK4DSllUblk92x
COMtmy1bwwuouD0+jlttUr3LI1geT33s/ujGGbuQ7HjuSrjRZoHGzXLuiwUOh80Q
D4Nxhb2NJOjUhnGt1uKrtqJ100X+41fE8wGHtSgn0p5EEpiq4GvQeguZaCsMx35a
rAdTC8mw4+Y5z6eCLHDznHIP9Svl42uS/xSIvmTW0w6zEKOz8zBzc4L4V/wTtjlz
2Hh2tDCRmYsPctucbUqXTLuSz35y6lg=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:04 2024 by rpki-client on console-fra.rpki-client.org