Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa
File:                     bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa (raw, json)
Hash identifier:          CkHhh0WM5mfz+earPv5FNQFHB+wStGJvr+mkFmPzzvc=
Subject key identifier:   A1:83:F7:E7:83:06:7D:71:04:BB:3D:6D:56:9E:BB:BE:34:57:60:DD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858477BF667B4FC75EDB4BE6BB040
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     13332
IP address blocks:        206.206.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:67:b4:fc:75:ed:b4:be:6b:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=1c911c4f-042c-4545-af2d-dd6900525ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:44:48:19:be:c3:42:4c:ed:a3:dd:b9:f9:2b:
                    74:fa:87:2d:aa:9a:d9:47:be:4c:99:20:40:21:8f:
                    b6:2b:97:eb:47:bb:33:e7:dc:9e:c8:6d:22:41:60:
                    8b:9e:10:4d:02:65:63:9c:c6:e3:0d:75:a8:17:8b:
                    db:81:65:b7:da:c5:72:ab:11:64:ea:64:ed:fe:dc:
                    c1:40:28:0a:3c:fd:da:0b:c4:ef:a8:31:7a:03:13:
                    cc:5e:a2:e8:82:d4:e6:53:a7:13:dc:23:2b:7a:72:
                    72:2d:78:ae:89:1e:da:df:24:d5:85:2d:80:21:2f:
                    d9:dc:a2:8b:d4:95:13:e1:10:09:7b:b7:a6:3b:49:
                    7d:3b:e4:aa:c3:72:02:e7:6e:e2:eb:d6:28:80:96:
                    2b:53:dc:25:7b:63:3b:ad:c7:13:79:9f:99:f5:88:
                    19:44:9f:5c:83:5a:5f:e8:6c:ad:2c:ce:3a:b7:cf:
                    d5:49:7a:de:69:45:27:59:3c:36:46:0e:9e:43:69:
                    db:69:b0:56:35:28:1f:88:fe:a0:c7:61:e4:a6:65:
                    3c:f6:6d:68:b7:e2:2d:ff:f4:51:67:63:b4:88:69:
                    d0:a9:04:09:62:56:cb:3d:08:5c:36:32:3b:e5:ae:
                    8e:91:6a:05:a3:e8:05:d7:0f:eb:1f:f6:d5:d5:b5:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:F7:E7:83:06:7D:71:04:BB:3D:6D:56:9E:BB:BE:34:57:60:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bcc68759-c3e3-3697-9b8a-b4cd4981b4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a9:43:59:a6:03:60:f0:2f:14:eb:70:2a:43:56:be:85:c7:
         1e:69:11:d0:1f:05:41:42:26:17:13:11:9a:5b:85:f1:53:b8:
         4c:7a:75:27:dc:3b:f4:4e:76:98:72:82:f5:21:1d:5a:dd:fd:
         df:3c:04:a7:b2:4b:fe:8e:b3:41:e5:cf:b7:58:7b:e7:c1:1a:
         38:a3:83:d3:00:b9:48:25:01:56:f1:1f:5c:29:22:4f:91:ff:
         fd:ab:2e:99:ba:b7:32:58:1c:47:97:e8:0d:24:9e:4b:07:5c:
         e6:c3:cb:20:08:39:0d:79:d3:d4:47:e9:68:25:19:bc:63:f2:
         29:c1:ed:13:61:e6:be:3c:a3:82:cb:bd:3d:64:e7:da:4b:e1:
         40:ff:36:9b:cc:11:a8:f1:be:70:cb:19:17:17:48:36:ba:92:
         a1:e9:7d:f0:a9:dc:a2:c9:11:42:62:53:b2:4a:6b:38:f4:a9:
         7a:89:07:50:ac:06:df:4f:30:7d:d9:c4:9c:b1:27:5d:4a:67:
         79:e6:f5:13:94:ab:02:96:f1:d6:49:aa:83:a9:ed:bf:af:60:
         92:81:c8:42:8a:49:92:7e:69:a3:a3:a2:6b:d7:9b:eb:03:55:
         2a:d8:c9:fb:e3:2e:f1:0d:fe:fe:f5:2c:15:6e:4b:bf:ce:a9:
         8e:4b:86:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79me0/HXttL5rsEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk
MWM5MTFjNGYtMDQyYy00NTQ1LWFmMmQtZGQ2OTAwNTI1ZWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkRIGb7DQkzto925+St0+octqprZR75MmSBA
IY+2K5frR7sz59yeyG0iQWCLnhBNAmVjnMbjDXWoF4vbgWW32sVyqxFk6mTt/tzB
QCgKPP3aC8TvqDF6AxPMXqLogtTmU6cT3CMrenJyLXiuiR7a3yTVhS2AIS/Z3KKL
1JUT4RAJe7emO0l9O+Sqw3IC527i69YogJYrU9wle2M7rccTeZ+Z9YgZRJ9cg1pf
6GytLM46t8/VSXreaUUnWTw2Rg6eQ2nbabBWNSgfiP6gx2HkpmU89m1ot+It//RR
Z2O0iGnQqQQJYlbLPQhcNjI75a6OkWoFo+gF1w/rH/bV1bVlaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGD9+eDBn1xBLs9bVaeu740V2DdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmNjNjg3NTktYzNlMy0z
Njk3LTliOGEtYjRjZDQ5ODFiNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs51MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6pQ1mmA2DwLxTrcCpDVr6Fxx5pEdAfBUFCJhcTEZpbhfFTuEx6dSfc
O/ROdphygvUhHVrd/d88BKeyS/6Os0Hlz7dYe+fBGjijg9MAuUglAVbxH1wpIk+R
//2rLpm6tzJYHEeX6A0knksHXObDyyAIOQ1509RH6WglGbxj8inB7RNh5r48o4LL
vT1k59pL4UD/NpvMEajxvnDLGRcXSDa6kqHpffCp3KLJEUJiU7JKazj0qXqJB1Cs
Bt9PMH3ZxJyxJ11KZ3nm9ROUqwKW8dZJqoOp7b+vYJKByEKKSZJ+aaOjomvXm+sD
VSrYyfvjLvEN/v71LBVuS7/OqY5Lhi0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:28 2024 by rpki-client on console-fra.rpki-client.org