Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa
File:                     cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa (raw, json)
Hash identifier:          Z7v86XkfrEa+kd/jwQtLXdkogD/XUS69dhfjX8mFb4g=
Subject key identifier:   8E:8D:A3:51:A4:9C:3D:C6:A2:C9:02:84:FB:1C:81:7C:14:3F:EB:62
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285847362B56B60668846431714150
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     60144
IP address blocks:        206.161.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:56:b6:06:68:84:64:31:71:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=e7c97bc9-5666-490c-ba2c-622723478f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:cb:35:e2:70:94:00:27:60:95:9f:0c:69:
                    08:08:d4:89:b8:43:20:27:38:1a:f6:53:ea:8a:0d:
                    a7:25:d8:8f:c7:75:a4:7b:c7:2e:af:6d:78:62:22:
                    5e:de:07:a0:03:66:38:d9:7e:dc:4a:d1:14:1f:ea:
                    9b:ae:06:bb:47:0d:6a:8b:4d:5a:f8:77:50:24:39:
                    f9:85:26:ac:10:da:be:8e:92:cb:1f:9b:bd:0f:c9:
                    e1:13:89:38:ee:8e:d6:0b:39:c5:ca:fe:48:be:99:
                    44:72:ca:9a:08:45:3e:ae:2f:b8:b5:3e:44:1a:4e:
                    07:d8:f0:83:41:d4:89:4e:a7:ad:bc:f2:e1:9b:dd:
                    1c:3b:39:da:0d:fe:21:69:46:32:97:ef:dd:ba:49:
                    a4:6f:8f:85:35:04:c2:24:1b:8f:34:3a:56:a2:c7:
                    c8:07:fa:d9:2a:be:d8:b7:6b:60:ba:42:f7:14:f3:
                    e7:ad:59:9d:ea:d3:2e:19:25:0f:21:13:6b:34:12:
                    ee:e2:22:09:b8:dd:5d:32:fa:56:0c:3a:8a:63:43:
                    8c:ea:d1:6f:69:a5:38:5b:81:52:bb:8f:ec:e3:c5:
                    b8:90:a3:dd:21:aa:78:cd:3a:9a:3c:ac:b0:ad:81:
                    68:54:c4:ac:e3:1a:3a:3c:94:e8:7c:3e:97:53:12:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:A3:51:A4:9C:3D:C6:A2:C9:02:84:FB:1C:81:7C:14:3F:EB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:e8:0f:83:39:17:60:c0:89:b2:ff:29:b3:7a:1f:2f:0e:
         bf:e7:34:7a:02:6f:fb:b6:97:56:3f:55:30:af:c2:06:37:b6:
         6f:a1:46:9b:6d:17:45:d2:41:c9:27:3b:ab:d7:17:1c:54:2f:
         15:47:f8:3d:56:84:8c:c8:b0:b0:eb:55:aa:ff:d7:98:25:0d:
         aa:26:f0:79:9b:fc:45:41:dc:c8:06:c0:26:4f:e7:78:bd:50:
         c6:1a:74:d1:af:6c:4d:3c:43:6b:7f:86:e6:ee:8f:aa:63:fb:
         a5:7e:62:cd:0f:22:de:b1:c2:90:f2:fc:4a:53:bb:da:46:ec:
         da:73:64:1f:da:88:44:9f:c9:51:d3:6e:5a:77:04:b3:43:1b:
         b0:63:ba:a4:8f:69:8f:04:15:5f:99:a5:56:13:bd:e1:57:fe:
         59:bd:6b:a8:e4:79:61:7d:6f:4c:56:9f:a3:3d:cf:32:12:3c:
         47:e9:c3:8d:6e:69:9d:70:37:df:14:24:d0:36:36:50:bd:53:
         b0:e9:ad:49:80:ee:f7:82:ed:fa:84:c9:eb:d9:d0:b9:77:c4:
         03:9d:48:74:f7:53:d2:da:9c:85:8b:62:14:09:93:11:77:b1:
         88:74:4d:2a:e1:55:ff:02:eb:a2:8f:24:96:b1:de:a7:af:02:
         3e:4f:b1:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K1a2BmiEZDFxQVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTdjOTdiYzktNTY2Ni00OTBjLWJhMmMtNjIyNzIzNDc4ZjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6HLNeJwlAAnYJWfDGkICNSJuEMgJzga9lPq
ig2nJdiPx3Wke8cur214YiJe3gegA2Y42X7cStEUH+qbrga7Rw1qi01a+HdQJDn5
hSasENq+jpLLH5u9D8nhE4k47o7WCznFyv5IvplEcsqaCEU+ri+4tT5EGk4H2PCD
QdSJTqetvPLhm90cOznaDf4haUYyl+/dukmkb4+FNQTCJBuPNDpWosfIB/rZKr7Y
t2tgukL3FPPnrVmd6tMuGSUPIRNrNBLu4iIJuN1dMvpWDDqKY0OM6tFvaaU4W4FS
u4/s48W4kKPdIap4zTqaPKywrYFoVMSs4xo6PJTofD6XUxIxdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6No1GknD3GoskChPscgXwUP+tiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2JkM2QwODctMmQ5My0z
YjJlLWFlOTgtNzEyYjgzZTIxZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp+6A+DORdgwImy/ymzeh8vDr/nNHoCb/u2l1Y/VTCvwgY3tm+hRptt
F0XSQcknO6vXFxxULxVH+D1WhIzIsLDrVar/15glDaom8Hmb/EVB3MgGwCZP53i9
UMYadNGvbE08Q2t/hubuj6pj+6V+Ys0PIt6xwpDy/EpTu9pG7NpzZB/aiESfyVHT
blp3BLNDG7BjuqSPaY8EFV+ZpVYTveFX/lm9a6jkeWF9b0xWn6M9zzISPEfpw41u
aZ1wN98UJNA2NlC9U7DprUmA7veC7fqEyevZ0Ll3xAOdSHT3U9LanIWLYhQJkxF3
sYh0TSrhVf8C66KPJJax3qevAj5Psbs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org