Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/1b6ebe08-b6e2-32cb-9f8b-9b666459831a.roa
File:                     1b6ebe08-b6e2-32cb-9f8b-9b666459831a.roa (raw, json)
Hash identifier:          P9BtJol7/Fr7AyYgLg9QgbKd0npd1NGUfuNkb66McYQ=
Subject key identifier:   18:91:4F:8B:A9:5E:9C:C5:F7:83:0E:B5:41:93:1F:76:44:AE:86:8B
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285847362B508467252F622C3C4840
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/1b6ebe08-b6e2-32cb-9f8b-9b666459831a.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     398071
IP address blocks:        206.227.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:50:84:67:25:2f:62:2c:3c:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=09c74e5c-2954-4aa3-bb29-fb3f70bd1492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:51:1f:c7:a2:ad:7a:51:8f:e1:e1:7c:8a:
                    02:a0:87:c8:18:95:71:85:75:ca:3f:5f:29:ec:f8:
                    56:11:8e:16:a4:6f:f7:89:57:54:89:f9:a8:cf:85:
                    b3:21:ea:ac:aa:25:fa:70:dd:c3:67:fe:ee:e1:71:
                    78:33:5f:ef:64:ee:72:83:be:29:3d:ab:00:0e:a8:
                    96:ce:f4:62:9d:f4:fd:4d:d6:51:58:8b:d9:61:5a:
                    e7:e0:ee:9e:ff:48:aa:49:ad:fe:c2:41:1d:db:5d:
                    33:45:c3:c5:72:80:99:4d:fe:ce:b6:ce:de:41:2e:
                    6c:1c:9e:73:77:34:16:5d:bf:da:0f:79:fa:96:65:
                    03:ac:00:51:b9:28:e0:07:a1:a4:66:c3:28:31:6d:
                    ef:c2:b3:8a:6b:c8:cb:5c:ce:38:2a:f2:48:ce:0e:
                    e1:00:09:5d:95:51:31:41:84:86:9b:54:53:95:5e:
                    25:7e:d6:61:a5:9e:9e:11:13:6a:e0:22:6a:5d:f1:
                    64:d3:30:c0:3a:25:6a:cc:49:77:e1:c8:03:b2:f5:
                    8d:49:83:90:e8:c3:eb:76:45:bb:b8:97:22:92:ce:
                    d2:59:8e:5d:00:da:3c:09:99:2c:50:26:c3:63:b1:
                    80:b4:f9:34:9f:35:08:b0:90:b4:32:cb:35:83:e0:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:91:4F:8B:A9:5E:9C:C5:F7:83:0E:B5:41:93:1F:76:44:AE:86:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/1b6ebe08-b6e2-32cb-9f8b-9b666459831a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:16:6b:d6:82:99:de:b0:50:2f:26:2c:ea:be:db:69:37:
         8d:68:5e:dd:fa:3a:ad:28:b0:44:50:cd:0c:76:fd:dd:14:a4:
         f5:e9:7d:ee:e6:6d:88:c2:91:7e:bc:1f:ea:c6:0f:5c:82:d1:
         00:ef:53:df:6d:d1:f8:4d:70:1e:ae:50:85:0e:20:f6:86:90:
         7f:5a:20:62:6f:a8:35:45:fe:f3:a4:a5:f3:7e:c9:6e:ad:50:
         2a:85:4f:d1:26:32:5d:cb:d2:95:11:40:24:ba:4d:6b:6c:f9:
         b6:0c:bc:23:86:9e:59:59:bf:0e:1f:06:98:fa:18:e4:33:e6:
         1c:a5:8d:ab:fd:09:0b:e6:83:5d:03:5f:b5:aa:ae:34:3a:18:
         42:05:9a:8a:14:6c:b9:c2:a1:e0:f6:7f:35:25:80:87:38:0f:
         46:2e:ac:7a:4f:a1:e5:19:22:f2:da:71:c8:50:7e:84:ec:c2:
         fa:de:00:3f:b8:b9:6c:4c:bf:0f:09:99:06:6f:8a:9c:ef:4d:
         ed:9b:bb:ab:41:8d:07:c7:d8:e5:b2:d0:9d:db:d2:a2:66:f4:
         ab:d7:d4:e2:72:29:74:1b:c6:3c:3b:d6:be:92:37:12:5b:dd:
         df:70:60:e0:59:92:72:17:6b:e8:7d:d4:35:74:c7:13:f6:87:
         0e:92:03:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K1CEZyUvYiw8SEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQwNmFiNTAtNDcwYS00ZjBmLWJhNWUtNzUwMGE4Yjk3
Y2Q0MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
MDljNzRlNWMtMjk1NC00YWEzLWJiMjktZmIzZjcwYmQxNDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqhRH8eirXpRj+HhfIoCoIfIGJVxhXXKP18p
7PhWEY4WpG/3iVdUifmoz4WzIeqsqiX6cN3DZ/7u4XF4M1/vZO5yg74pPasADqiW
zvRinfT9TdZRWIvZYVrn4O6e/0iqSa3+wkEd210zRcPFcoCZTf7Ots7eQS5sHJ5z
dzQWXb/aD3n6lmUDrABRuSjgB6GkZsMoMW3vwrOKa8jLXM44KvJIzg7hAAldlVEx
QYSGm1RTlV4lftZhpZ6eERNq4CJqXfFk0zDAOiVqzEl34cgDsvWNSYOQ6MPrdkW7
uJciks7SWY5dANo8CZksUCbDY7GAtPk0nzUIsJC0Mss1g+DLIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiRT4upXpzF94MOtUGTH3ZEroaLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NDA2
YWI1MC00NzBhLTRmMGYtYmE1ZS03NTAwYThiOTdjZDQvMWI2ZWJlMDgtYjZlMi0z
MmNiLTlmOGItOWI2NjY0NTk4MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjQwNmFiNTAtNDcwYS00ZjBmLWJh
NWUtNzUwMGE4Yjk3Y2Q0LzY0MDZhYjUwLTQ3MGEtNGYwZi1iYTVlLTc1MDBhOGI5
N2NkNC5jcmwwHwYDVR0jBBgwFoAUtw5Yie2ryIMEJWCKFtHcTT0QQr0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82NDA2YWI1MC00NzBhLTRmMGYtYmE1ZS03NTAw
YThiOTdjZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuNHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAY6FmvWgpnesFAvJizqvttpN41oXt36Oq0osERQzQx2/d0UpPXpfe7m
bYjCkX68H+rGD1yC0QDvU99t0fhNcB6uUIUOIPaGkH9aIGJvqDVF/vOkpfN+yW6t
UCqFT9EmMl3L0pURQCS6TWts+bYMvCOGnllZvw4fBpj6GOQz5hyljav9CQvmg10D
X7WqrjQ6GEIFmooUbLnCoeD2fzUlgIc4D0YurHpPoeUZIvLacchQfoTswvreAD+4
uWxMvw8JmQZvipzvTe2bu6tBjQfH2OWy0J3b0qJm9KvX1OJyKXQbxjw71r6SNxJb
3d9wYOBZknIXa+h91DV0xxP2hw6SA+Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:37 2024 by rpki-client on console-fra.rpki-client.org