Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9f1386a6-851d-34fb-8dd3-58d2f3872ebd.roa
File:                     9f1386a6-851d-34fb-8dd3-58d2f3872ebd.roa (raw, json)
Hash identifier:          U/jEUrGtf+HTJhAdhCHrRgeAmVlFYxjDofPZnpDZQtw=
Subject key identifier:   F8:BF:DC:93:76:DD:16:66:A3:DC:F6:0B:63:BE:2F:66:C5:F8:B2:94
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584894A5EE7523D5DF4D2E599E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9f1386a6-851d-34fb-8dd3-58d2f3872ebd.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     16276
IP address blocks:        206.206.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:ee:75:23:d5:df:4d:2e:59:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=009031e3-f57b-4122-9e79-3bce36a5b9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:83:a6:d2:32:6a:e7:13:e5:a4:53:12:63:
                    a5:d5:c1:bc:54:f3:04:53:21:01:30:e0:3f:5c:1b:
                    b6:81:4f:00:d2:33:ed:33:4a:f7:a3:95:f4:7b:76:
                    e5:72:2a:17:d1:cb:be:14:27:a2:e9:32:de:fc:91:
                    d7:f5:f2:bf:f1:8b:38:1b:2c:a9:39:41:d5:9c:04:
                    53:ac:9c:7f:66:35:f4:7e:84:f4:a9:a3:a6:5e:5b:
                    fe:06:c1:1d:19:12:c5:df:99:07:be:df:b3:99:03:
                    db:8f:22:b3:c8:fe:d9:ae:d3:4b:51:98:14:7e:f3:
                    e6:2a:79:f9:6e:8a:f2:e8:63:07:ad:e8:2b:50:5b:
                    50:f1:49:99:55:9d:02:d9:6e:9c:d4:b3:c9:22:43:
                    a9:db:5e:f8:e8:95:71:ac:c3:96:a2:e5:5c:66:21:
                    2d:09:88:df:ff:c2:d1:66:89:04:5e:b7:67:93:46:
                    76:eb:9a:e2:01:e7:52:a8:1a:f1:0d:34:d2:a5:e1:
                    8d:83:47:0f:2c:51:e6:ed:2c:aa:1f:28:5d:c7:21:
                    ed:ad:ec:a7:d4:97:70:79:aa:46:5b:d3:aa:3c:12:
                    65:88:b0:03:54:c1:3a:37:8a:2c:d2:37:b1:cf:a7:
                    87:53:b2:ce:24:37:60:41:0a:42:62:91:73:d4:20:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BF:DC:93:76:DD:16:66:A3:DC:F6:0B:63:BE:2F:66:C5:F8:B2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9f1386a6-851d-34fb-8dd3-58d2f3872ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:40:5c:55:58:fc:f2:42:7f:78:a9:64:cf:4f:b5:28:ec:ff:
         8e:5b:eb:6f:0d:d7:14:e3:ee:d5:8e:31:e6:30:26:5e:5d:2b:
         6d:14:8a:c5:06:85:43:c1:dc:01:61:a6:ae:93:78:ec:6e:bf:
         f0:06:77:4c:e7:95:56:70:1b:26:d8:57:b0:5f:32:d4:94:b5:
         60:54:48:5a:10:d1:73:a6:d4:82:eb:1c:fc:22:1a:08:3a:db:
         16:75:24:ee:e3:d5:db:3b:ce:17:ed:22:0f:b6:04:d9:b3:36:
         98:c6:74:de:4f:45:16:eb:63:ea:85:42:a1:ff:7c:9c:e8:90:
         8d:11:78:b0:85:7c:56:f4:26:3d:b8:73:42:6f:d5:b9:90:94:
         4a:51:c6:18:85:65:cd:45:98:d7:1a:6d:61:cf:20:5e:29:f8:
         3f:f2:e4:07:94:88:09:bf:d2:27:e0:da:c0:d6:7b:3a:59:b1:
         41:ac:49:b0:67:11:ee:81:9c:73:30:c8:09:4e:d9:20:d9:10:
         4c:aa:75:ec:91:99:00:94:e3:6a:1e:85:e2:fd:78:76:ab:2e:
         65:28:5d:9e:e0:1d:53:38:d6:ea:c6:34:bb:16:5b:d6:d1:cb:
         85:ef:e6:f7:c1:ad:b1:69:d9:c5:e4:47:3a:83:86:0a:f0:84:
         89:85:8b:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpe51I9XfTS5ZnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
MDA5MDMxZTMtZjU3Yi00MTIyLTllNzktM2JjZTM2YTViOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS6DptIyaucT5aRTEmOl1cG8VPMEUyEBMOA/
XBu2gU8A0jPtM0r3o5X0e3blcioX0cu+FCei6TLe/JHX9fK/8Ys4GyypOUHVnART
rJx/ZjX0foT0qaOmXlv+BsEdGRLF35kHvt+zmQPbjyKzyP7ZrtNLUZgUfvPmKnn5
bory6GMHregrUFtQ8UmZVZ0C2W6c1LPJIkOp21746JVxrMOWouVcZiEtCYjf/8LR
ZokEXrdnk0Z265riAedSqBrxDTTSpeGNg0cPLFHm7SyqHyhdxyHtreyn1JdweapG
W9OqPBJliLADVME6N4os0jexz6eHU7LOJDdgQQpCYpFz1CBZeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPi/3JN23RZmo9z2C2O+L2bF+LKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWYxMzg2YTYtODUxZC0z
NGZiLThkZDMtNThkMmYzODcyZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRAXFVY/PJCf3ipZM9PtSjs/45b628N1xTj7tWOMeYwJl5dK20UisUG
hUPB3AFhpq6TeOxuv/AGd0znlVZwGybYV7BfMtSUtWBUSFoQ0XOm1ILrHPwiGgg6
2xZ1JO7j1ds7zhftIg+2BNmzNpjGdN5PRRbrY+qFQqH/fJzokI0ReLCFfFb0Jj24
c0Jv1bmQlEpRxhiFZc1FmNcabWHPIF4p+D/y5AeUiAm/0ifg2sDWezpZsUGsSbBn
Ee6BnHMwyAlO2SDZEEyqdeyRmQCU42oeheL9eHarLmUoXZ7gHVM41urGNLsWW9bR
y4Xv5vfBrbFp2cXkRzqDhgrwhImFi2Q=
-----END CERTIFICATE-----
Generated at Thu Feb 6 19:33:46 2025 by rpki-client