Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa
File:                     510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa (raw, json)
Hash identifier:          wF4Hkx9qigFbq9FbbjZr4J/0r+49jjTQeYcX01euPrY=
Subject key identifier:   44:00:C9:CE:60:48:3E:8D:12:E1:46:B8:1E:F2:12:F3:96:38:23:CC
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F43285847E78F64DB492F8B3D16236880
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     0
IP address blocks:        206.71.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:db:49:2f:8b:3d:16:23:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=2b48ac54-1c5a-448e-99d9-85550f2b2ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:4b:42:c8:d2:fb:d9:90:fa:5b:c1:84:31:
                    0b:e0:2c:ea:0a:36:11:b4:d6:3a:76:b5:12:28:70:
                    8c:e1:0f:89:e9:8f:c8:34:72:0f:92:5f:4e:7a:4c:
                    e7:8d:74:e8:94:9b:6b:2e:20:38:a9:3d:e5:9c:42:
                    d8:f6:f6:cd:a6:27:b8:8c:4c:db:55:3b:52:e7:db:
                    0a:5c:64:a6:15:a2:ac:24:dd:07:e2:c0:c3:19:c0:
                    e4:37:20:85:be:44:24:59:19:d2:02:e1:16:9e:04:
                    cd:f5:01:74:e3:63:70:fe:d5:e0:3b:f6:50:e4:80:
                    a3:ca:2a:44:f6:24:e2:85:ac:bc:b2:75:30:ea:10:
                    20:c5:fd:15:33:f4:19:d0:47:5b:10:01:1c:22:49:
                    05:f8:56:16:7d:4f:cd:ea:db:f9:08:55:fa:25:71:
                    c3:c2:b0:5d:da:c8:f1:d3:65:39:50:a3:83:ec:cd:
                    9c:6d:3f:ba:3a:46:0f:0a:45:fa:97:f4:53:d6:ee:
                    51:27:bd:50:64:67:e8:c1:cb:ab:28:11:95:35:95:
                    fd:48:77:65:6c:15:f2:d6:7c:9c:fd:dc:dc:42:34:
                    fc:5e:8a:6a:58:6e:36:cf:94:f9:e4:d5:cb:b7:43:
                    f4:3a:4b:cc:24:a7:d3:16:13:cb:16:31:dc:89:52:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:C9:CE:60:48:3E:8D:12:E1:46:B8:1E:F2:12:F3:96:38:23:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:16:64:5f:be:a4:5a:99:c8:2d:f9:2d:51:f4:4f:6a:7d:11:
         9e:34:af:3e:cf:f6:ce:2d:93:2e:59:e2:9d:3b:2b:43:bf:af:
         2e:b1:30:07:00:9b:82:37:19:e7:ee:72:ba:9e:3f:0d:1e:de:
         d5:c6:f3:e8:96:f9:c6:86:54:48:52:e9:0c:96:89:3c:2c:7d:
         cc:3d:f6:12:d7:36:8f:50:17:a6:18:d9:a2:95:d0:94:af:13:
         f7:6e:18:ba:ab:d8:4c:a9:d7:eb:74:91:91:52:1d:18:82:84:
         7c:e0:13:c4:dd:a5:ab:50:9a:56:a2:cf:2a:d1:a7:64:96:5b:
         35:65:19:37:46:a7:b1:cb:40:e9:8c:2d:3d:95:3a:d6:15:3f:
         ca:17:27:6e:65:dc:85:02:5c:ed:b4:27:a5:e3:8a:12:bf:d1:
         57:d9:e7:b9:a6:01:0c:44:f4:50:c3:67:06:5f:26:86:f8:a3:
         0a:82:63:a3:34:b6:2d:81:57:d1:be:97:8a:ca:ac:ef:f7:14:
         67:53:a4:f3:a2:aa:d6:98:82:82:eb:89:3d:5c:77:13:43:3c:
         67:44:ff:12:b5:52:20:24:aa:25:58:6d:c6:ae:e5:82:28:22:
         da:9a:d8:c2:13:cc:3c:e0:f4:04:e6:1b:82:bb:ed:71:fb:95:
         6f:5f:a8:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2TbSS+LPRYjaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy
MmQ2MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
MmI0OGFjNTQtMWM1YS00NDhlLTk5ZDktODU1NTBmMmIyZWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA5LQsjS+9mQ+lvBhDEL4CzqCjYRtNY6drUS
KHCM4Q+J6Y/INHIPkl9OekznjXTolJtrLiA4qT3lnELY9vbNpie4jEzbVTtS59sK
XGSmFaKsJN0H4sDDGcDkNyCFvkQkWRnSAuEWngTN9QF042Nw/tXgO/ZQ5ICjyipE
9iTihay8snUw6hAgxf0VM/QZ0EdbEAEcIkkF+FYWfU/N6tv5CFX6JXHDwrBd2sjx
02U5UKOD7M2cbT+6OkYPCkX6l/RT1u5RJ71QZGfowcurKBGVNZX9SHdlbBXy1nyc
/dzcQjT8XopqWG42z5T55NXLt0P0OkvMJKfTFhPLFjHciVLxYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQAyc5gSD6NEuFGuB7yEvOWOCPMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2
NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvNTEwYjllZjQtNjQzYS0z
Y2ZjLWJiMDgtYmNiMzIxMTMwYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh
OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw
MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1
MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkcMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQWZF++pFqZyC35LVH0T2p9EZ40rz7P9s4tky5Z4p07K0O/ry6xMAcA
m4I3GefucrqePw0e3tXG8+iW+caGVEhS6QyWiTwsfcw99hLXNo9QF6YY2aKV0JSv
E/duGLqr2Eyp1+t0kZFSHRiChHzgE8TdpatQmlaizyrRp2SWWzVlGTdGp7HLQOmM
LT2VOtYVP8oXJ25l3IUCXO20J6XjihK/0VfZ57mmAQxE9FDDZwZfJob4owqCY6M0
ti2BV9G+l4rKrO/3FGdTpPOiqtaYgoLriT1cdxNDPGdE/xK1UiAkqiVYbcau5YIo
Itqa2MITzDzg9ATmG4K77XH7lW9fqGk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org