Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b86e13ec-5860-3153-b24e-91eb8ecc908e.roa
File:                     b86e13ec-5860-3153-b24e-91eb8ecc908e.roa (raw, json)
Hash identifier:          +u8uthw9ygtfQPbNZIPv8FqETiX3NAckcNqbtF0V1ws=
Subject key identifier:   16:AC:01:61:C4:49:49:23:3C:8E:65:37:45:95:0E:D3:F2:D8:FE:B3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846E96564166B302E12D8D10140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b86e13ec-5860-3153-b24e-91eb8ecc908e.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     397218
IP address blocks:        204.69.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:64:16:6b:30:2e:12:d8:d1:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=95c65806-8faf-4978-9e91-1be4b496123a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:de:e4:ca:84:54:5b:9e:2d:f4:7e:51:80:
                    41:c0:e2:4d:42:25:20:ad:a6:61:57:60:75:36:77:
                    f7:8e:0a:3c:d7:74:f9:15:f8:0a:23:87:42:2f:4e:
                    cc:da:15:81:33:86:e1:1b:98:61:dc:bb:d7:8c:a6:
                    d9:51:e1:71:7a:f7:01:d8:c7:7d:ae:bc:67:12:b4:
                    24:5c:fc:97:8d:dd:5c:d9:84:40:34:f8:75:e0:23:
                    86:52:28:3c:43:a9:eb:97:a3:4b:0f:c4:bd:58:e1:
                    ac:80:3f:2e:5f:17:8b:fa:11:96:58:0f:c8:be:86:
                    31:2c:f1:a2:37:38:8f:51:c2:02:f3:8f:cd:1a:2a:
                    eb:19:e0:6f:59:b9:98:80:26:9c:6f:55:ec:15:4a:
                    a6:da:fb:24:79:72:3a:0c:77:80:79:fa:aa:50:80:
                    81:58:52:91:4f:b2:5a:03:be:f5:89:c9:58:0a:98:
                    e0:c0:c9:40:6f:bb:ef:b1:59:39:b3:de:57:4b:a8:
                    01:12:0f:08:25:75:95:c3:97:d0:e4:57:72:61:af:
                    a8:71:12:af:41:87:ce:76:01:99:53:3b:c1:26:f3:
                    81:57:46:40:7f:14:f9:95:27:d4:0b:da:dc:9c:6e:
                    7a:7e:50:62:5d:65:5b:8d:88:09:db:2e:a5:75:fe:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AC:01:61:C4:49:49:23:3C:8E:65:37:45:95:0E:D3:F2:D8:FE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b86e13ec-5860-3153-b24e-91eb8ecc908e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:63:42:89:5c:f8:1f:31:0a:01:6b:51:5c:8b:8a:8c:2a:fa:
         89:69:cd:e9:81:26:a5:27:1d:62:2f:46:08:e1:06:06:43:06:
         b4:89:37:13:31:05:b8:40:a3:d9:9a:b8:62:22:29:38:a5:b0:
         d7:83:c3:ab:c2:54:88:52:95:ff:dc:a2:5d:0c:e7:0e:0b:4a:
         49:4c:c2:86:87:dd:99:d8:f1:53:05:57:eb:45:e2:31:a5:57:
         08:49:a7:7e:e4:85:1d:be:b5:90:6f:e8:1f:bb:a1:6c:74:29:
         58:0b:0a:ee:97:29:b4:33:48:0a:5f:75:85:b9:a2:3e:fa:4f:
         21:50:35:1d:ec:2a:0a:64:8d:ed:1f:ab:c0:a5:2c:71:4d:9c:
         d6:a2:1d:55:d4:30:97:42:c0:85:4a:fe:9f:88:07:d9:8a:8f:
         ff:ab:a9:fc:6e:ec:54:1f:37:35:84:b5:d4:73:22:14:e3:ce:
         85:32:d5:66:32:67:d6:fd:66:8a:50:67:11:2c:ec:d8:d0:99:
         3d:ad:9e:14:f3:1c:bc:c7:64:08:08:d3:c8:3b:0f:2f:ff:29:
         d7:2c:60:c6:e6:8a:fb:57:76:fe:c0:43:22:13:d9:92:88:ad:
         93:53:b2:96:2e:b2:e1:f2:a7:d2:0e:25:1b:eb:6b:9b:3f:dd:
         b9:0e:97:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbpZWQWazAuEtjRAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgxODAxMDAyOVoXDTI0MTExNjAyMDAyOVowLzEtMCsGA1UEAxMk
OTVjNjU4MDYtOGZhZi00OTc4LTllOTEtMWJlNGI0OTYxMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4De5MqEVFueLfR+UYBBwOJNQiUgraZhV2B1
Nnf3jgo813T5FfgKI4dCL07M2hWBM4bhG5hh3LvXjKbZUeFxevcB2Md9rrxnErQk
XPyXjd1c2YRANPh14COGUig8Q6nrl6NLD8S9WOGsgD8uXxeL+hGWWA/IvoYxLPGi
NziPUcIC84/NGirrGeBvWbmYgCacb1XsFUqm2vskeXI6DHeAefqqUICBWFKRT7Ja
A771iclYCpjgwMlAb7vvsVk5s95XS6gBEg8IJXWVw5fQ5FdyYa+ocRKvQYfOdgGZ
UzvBJvOBV0ZAfxT5lSfUC9rcnG56flBiXWVbjYgJ2y6ldf6L4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBasAWHESUkjPI5lN0WVDtPy2P6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjg2ZTEzZWMtNTg2MC0z
MTUzLWIyNGUtOTFlYjhlY2M5MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChjQolc+B8xCgFrUVyLiowq+olpzemBJqUnHWIvRgjhBgZDBrSJNxMx
BbhAo9mauGIiKTilsNeDw6vCVIhSlf/col0M5w4LSklMwoaH3ZnY8VMFV+tF4jGl
VwhJp37khR2+tZBv6B+7oWx0KVgLCu6XKbQzSApfdYW5oj76TyFQNR3sKgpkje0f
q8ClLHFNnNaiHVXUMJdCwIVK/p+IB9mKj/+rqfxu7FQfNzWEtdRzIhTjzoUy1WYy
Z9b9ZopQZxEs7NjQmT2tnhTzHLzHZAgI08g7Dy//KdcsYMbmivtXdv7AQyIT2ZKI
rZNTspYusuHyp9IOJRvra5s/3bkOl/4=
-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:35 2024 by rpki-client on console-fra.rpki-client.org