Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa
File:                     a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa (raw, json)
Hash identifier:          3nTDBxw5YR5vEbDPSWAGEBWleW9FimJEIizNKOdHlwQ=
Subject key identifier:   FA:80:F1:58:BA:C6:20:92:DE:23:29:95:B9:72:84:A1:3B:B1:9D:FB
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858475A76392AA58054D5220A6480
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     271
IP address blocks:        206.12.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:39:2a:a5:80:54:d5:22:0a:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=80ea990a-1e9d-4e7e-a464-b93ad7d8ba7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:a9:09:19:38:6b:99:48:f6:06:9f:35:cf:
                    6d:7d:c3:d1:9f:83:b7:1c:d3:35:8b:c8:c1:0e:e0:
                    20:a8:d5:61:25:81:87:d3:e9:a3:1f:cb:15:02:36:
                    d4:26:d6:8b:e9:85:a3:20:99:9e:d2:b6:83:5a:55:
                    f7:d2:d7:78:24:14:a8:46:f9:55:ac:18:e4:61:c5:
                    e9:14:fb:f9:f3:62:cd:34:3a:6a:40:a8:fe:c4:71:
                    d3:26:0c:4e:af:02:81:64:13:4d:21:ae:9c:5a:6a:
                    71:fe:e0:f8:c4:1b:26:7d:01:b2:cd:0c:1c:77:0d:
                    ba:d9:fc:3b:dc:d8:89:a6:df:23:ea:5d:15:5f:d8:
                    76:71:20:94:34:87:b1:43:ef:57:76:87:7c:43:c2:
                    f2:b6:fe:0a:37:58:2b:e6:b5:17:92:45:95:04:bd:
                    2f:21:2b:41:11:7f:52:a8:77:56:74:bf:88:4a:2f:
                    5c:91:46:b6:86:7b:16:8f:6f:7f:1d:35:c1:2f:f0:
                    c5:91:38:8b:bd:42:61:59:36:f4:c2:e1:ed:8e:cc:
                    30:ff:67:2f:cc:04:de:53:30:4d:26:5c:82:c9:3d:
                    d1:93:11:28:04:d1:1c:bc:52:1d:64:e2:73:44:56:
                    39:4c:83:93:19:b8:e6:9b:91:9a:8f:8f:77:10:19:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:80:F1:58:BA:C6:20:92:DE:23:29:95:B9:72:84:A1:3B:B1:9D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6f:1f:e8:cd:33:0f:63:42:1a:d4:2f:55:69:be:e8:ec:81:
         ad:9e:75:da:1b:82:79:cf:0f:21:b5:88:aa:c3:fa:8a:25:fd:
         98:6c:fb:0b:db:e6:05:a3:93:e5:2a:3d:a3:b1:ef:38:09:e8:
         cf:25:7c:39:2c:66:99:7f:fc:c5:94:cc:74:ae:fe:de:d6:2a:
         43:93:45:da:89:a7:df:bb:b6:1f:e6:2a:91:0e:23:b9:3f:63:
         f2:cb:fb:57:b2:72:90:c9:1e:16:ee:c8:84:cd:ba:10:e5:d1:
         aa:a5:8d:37:24:0d:b9:b8:4e:fd:3f:91:2c:9d:c3:3f:00:5b:
         65:ee:77:84:7f:27:9b:b2:21:64:c1:e2:4e:e4:73:0c:43:c8:
         c8:57:ff:03:84:57:2e:78:bb:dd:28:e5:91:21:3d:62:ba:28:
         46:f4:00:e1:2b:1a:2b:31:b7:08:67:47:0f:31:ba:af:0a:01:
         e5:bc:37:f7:d0:2a:c2:4f:a6:e2:09:29:dd:0b:42:77:b4:37:
         03:db:1f:5b:61:42:9c:8a:2f:55:2e:f7:06:9d:29:e4:4c:6c:
         eb:92:78:1a:0d:8f:12:6f:bc:02:51:23:15:27:9f:c3:19:70:
         50:53:db:45:4a:1b:42:34:4d:a1:cb:0f:df:57:68:91:92:78:
         32:40:d0:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadjkqpYBU1SIKZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
ODBlYTk5MGEtMWU5ZC00ZTdlLWE0NjQtYjkzYWQ3ZDhiYTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiCpCRk4a5lI9gafNc9tfcPRn4O3HNM1i8jB
DuAgqNVhJYGH0+mjH8sVAjbUJtaL6YWjIJme0raDWlX30td4JBSoRvlVrBjkYcXp
FPv582LNNDpqQKj+xHHTJgxOrwKBZBNNIa6cWmpx/uD4xBsmfQGyzQwcdw262fw7
3NiJpt8j6l0VX9h2cSCUNIexQ+9Xdod8Q8Lytv4KN1gr5rUXkkWVBL0vIStBEX9S
qHdWdL+ISi9ckUa2hnsWj29/HTXBL/DFkTiLvUJhWTb0wuHtjsww/2cvzATeUzBN
JlyCyT3RkxEoBNEcvFIdZOJzRFY5TIOTGbjmm5Gaj493EBkuzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqA8Vi6xiCS3iMplblyhKE7sZ37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTlhMmQzMGMtODM0Ni0z
MmEyLTlhNjctZWRhODBmYjZhYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzgysMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApvH+jNMw9jQhrUL1Vpvujsga2eddobgnnPDyG1iKrD+ool/Zhs+wvb
5gWjk+UqPaOx7zgJ6M8lfDksZpl//MWUzHSu/t7WKkOTRdqJp9+7th/mKpEOI7k/
Y/LL+1eycpDJHhbuyITNuhDl0aqljTckDbm4Tv0/kSydwz8AW2Xud4R/J5uyIWTB
4k7kcwxDyMhX/wOEVy54u90o5ZEhPWK6KEb0AOErGisxtwhnRw8xuq8KAeW8N/fQ
KsJPpuIJKd0LQne0NwPbH1thQpyKL1Uu9wadKeRMbOuSeBoNjxJvvAJRIxUnn8MZ
cFBT20VKG0I0TaHLD99XaJGSeDJA0JQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org