Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/0b3dc230-8d9f-32f5-b565-104fe075f389.roa
File:                     0b3dc230-8d9f-32f5-b565-104fe075f389.roa (raw, json)
Hash identifier:          amxh1/0k9VFwnuEVaQdRxqVoJkb2ALFyXHKjc4HcmCM=
Subject key identifier:   B4:6B:01:8D:8F:F5:29:5F:5C:3A:70:09:5C:04:B6:6D:D9:5B:65:AE
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F432858472F307FAF21966BF9C89ABE00
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/0b3dc230-8d9f-32f5-b565-104fe075f389.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     36614
IP address blocks:        204.246.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7f:af:21:96:6b:f9:c8:9a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=13531e56-f75b-44d5-b12f-abb353d870b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:6e:3c:4a:c2:2c:b5:8d:c8:a8:a5:ea:e2:
                    f1:3e:1b:81:04:df:62:91:1f:67:56:ce:94:51:db:
                    3c:a5:12:f1:33:04:fc:5f:48:32:cf:07:dd:2f:5f:
                    d3:d6:99:fe:76:3f:59:e7:1a:44:29:60:34:35:49:
                    c1:12:91:65:4a:9b:f9:84:bc:d5:c6:1c:e3:51:00:
                    e9:7e:b7:28:49:84:7a:de:9c:eb:00:87:ac:29:43:
                    46:3d:64:d3:34:db:4e:cb:7c:61:22:43:fc:bc:06:
                    10:bc:9b:9b:47:ad:c3:70:44:b5:c3:42:27:2a:f9:
                    bb:5c:92:75:84:d8:24:d7:70:80:96:88:10:5b:71:
                    83:73:6b:e8:a9:c5:b4:8c:4d:d8:2c:8e:e7:45:48:
                    25:dc:c9:7c:08:7c:45:fa:21:92:59:89:73:08:69:
                    97:0c:9a:6f:a7:49:1a:2d:0a:d0:10:ad:11:d5:f6:
                    0d:38:43:fa:72:8d:76:0f:69:ce:86:6f:dc:15:91:
                    5f:ca:9a:1c:fe:0f:82:f7:68:c0:ba:5d:6b:e4:28:
                    4d:a1:45:47:de:19:1b:b4:d9:2b:a4:41:fe:b1:18:
                    16:91:1f:be:96:85:b6:20:25:73:f4:db:c1:d9:70:
                    58:b5:d2:76:4b:81:3c:0d:11:f1:25:05:c9:f0:7e:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6B:01:8D:8F:F5:29:5F:5C:3A:70:09:5C:04:B6:6D:D9:5B:65:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/0b3dc230-8d9f-32f5-b565-104fe075f389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d6:0c:0a:9b:2d:c7:a2:28:85:94:3c:5c:6e:eb:f7:ac:c3:
         a4:b4:51:0d:f0:7d:ec:7a:fd:67:c0:79:d3:b0:f0:a3:bb:a6:
         57:b1:a0:33:86:78:00:57:88:2a:4a:28:01:15:50:76:87:49:
         a6:97:d1:a0:dc:b3:44:dd:2c:09:94:c9:85:e8:c0:90:67:22:
         bb:4e:32:3f:28:2f:30:80:8a:7d:a7:58:90:32:ed:d9:f5:cb:
         ca:66:81:ad:59:34:8d:b4:a8:b1:82:2d:60:2e:64:ce:61:06:
         be:f1:a4:e5:0b:58:8b:62:bf:68:36:37:67:dd:20:cb:0b:35:
         22:7b:f8:a5:b4:a8:41:94:a4:30:c2:ad:e2:6a:00:cf:f6:66:
         00:d6:1b:4e:02:a4:ec:58:e3:57:66:7a:cb:86:04:43:34:38:
         4a:52:08:2f:1d:85:e7:9a:2e:9d:27:15:e2:f0:34:79:4b:8c:
         3a:23:28:7f:6f:35:51:f9:0d:90:06:f0:c1:cb:7c:12:bf:72:
         3f:57:b6:2c:be:fc:74:56:b2:05:41:de:c6:50:f0:fd:a0:a0:
         45:ed:f0:23:25:e3:a4:58:81:7b:06:84:37:bb:96:1d:98:05:
         c8:72:32:39:f5:09:a9:f9:b0:5e:d3:bf:b5:41:e6:0f:7d:f1:
         f9:d2:bd:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMH+vIZZr+ciavgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy
MjcwMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
MTM1MzFlNTYtZjc1Yi00NGQ1LWIxMmYtYWJiMzUzZDg3MGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHduPErCLLWNyKil6uLxPhuBBN9ikR9nVs6U
Uds8pRLxMwT8X0gyzwfdL1/T1pn+dj9Z5xpEKWA0NUnBEpFlSpv5hLzVxhzjUQDp
frcoSYR63pzrAIesKUNGPWTTNNtOy3xhIkP8vAYQvJubR63DcES1w0InKvm7XJJ1
hNgk13CAlogQW3GDc2voqcW0jE3YLI7nRUgl3Ml8CHxF+iGSWYlzCGmXDJpvp0ka
LQrQEK0R1fYNOEP6co12D2nOhm/cFZFfypoc/g+C92jAul1r5ChNoUVH3hkbtNkr
pEH+sRgWkR++loW2ICVz9NvB2XBYtdJ2S4E8DRHxJQXJ8H7QqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRrAY2P9SlfXDpwCVwEtm3ZW2WuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw
ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvMGIzZGMyMzAtOGQ5Zi0z
MmY1LWI1NjUtMTA0ZmUwNzVmMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4
OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1
MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx
Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzPYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3WDAqbLceiKIWUPFxu6/esw6S0UQ3wfex6/WfAedOw8KO7plexoDOG
eABXiCpKKAEVUHaHSaaX0aDcs0TdLAmUyYXowJBnIrtOMj8oLzCAin2nWJAy7dn1
y8pmga1ZNI20qLGCLWAuZM5hBr7xpOULWItiv2g2N2fdIMsLNSJ7+KW0qEGUpDDC
reJqAM/2ZgDWG04CpOxY41dmesuGBEM0OEpSCC8dheeaLp0nFeLwNHlLjDojKH9v
NVH5DZAG8MHLfBK/cj9Xtiy+/HRWsgVB3sZQ8P2goEXt8CMl46RYgXsGhDe7lh2Y
BchyMjn1Can5sF7Tv7VB5g998fnSvTw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:16 2024 by rpki-client on console-ams.rpki-client.org