Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c6ceed81-9ca7-327e-b264-8a438e0d9f7c.roa
File:                     c6ceed81-9ca7-327e-b264-8a438e0d9f7c.roa (raw, json)
Hash identifier:          tg9eMCqxLXYBMg6psf8WMCQXvbTDyfdJx2WnuXHLGSY=
Subject key identifier:   31:90:71:27:EC:23:BC:35:B3:DE:7A:60:B1:1B:BF:54:06:1A:97:E0
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858479D76C2718B67483043777A40
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c6ceed81-9ca7-327e-b264-8a438e0d9f7c.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        206.12.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c2:71:8b:67:48:30:43:77:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=d0b61dee-3b3f-4c52-917f-5a8554a06c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:15:fc:d1:4e:2d:03:f8:30:01:16:7e:28:
                    33:fa:d5:b4:04:0b:2f:0a:97:81:48:7d:f4:59:b8:
                    55:84:8d:1e:74:bd:f0:04:ee:44:bf:92:34:8a:56:
                    68:a1:b1:61:76:8a:8e:7a:ca:95:fd:b5:64:71:4b:
                    e3:3c:6d:ca:f1:3c:0f:88:cb:6b:fb:af:dc:27:f4:
                    fd:66:b3:2d:d4:d3:05:0f:bd:3d:8b:a3:c3:5d:b8:
                    bf:57:59:5b:ea:e9:c8:17:c5:04:57:27:e9:46:81:
                    24:72:85:24:e9:08:c4:be:57:19:fb:0a:e2:10:93:
                    38:64:6a:10:26:ef:77:7f:f7:dd:d3:e8:b9:a3:53:
                    78:0c:77:12:20:61:fd:96:43:19:4d:bf:74:f9:3b:
                    59:db:7e:14:8e:f8:14:c0:73:07:e9:e9:29:a2:ef:
                    b8:4c:c3:b1:37:a4:10:6c:78:fd:38:fd:c1:be:4b:
                    31:9c:cd:40:98:a3:f1:43:41:f8:0c:ab:b3:ec:90:
                    db:06:9e:e1:c1:83:dd:47:f8:c4:e0:11:1f:22:c4:
                    2d:9c:17:eb:00:99:6a:8f:c4:bc:fc:9a:91:05:97:
                    4f:9c:a7:f7:ff:23:9a:d2:c7:e2:62:9b:03:bd:4f:
                    60:cc:45:98:17:2c:12:64:27:08:ff:9f:8d:fc:a1:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:90:71:27:EC:23:BC:35:B3:DE:7A:60:B1:1B:BF:54:06:1A:97:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c6ceed81-9ca7-327e-b264-8a438e0d9f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b3:9b:aa:1d:2f:11:7a:4c:de:1a:7f:ff:08:b4:94:ed:0b:
         ec:ad:20:0e:7a:4c:52:39:89:ca:24:47:8f:96:b1:09:6a:da:
         88:b4:a7:dc:06:a8:77:97:5c:32:31:b3:bb:42:7d:28:10:92:
         e1:a3:ab:28:34:5b:78:ee:4b:4f:60:bf:c8:89:5b:56:7f:cd:
         a3:90:6a:86:ec:4a:18:97:d1:c7:6f:ec:59:4e:b5:96:1d:aa:
         74:39:af:be:b8:c2:66:15:ac:ce:a8:f7:20:a0:6f:4b:6c:a1:
         a1:44:e4:6f:18:b1:0f:cb:07:4d:21:16:dc:2f:e5:9f:41:62:
         cb:10:e9:d9:79:e7:b4:1c:7a:04:13:0e:71:00:56:f9:0a:f0:
         af:fc:6b:ea:27:57:e9:11:94:d6:5d:69:3e:d9:59:05:b2:6c:
         93:31:97:cb:3b:2d:7e:34:18:6b:bf:a9:26:88:44:bf:0f:96:
         45:3d:f8:65:81:f1:8e:5b:a3:66:7c:b4:92:6a:8c:ea:ae:d4:
         34:5b:3f:be:c5:c4:b5:31:38:26:38:95:c7:e4:81:3d:e2:96:
         8e:73:96:ba:53:79:de:e0:05:c5:5c:b0:b8:84:30:b8:ff:a4:
         49:bc:73:98:de:6c:f7:a9:29:f9:2a:0e:82:76:85:18:4c:a1:
         9a:43:2b:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsJxi2dIMEN3ekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZDBiNjFkZWUtM2IzZi00YzUyLTkxN2YtNWE4NTU0YTA2YzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuicV/NFOLQP4MAEWfigz+tW0BAsvCpeBSH30
WbhVhI0edL3wBO5Ev5I0ilZoobFhdoqOesqV/bVkcUvjPG3K8TwPiMtr+6/cJ/T9
ZrMt1NMFD709i6PDXbi/V1lb6unIF8UEVyfpRoEkcoUk6QjEvlcZ+wriEJM4ZGoQ
Ju93f/fd0+i5o1N4DHcSIGH9lkMZTb90+TtZ234UjvgUwHMH6ekpou+4TMOxN6QQ
bHj9OP3BvksxnM1AmKPxQ0H4DKuz7JDbBp7hwYPdR/jE4BEfIsQtnBfrAJlqj8S8
/JqRBZdPnKf3/yOa0sfiYpsDvU9gzEWYFywSZCcI/5+N/KGJ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGQcSfsI7w1s956YLEbv1QGGpfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYzZjZWVkODEtOWNhNy0z
MjdlLWIyNjQtOGE0MzhlMGQ5ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgzIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKuzm6odLxF6TN4af/8ItJTtC+ytIA56TFI5icokR4+WsQlq2oi0p9wG
qHeXXDIxs7tCfSgQkuGjqyg0W3juS09gv8iJW1Z/zaOQaobsShiX0cdv7FlOtZYd
qnQ5r764wmYVrM6o9yCgb0tsoaFE5G8YsQ/LB00hFtwv5Z9BYssQ6dl557QcegQT
DnEAVvkK8K/8a+onV+kRlNZdaT7ZWQWybJMxl8s7LX40GGu/qSaIRL8PlkU9+GWB
8Y5bo2Z8tJJqjOqu1DRbP77FxLUxOCY4lcfkgT3ilo5zlrpTed7gBcVcsLiEMLj/
pEm8c5jebPepKfkqDoJ2hRhMoZpDKzM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org