Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa
File:                     2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa (raw, json)
Hash identifier:          P9tcd/jav/0V95Qbt8Yy9oNErn1ukB0y21YDkg+Qj3M=
Subject key identifier:   8E:9C:C2:CB:D6:A8:61:DB:F4:E3:87:D9:DD:22:E5:30:AA:62:4B:95
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858479D76C227CF3B0EDAA8F8C380
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        206.12.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c2:27:cf:3b:0e:da:a8:f8:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=f6b89f8a-36b7-4c0e-b9f5-4198abf238b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8c:8e:1f:29:c0:e2:03:bf:24:d4:e6:49:a6:
                    c7:4d:28:ca:b7:8b:01:38:6f:a7:ca:09:3e:7a:d1:
                    87:0d:56:67:fa:32:69:8d:72:8d:7b:8d:eb:cc:5a:
                    47:94:94:85:db:7c:1d:3e:28:6b:cb:26:12:aa:cd:
                    dd:7f:40:d4:ac:a7:ce:fd:06:88:f4:2f:ef:eb:31:
                    76:60:ac:9a:54:4a:c5:df:96:45:d6:7a:2d:ae:c0:
                    a2:43:53:2e:7d:2c:a5:d1:55:9d:98:1b:89:ea:1b:
                    f0:ec:49:15:0b:9c:1f:b9:70:b1:af:c8:09:6a:28:
                    cc:82:68:2d:e6:86:61:47:59:40:15:7e:5a:da:a4:
                    2c:6e:c7:46:a6:bc:17:c4:11:0b:70:09:9d:53:89:
                    12:7e:2b:eb:7f:97:c9:3a:a2:51:d6:36:1e:34:5a:
                    a0:4c:e0:2f:38:39:a9:ea:da:c7:27:9c:1b:50:e0:
                    ad:6f:c7:33:ac:8d:0e:f6:5d:51:70:6f:73:2e:7b:
                    51:a3:2f:65:72:8f:49:25:59:1e:c1:46:14:f1:27:
                    23:29:76:a4:a2:cc:f9:9e:6e:1a:c1:79:1b:ce:82:
                    68:c8:e6:97:c6:d1:d4:fc:60:77:8d:0a:c6:3e:d3:
                    1e:6f:25:80:22:ad:93:a5:a0:e7:8e:97:fc:24:de:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:C2:CB:D6:A8:61:DB:F4:E3:87:D9:DD:22:E5:30:AA:62:4B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:22:c5:0e:b3:4a:f6:30:a6:03:4f:ee:18:43:8b:fe:ac:
         c9:9b:d7:6d:b3:e6:a4:1c:c0:b8:19:5d:da:37:e5:90:87:f9:
         dc:cb:dc:7f:c8:86:a8:1e:01:cf:e9:57:8a:10:47:eb:ea:19:
         2f:cf:d8:99:48:5e:64:3f:82:43:13:b7:fe:37:79:e4:3d:0b:
         e0:c9:68:5d:71:bc:84:4d:46:53:c0:5b:66:c2:ae:bd:47:75:
         b1:75:a3:ca:cf:4d:54:a2:d0:61:88:b3:7b:8f:a3:7e:9f:41:
         e4:74:53:e5:6f:67:dd:ed:74:d1:5e:3c:1a:e6:fd:a6:09:28:
         da:97:b2:c5:3b:0c:57:83:0c:09:4d:68:9a:7f:a4:f6:d5:88:
         fd:3e:59:9c:95:b6:38:bd:81:83:3b:da:57:c1:8e:06:97:01:
         9b:86:d0:fc:fd:5f:a1:2b:36:f8:e0:ba:2e:cd:bf:00:b2:da:
         fe:f5:4a:c4:ca:ba:86:86:df:56:fa:4f:de:e3:8d:56:8d:d5:
         97:80:bd:a3:ce:f0:4b:52:d7:ea:cb:08:94:e7:a2:75:6e:41:
         e4:b0:20:b1:ba:d2:b8:07:b4:de:03:82:69:7b:81:74:3d:c5:
         57:00:77:70:ec:5c:a0:78:93:7e:4b:62:a0:66:ac:19:bd:26:
         70:bd:c8:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsInzzsO2qj4w4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZjZiODlmOGEtMzZiNy00YzBlLWI5ZjUtNDE5OGFiZjIzOGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYyOHynA4gO/JNTmSabHTSjKt4sBOG+nygk+
etGHDVZn+jJpjXKNe43rzFpHlJSF23wdPihryyYSqs3df0DUrKfO/QaI9C/v6zF2
YKyaVErF35ZF1notrsCiQ1MufSyl0VWdmBuJ6hvw7EkVC5wfuXCxr8gJaijMgmgt
5oZhR1lAFX5a2qQsbsdGprwXxBELcAmdU4kSfivrf5fJOqJR1jYeNFqgTOAvODmp
6trHJ5wbUOCtb8czrI0O9l1RcG9zLntRoy9lco9JJVkewUYU8ScjKXakosz5nm4a
wXkbzoJoyOaXxtHU/GB3jQrGPtMebyWAIq2TpaDnjpf8JN61swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6cwsvWqGHb9OOH2d0i5TCqYkuVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMmI0OTRlNWYtZTQ5My0z
ZjIxLWJkNGItN2NlYzhmODM3M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgw0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHs0IsUOs0r2MKYDT+4YQ4v+rMmb122z5qQcwLgZXdo35ZCH+dzL3H/I
hqgeAc/pV4oQR+vqGS/P2JlIXmQ/gkMTt/43eeQ9C+DJaF1xvIRNRlPAW2bCrr1H
dbF1o8rPTVSi0GGIs3uPo36fQeR0U+VvZ93tdNFePBrm/aYJKNqXssU7DFeDDAlN
aJp/pPbViP0+WZyVtji9gYM72lfBjgaXAZuG0Pz9X6ErNvjgui7NvwCy2v71SsTK
uoaG31b6T97jjVaN1ZeAvaPO8EtS1+rLCJTnonVuQeSwILG60rgHtN4Dgml7gXQ9
xVcAd3DsXKB4k35LYqBmrBm9JnC9yD8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org