Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa
File:                     178a6549-7ccc-367b-90a4-a27631dfc341.roa (raw, json)
Hash identifier:          bT6UdvpdanSGwu/rEPF1kOxVcGoMVInQmUD2Y/e9rOo=
Subject key identifier:   66:AC:1B:4A:F3:F8:36:07:C2:53:6E:1E:FA:4C:1E:04:86:AE:68:D8
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F432858473FF08E5CC056C822FBB99880
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     26848
IP address blocks:        206.195.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:8e:5c:c0:56:c8:22:fb:b9:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=9bc567a3-f3be-4313-8b68-f617e9394498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:f2:77:f7:ca:6f:87:b0:ad:c8:e8:45:e7:
                    53:6d:c5:54:7a:68:4d:b0:3c:49:1a:c1:b1:3b:ca:
                    35:f5:1f:f4:90:01:7f:36:0a:f5:25:38:64:e4:7b:
                    42:d3:84:d0:ed:17:a6:29:d0:18:5a:62:be:72:c2:
                    69:64:8e:7b:f3:ad:63:44:ce:fc:9b:ce:44:68:b7:
                    ba:a5:9a:5f:25:ba:dc:55:b9:af:3b:08:e7:ad:e1:
                    26:65:e6:6b:17:3b:c0:82:ef:19:d4:e0:de:9a:f3:
                    83:6b:42:4e:d1:d4:a2:a9:13:0d:81:5b:aa:c9:e2:
                    3b:26:ad:2d:a9:6d:eb:e3:2b:63:4c:03:91:2b:d4:
                    7b:af:62:35:39:67:44:8f:33:c0:d8:ed:96:9a:c1:
                    63:e4:7d:d6:ad:6d:ef:32:e2:15:3d:19:17:20:08:
                    95:08:00:51:12:d6:88:ca:fb:c2:76:71:62:2b:d3:
                    4e:af:ef:f6:e0:99:6f:39:d7:49:2a:5c:9a:ca:0d:
                    eb:b9:6e:3c:42:c7:1e:7d:72:43:a3:7e:46:2e:94:
                    ec:4a:97:b9:c4:a2:67:ec:16:da:25:de:71:20:84:
                    67:82:2a:d7:54:b4:f8:28:ba:52:89:cd:d5:04:00:
                    f7:ed:a5:26:69:49:d6:2a:7a:27:95:91:03:fd:b3:
                    ed:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:1B:4A:F3:F8:36:07:C2:53:6E:1E:FA:4C:1E:04:86:AE:68:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:30:a8:64:1b:98:90:ec:37:8a:e1:96:57:02:55:af:d2:
         65:e3:40:38:2b:4a:bb:73:2d:12:66:88:ce:ff:d5:63:bc:73:
         c6:87:85:fb:81:32:81:4e:fe:53:bf:e7:f3:d3:9c:54:02:bd:
         1c:81:01:1b:3c:34:46:10:db:a6:20:bb:20:b9:b4:a4:e2:22:
         47:92:af:43:ed:ad:6b:b9:9f:9c:7b:22:05:bb:e3:60:f7:97:
         17:bb:9a:06:3b:51:41:92:7c:a3:f4:bd:47:be:8c:11:90:a7:
         54:32:ba:6e:6e:ff:c9:21:32:78:f6:f2:9f:74:f6:b2:23:98:
         66:36:cc:dc:3f:59:ab:76:c4:dc:ba:f7:77:17:c7:6d:4d:5b:
         d7:76:a6:f9:04:47:1e:7b:da:79:ae:b9:21:db:35:a5:c6:1f:
         9a:08:69:ad:ac:12:4d:3d:ba:dc:c0:3d:7b:d1:ba:b0:f5:d9:
         74:9e:f6:1b:83:21:42:9a:04:89:02:34:12:ee:8f:18:1d:af:
         0c:b1:bd:4c:45:5c:ff:cb:98:91:02:fc:17:d6:ae:b9:54:35:
         87:cc:e4:99:2f:2e:a0:27:d9:5d:4e:3e:0a:c2:f5:3e:b3:b9:
         65:e9:47:c3:8b:5a:89:31:75:9f:74:0b:23:5c:27:2b:0b:0d:
         08:14:8b:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8I5cwFbIIvu5mIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZiMmRhN2QtYWUwMy00YzEyLWJkMjktZjBjMjg1ODg4
NzQwMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
OWJjNTY3YTMtZjNiZS00MzEzLThiNjgtZjYxN2U5Mzk0NDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx/yd/fKb4ewrcjoRedTbcVUemhNsDxJGsGx
O8o19R/0kAF/Ngr1JThk5HtC04TQ7RemKdAYWmK+csJpZI57861jRM78m85EaLe6
pZpfJbrcVbmvOwjnreEmZeZrFzvAgu8Z1ODemvODa0JO0dSiqRMNgVuqyeI7Jq0t
qW3r4ytjTAORK9R7r2I1OWdEjzPA2O2WmsFj5H3WrW3vMuIVPRkXIAiVCABREtaI
yvvCdnFiK9NOr+/24JlvOddJKlyayg3ruW48QscefXJDo35GLpTsSpe5xKJn7Bba
Jd5xIIRngirXVLT4KLpSic3VBAD37aUmaUnWKnonlZED/bPtCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGasG0rz+DYHwlNuHvpMHgSGrmjYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmIy
ZGE3ZC1hZTAzLTRjMTItYmQyOS1mMGMyODU4ODg3NDAvMTc4YTY1NDktN2NjYy0z
NjdiLTkwYTQtYTI3NjMxZGZjMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDZiMmRhN2QtYWUwMy00YzEyLWJk
MjktZjBjMjg1ODg4NzQwLzA2YjJkYTdkLWFlMDMtNGMxMi1iZDI5LWYwYzI4NTg4
ODc0MC5jcmwwHwYDVR0jBBgwFoAUuP2JS4hPUxYYiJCHbrgbB00nSmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmIyZGE3ZC1hZTAzLTRjMTItYmQyOS1mMGMy
ODU4ODg3NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzsPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsdMKhkG5iQ7DeK4ZZXAlWv0mXjQDgrSrtzLRJmiM7/1WO8c8aHhfuB
MoFO/lO/5/PTnFQCvRyBARs8NEYQ26YguyC5tKTiIkeSr0PtrWu5n5x7IgW742D3
lxe7mgY7UUGSfKP0vUe+jBGQp1Qyum5u/8khMnj28p909rIjmGY2zNw/Wat2xNy6
93cXx21NW9d2pvkERx572nmuuSHbNaXGH5oIaa2sEk09utzAPXvRurD12XSe9huD
IUKaBIkCNBLujxgdrwyxvUxFXP/LmJEC/BfWrrlUNYfM5JkvLqAn2V1OPgrC9T6z
uWXpR8OLWokxdZ90CyNcJysLDQgUiyM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:52 2024 by rpki-client on console-fra.rpki-client.org