Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6486c207-0964-3cad-adef-f426d71528a9.roa
File:                     6486c207-0964-3cad-adef-f426d71528a9.roa (raw, json)
Hash identifier:          cS0Z2smfkCIOUN5gFizWXnBCy5H7hmal7RXuniHGOf8=
Subject key identifier:   1A:5A:AD:8B:EB:5C:77:84:F8:4B:DA:16:4C:2D:C6:BE:F0:65:B1:8C
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A15E18989ECFBF8785F91AF8
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6486c207-0964-3cad-adef-f426d71528a9.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     11759
IP address blocks:        65.51.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:18:98:9e:cf:bf:87:85:f9:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=04b76d2c-452f-4a61-99fd-10c3f98ee170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:8e:92:18:8d:a6:22:81:02:22:b9:82:10:
                    01:8c:c4:76:68:2e:63:f7:a3:f7:dd:8a:30:d9:e6:
                    0f:38:06:6e:77:60:15:d3:cd:1a:07:1c:1a:a2:3f:
                    85:85:25:ef:08:0c:fd:c3:5e:0c:7a:3a:23:29:ee:
                    62:92:b7:c9:4b:da:fa:08:9e:56:51:4a:06:d9:c9:
                    8a:f9:53:fc:63:42:a4:76:03:1a:c4:79:b2:43:71:
                    35:f7:5b:b7:b9:9b:54:ee:6d:45:ff:fd:b7:68:86:
                    d5:67:b6:2a:a4:ad:b2:d9:2a:e7:eb:22:95:99:90:
                    9c:c2:ae:16:ad:ae:05:2f:66:f5:70:c8:d0:c9:95:
                    a8:6c:f4:42:86:52:b5:25:67:9a:1a:14:df:7d:e1:
                    29:e6:ff:12:dc:7b:62:c0:50:3d:f6:af:d9:f1:f7:
                    4b:57:1f:f4:5b:3d:08:95:a9:77:01:19:72:d2:ae:
                    73:37:ca:aa:c6:32:a5:3e:77:2f:a0:18:75:3b:32:
                    5a:2b:7f:df:19:94:4d:a0:21:81:66:cd:dc:ac:d0:
                    13:04:73:8e:2a:53:e3:ab:db:f6:8d:a6:86:81:3c:
                    f3:40:76:c0:1b:23:c3:cb:2a:d8:28:a6:5e:ec:82:
                    c8:df:83:cc:46:93:6f:cd:ea:9e:0c:c0:76:b1:1e:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:AD:8B:EB:5C:77:84:F8:4B:DA:16:4C:2D:C6:BE:F0:65:B1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6486c207-0964-3cad-adef-f426d71528a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:13:7b:41:3a:ba:81:d3:40:3f:47:fd:a2:1e:59:22:54:00:
         7c:a8:93:6f:a1:1d:d1:2f:71:9d:ec:28:8f:02:3d:03:01:b4:
         41:78:73:7c:3b:f6:65:d9:e0:d7:27:52:cc:a2:8d:23:b9:f5:
         23:24:87:cd:fc:3c:7c:a8:02:38:58:3e:ef:3d:28:31:47:4e:
         a8:5e:e7:23:ea:ab:36:95:8f:63:5b:20:df:71:84:89:0d:2d:
         3e:b0:d9:75:ef:3e:d2:d3:87:5f:a6:12:46:86:78:8b:96:0f:
         05:4a:0f:e3:9d:b9:6e:99:ca:8b:ab:4c:72:31:39:24:42:60:
         d7:24:96:10:d5:f1:8f:1d:eb:5e:bd:6b:3a:d0:32:5e:d3:51:
         8c:3a:9c:27:3c:4e:d7:16:28:1e:99:9b:6c:69:c8:80:05:7b:
         ae:76:56:86:21:e0:38:1e:66:9f:81:07:7a:af:58:7e:15:63:
         04:8c:4d:ec:fd:67:00:18:0b:cd:7f:cf:d9:36:5e:08:15:1e:
         df:ae:02:6a:66:e7:5d:d4:3d:cb:6d:11:9a:a5:de:b6:d7:b7:
         d9:5b:00:6c:cf:02:b3:d0:72:5c:38:f3:ba:72:4e:c8:a9:b6:
         61:28:3c:0b:20:b2:d5:66:f9:2b:34:f2:23:59:c9:6c:22:e2:
         70:38:d7:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXhiYns+/h4X5GvgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
MDRiNzZkMmMtNDUyZi00YTYxLTk5ZmQtMTBjM2Y5OGVlMTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSeOkhiNpiKBAiK5ghABjMR2aC5j96P33Yow
2eYPOAZud2AV080aBxwaoj+FhSXvCAz9w14MejojKe5ikrfJS9r6CJ5WUUoG2cmK
+VP8Y0KkdgMaxHmyQ3E191u3uZtU7m1F//23aIbVZ7YqpK2y2Srn6yKVmZCcwq4W
ra4FL2b1cMjQyZWobPRChlK1JWeaGhTffeEp5v8S3HtiwFA99q/Z8fdLVx/0Wz0I
lal3ARly0q5zN8qqxjKlPncvoBh1OzJaK3/fGZRNoCGBZs3crNATBHOOKlPjq9v2
jaaGgTzzQHbAGyPDyyrYKKZe7ILI34PMRpNvzeqeDMB2sR6a7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBparYvrXHeE+EvaFkwtxr7wZbGMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNjQ4NmMyMDctMDk2NC0z
Y2FkLWFkZWYtZjQyNmQ3MTUyOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTMGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMsTe0E6uoHTQD9H/aIeWSJUAHyok2+hHdEvcZ3sKI8CPQMBtEF4c3w7
9mXZ4NcnUsyijSO59SMkh838PHyoAjhYPu89KDFHTqhe5yPqqzaVj2NbIN9xhIkN
LT6w2XXvPtLTh1+mEkaGeIuWDwVKD+OduW6ZyourTHIxOSRCYNcklhDV8Y8d6169
azrQMl7TUYw6nCc8TtcWKB6Zm2xpyIAFe652VoYh4DgeZp+BB3qvWH4VYwSMTez9
ZwAYC81/z9k2XggVHt+uAmpm513UPcttEZql3rbXt9lbAGzPArPQclw487pyTsip
tmEoPAsgstVm+Ss08iNZyWwi4nA41zQ=
-----END CERTIFICATE-----
Generated at Tue May 7 15:27:35 2024 by rpki-client on console-fra.rpki-client.org