Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa
File:                     7285b1a1-ccbc-3639-a962-652ca4939af8.roa (raw, json)
Hash identifier:          RDTAmQRfLNrHIFqGM/OOEaOI2BQoUGk/1EtJLaqOJ/Y=
Subject key identifier:   CE:3C:02:A3:64:70:46:05:FA:AE:A5:ED:D3:3C:17:BD:85:62:80:25
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230E7509D9E37C55E687B00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     46261
IP address blocks:        206.127.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e7:50:9d:9e:37:c5:5e:68:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=68eb81a9-adf7-4927-8fa2-3c0b8732b71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:30:4f:72:29:4a:c8:21:2c:b8:12:7d:a3:25:
                    3b:63:c2:d0:01:c2:84:ce:9f:66:8d:52:58:36:de:
                    de:79:60:d0:92:d9:f1:5f:4d:d5:ba:14:0c:45:29:
                    8b:ae:c1:b5:10:69:77:88:3e:b8:6b:d7:85:79:d2:
                    a8:cf:99:4e:da:39:6d:5d:b6:9b:7a:5e:cf:5f:8a:
                    5c:ee:ce:00:13:45:3d:a7:60:d0:14:3f:7a:2b:b8:
                    fa:12:29:28:14:d6:0b:ca:c0:e1:00:18:82:59:47:
                    0e:df:81:8d:fb:a3:45:ab:df:53:bc:19:93:bd:b8:
                    91:d5:3d:88:68:ba:07:a4:f5:f1:80:c8:21:86:77:
                    fa:0b:45:16:25:15:f4:39:b7:59:1a:5c:64:c5:33:
                    6e:34:f4:8e:6a:05:ba:57:d6:4b:19:18:e8:1d:91:
                    fb:70:94:c5:14:f6:e7:c5:ab:a2:5c:36:58:e0:38:
                    64:02:5a:a6:37:c1:04:81:1d:d7:51:7a:6b:b8:de:
                    93:58:2f:db:d4:5c:65:3d:4c:18:2a:e7:56:e8:c6:
                    e0:93:11:d4:16:77:8c:aa:08:a4:bc:de:39:d4:aa:
                    1c:30:19:b7:0b:b9:47:b0:7a:53:95:2e:87:58:7b:
                    74:7e:c3:30:58:b5:28:29:b8:a0:cd:0c:db:c3:d9:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:02:A3:64:70:46:05:FA:AE:A5:ED:D3:3C:17:BD:85:62:80:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:01:1f:6f:1d:7c:52:76:17:c7:8f:55:dd:d2:91:84:7c:
         b8:24:d9:48:13:17:50:59:cc:ed:9f:4d:48:da:a4:e7:c7:77:
         35:4d:d3:67:03:8c:39:11:8d:de:ca:93:51:2d:fc:02:68:ac:
         8c:36:0f:1f:b0:b8:1f:f8:8e:3d:42:f9:a2:d8:2a:b4:01:68:
         0f:c8:53:11:f0:8c:e2:7c:b0:a6:3b:f9:98:b5:c9:2f:68:c3:
         f8:ea:04:db:76:ab:5e:03:4d:3f:4c:9e:0d:f4:57:d3:25:5c:
         97:63:0f:7e:47:2a:d0:e9:bd:59:b0:10:95:7c:a8:6c:bd:a7:
         54:82:18:12:09:f2:0c:1f:9e:bf:d7:95:0a:3f:ad:2d:48:9b:
         ee:9c:e1:df:5c:dd:06:6c:dd:36:4b:e7:49:51:a4:54:99:8b:
         3f:1c:53:dc:91:9b:00:72:47:7d:aa:23:2e:ea:19:b4:99:79:
         f5:f5:30:e7:c3:1f:d4:04:d3:38:c6:fb:1f:e0:74:a9:5c:27:
         8f:53:0f:fd:97:4f:9e:71:84:a9:43:27:ae:76:79:4a:1d:cf:
         00:b0:6c:da:43:06:c9:3e:db:4c:f5:02:dc:e4:f5:44:8a:0c:
         bd:38:3f:bc:36:e2:56:af:9d:4a:4a:d7:47:5f:b2:10:99:9e:
         49:28:db:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOdQnZ43xV5oewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
NjhlYjgxYTktYWRmNy00OTI3LThmYTItM2MwYjg3MzJiNzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TBPcilKyCEsuBJ9oyU7Y8LQAcKEzp9mjVJY
Nt7eeWDQktnxX03VuhQMRSmLrsG1EGl3iD64a9eFedKoz5lO2jltXbabel7PX4pc
7s4AE0U9p2DQFD96K7j6EikoFNYLysDhABiCWUcO34GN+6NFq99TvBmTvbiR1T2I
aLoHpPXxgMghhnf6C0UWJRX0ObdZGlxkxTNuNPSOagW6V9ZLGRjoHZH7cJTFFPbn
xauiXDZY4DhkAlqmN8EEgR3XUXpruN6TWC/b1FxlPUwYKudW6MbgkxHUFneMqgik
vN451KocMBm3C7lHsHpTlS6HWHt0fsMwWLUoKbigzQzbw9l8MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM48AqNkcEYF+q6l7dM8F72FYoAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzI4NWIxYTEtY2NiYy0z
NjM5LWE5NjItNjUyY2E0OTM5YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn/aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD7AR9vHXxSdhfHj1Xd0pGEfLgk2UgTF1BZzO2fTUjapOfHdzVN02cD
jDkRjd7Kk1Et/AJorIw2Dx+wuB/4jj1C+aLYKrQBaA/IUxHwjOJ8sKY7+Zi1yS9o
w/jqBNt2q14DTT9Mng30V9MlXJdjD35HKtDpvVmwEJV8qGy9p1SCGBIJ8gwfnr/X
lQo/rS1Im+6c4d9c3QZs3TZL50lRpFSZiz8cU9yRmwByR32qIy7qGbSZefX1MOfD
H9QE0zjG+x/gdKlcJ49TD/2XT55xhKlDJ652eUodzwCwbNpDBsk+20z1Atzk9USK
DL04P7w24lavnUpK10dfshCZnkko29o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org