Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d063aa70-0630-306d-9f8d-14687f4a4fba.roa
File:                     d063aa70-0630-306d-9f8d-14687f4a4fba.roa (raw, json)
Hash identifier:          FgASfKEmkgw2Db0S5WyZeZfHXng2Y6DtSTA5WkvTLBY=
Subject key identifier:   57:6A:8C:0B:F0:DC:AD:3C:13:6D:EB:B5:F2:08:80:CA:20:39:C3:8D
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584586D86E839BE748BFC84E9C00
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d063aa70-0630-306d-9f8d-14687f4a4fba.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     5744
IP address blocks:        151.207.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6e:83:9b:e7:48:bf:c8:4e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=652612bd-9b75-4120-b90d-b4dfcc7a88e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:30:83:0b:46:1c:5a:e5:1c:3a:0a:9d:93:
                    b9:8f:65:37:a5:79:97:97:87:de:d5:bb:c1:b3:3f:
                    c1:3b:b1:38:81:1a:25:cb:e2:88:fa:7b:be:52:36:
                    6e:66:7a:d9:a8:e4:2c:dc:b0:bd:69:c8:88:8a:03:
                    57:18:66:b3:7e:76:68:f1:11:2b:63:d5:3e:d1:52:
                    93:a2:5b:cb:71:b5:d9:d9:13:c4:e7:87:9c:c9:5c:
                    b9:8c:17:f4:4c:c8:be:5c:6e:fd:71:50:3b:1f:81:
                    ae:55:d4:84:5f:e0:29:b8:46:95:cb:53:69:07:cd:
                    eb:66:3e:d3:61:b6:b5:0d:57:70:a4:59:f3:95:19:
                    34:eb:8f:51:e8:56:9f:a2:88:e0:b9:46:b4:f0:09:
                    05:0c:5d:4d:e9:61:aa:09:33:40:5c:2d:db:55:c5:
                    b3:00:07:42:89:de:93:ea:53:02:69:a1:f7:61:2b:
                    91:2e:1c:22:3e:3a:58:a1:2e:d6:5f:15:f4:38:5c:
                    ac:c9:21:7a:b2:ba:b7:1a:fb:00:53:8e:f5:8f:57:
                    76:40:62:56:55:17:0e:07:56:5e:35:26:d0:77:df:
                    29:f4:e8:89:ee:f1:f9:6c:80:5a:e6:c2:75:72:0c:
                    da:9f:8b:a8:8d:57:a1:c3:32:96:75:f1:3b:4a:a2:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:8C:0B:F0:DC:AD:3C:13:6D:EB:B5:F2:08:80:CA:20:39:C3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d063aa70-0630-306d-9f8d-14687f4a4fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:06:b1:7b:18:13:a8:2d:38:9d:26:88:2c:59:01:5c:4a:c9:
         ca:14:36:ab:93:ab:fb:e2:2a:4a:9b:f8:5b:f4:46:34:fb:a9:
         a1:f6:46:f2:a9:21:b8:0b:e4:42:ba:d1:1f:45:fe:a2:74:74:
         30:80:ab:47:6c:eb:09:7f:1e:12:95:ed:59:80:65:02:e7:fa:
         d3:41:5d:94:70:44:77:42:4e:ce:17:97:55:c6:d0:34:62:c0:
         96:b3:bf:ac:9c:f3:ef:2e:bb:d5:d3:7c:55:e8:b7:58:aa:78:
         1a:76:ed:b7:45:9a:1e:9e:fe:56:7b:3a:74:53:e8:d1:dc:23:
         38:b6:59:5c:78:4a:95:c3:96:8d:1e:d5:a0:d4:d5:d8:1a:48:
         4e:14:93:0e:42:49:6c:64:fc:f9:8b:69:8b:d3:b7:a1:a7:78:
         3d:8a:6b:30:e0:99:fc:9d:c2:43:31:6a:0b:76:db:7d:b1:c2:
         79:ec:98:5e:f6:7d:6b:15:11:f2:33:20:eb:5d:ea:42:89:bc:
         5d:d9:e5:98:94:e3:42:90:7e:7a:13:8e:dd:c5:80:c2:fb:10:
         2b:cb:29:2b:7a:10:02:4e:d0:2b:92:f2:ab:32:3c:57:e7:47:
         d4:e6:0e:34:1a:29:03:35:4d:f2:d2:c4:ac:3b:f8:1c:0b:35:
         7f:4b:42:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWG2G6Dm+dIv8hOnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5
Y2I1MB4XDTI0MDQxMzAxMDAyNVoXDTI0MDcxMjAxMDAyNVowLzEtMCsGA1UEAxMk
NjUyNjEyYmQtOWI3NS00MTIwLWI5MGQtYjRkZmNjN2E4OGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj8wgwtGHFrlHDoKnZO5j2U3pXmXl4fe1bvB
sz/BO7E4gRoly+KI+nu+UjZuZnrZqOQs3LC9aciIigNXGGazfnZo8RErY9U+0VKT
olvLcbXZ2RPE54ecyVy5jBf0TMi+XG79cVA7H4GuVdSEX+ApuEaVy1NpB83rZj7T
Yba1DVdwpFnzlRk0649R6FafoojguUa08AkFDF1N6WGqCTNAXC3bVcWzAAdCid6T
6lMCaaH3YSuRLhwiPjpYoS7WXxX0OFysySF6srq3GvsAU471j1d2QGJWVRcOB1Ze
NSbQd98p9OiJ7vH5bIBa5sJ1cgzan4uojVehwzKWdfE7SqJxkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdqjAvw3K08E23rtfIIgMogOcONMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl
NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZDA2M2FhNzAtMDYzMC0z
MDZkLTlmOGQtMTQ2ODdmNGE0ZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2
ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi
OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl
YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcGsXsYE6gtOJ0miCxZAVxKycoUNquTq/viKkqb+Fv0RjT7qaH2RvKp
IbgL5EK60R9F/qJ0dDCAq0ds6wl/HhKV7VmAZQLn+tNBXZRwRHdCTs4Xl1XG0DRi
wJazv6yc8+8uu9XTfFXot1iqeBp27bdFmh6e/lZ7OnRT6NHcIzi2WVx4SpXDlo0e
1aDU1dgaSE4Ukw5CSWxk/PmLaYvTt6GneD2KazDgmfydwkMxagt2232xwnnsmF72
fWsVEfIzIOtd6kKJvF3Z5ZiU40KQfnoTjt3FgML7ECvLKSt6EAJO0CuS8qsyPFfn
R9TmDjQaKQM1TfLSxKw7+BwLNX9LQjM=
-----END CERTIFICATE-----
Generated at Mon Jun 24 00:00:13 2024 by rpki-client on console-ams.rpki-client.org