Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa
File:                     6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa (raw, json)
Hash identifier:          VK42NyP7QuHD37/k8eyUfAhfYiWS6+xk5mlmShbkX2A=
Subject key identifier:   8B:59:B7:BE:AF:77:2F:80:CC:1B:54:04:AE:66:7D:10:CB:30:28:2D
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285845628D8AC3386B0A14CF3082C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     0
IP address blocks:        206.51.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8a:c3:38:6b:0a:14:cf:30:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=01c5d40b-80e1-4e10-9769-5182116b5728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:e1:9e:89:aa:5b:87:b3:c1:81:a2:db:70:
                    53:c0:2a:bf:72:fc:01:a7:51:c1:9d:2e:a7:f0:a2:
                    f5:76:ed:ba:3e:7f:5e:2b:6d:67:2b:3e:26:8b:9a:
                    41:f6:c3:47:5e:19:82:62:c9:04:97:58:6d:75:96:
                    79:54:71:7c:f4:c6:54:4c:8f:e9:f3:3c:81:e9:b8:
                    62:33:3d:e9:1c:4d:68:3a:e7:6c:6e:ab:24:d1:f6:
                    1a:8a:3d:9a:8d:a2:7d:8c:77:b0:15:72:17:9d:13:
                    b5:67:67:eb:eb:a4:a5:68:f6:bb:eb:75:58:7a:41:
                    c0:aa:03:4f:61:52:bb:db:c2:a1:55:02:f2:b0:5a:
                    2d:8e:b8:d9:27:9b:0b:cf:95:27:f2:97:50:a7:10:
                    b9:4e:52:ba:e1:c3:43:61:9a:25:42:68:c1:a2:9d:
                    39:2c:ce:2a:a0:a7:c7:9b:40:38:5c:30:db:50:f0:
                    b1:f1:9a:1f:25:5a:05:e4:bd:8e:bf:4d:01:41:20:
                    5a:43:47:a3:8d:e1:2f:4c:04:8a:f0:23:d7:62:2e:
                    de:d2:00:0e:4a:5a:12:a1:45:b2:0d:27:29:f1:93:
                    84:a5:14:a1:d8:87:ef:ee:3d:4a:47:4d:02:42:f1:
                    68:b5:07:fe:04:6d:3d:b8:3a:cb:e0:34:f6:ca:8b:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:B7:BE:AF:77:2F:80:CC:1B:54:04:AE:66:7D:10:CB:30:28:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:7e:1c:48:6a:d2:ba:d6:17:53:9f:6a:8c:64:87:67:d5:
         b3:df:b9:3a:0e:e7:9e:f0:ce:a7:3f:54:4f:25:e4:4b:06:a4:
         56:6e:71:09:fc:c5:c3:f7:88:46:e5:c0:e7:42:a2:0f:e5:e8:
         22:bf:6f:ee:e3:04:17:bc:fc:0d:5c:cf:c1:5e:81:08:ce:f6:
         08:db:69:02:af:ff:2f:4c:e8:ac:ab:8a:e8:b8:ae:ae:ec:8a:
         cd:e7:53:0a:f6:a9:2e:a4:1b:3d:b7:7f:43:2e:c6:b4:48:2f:
         02:15:c9:86:36:f4:3e:80:f8:c1:ab:a8:f2:32:a1:4d:cc:11:
         c9:0b:c1:aa:a9:6c:da:b9:99:2c:8f:b7:e7:ad:8c:9d:94:60:
         9a:d1:00:96:fb:50:e6:be:ca:44:6b:1b:2a:1a:16:20:e6:b8:
         d7:46:22:8e:56:ef:44:ab:23:1d:37:7e:b6:95:a9:4f:11:3d:
         4b:a3:e8:14:c4:3e:7a:8e:38:ae:ec:19:13:b3:c0:e8:3e:dd:
         50:39:8f:8d:3e:77:13:49:57:65:ad:5e:a5:ac:b8:b2:44:88:
         37:75:fd:8f:26:f3:f0:8c:d7:34:22:df:43:85:21:f0:47:49:
         98:33:fa:2c:3e:2a:8e:36:11:69:ba:06:f7:0b:21:a1:40:f2:
         4c:75:6a:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijYrDOGsKFM8wgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MDFjNWQ0MGItODBlMS00ZTEwLTk3NjktNTE4MjExNmI1NzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw33hnomqW4ezwYGi23BTwCq/cvwBp1HBnS6n
8KL1du26Pn9eK21nKz4mi5pB9sNHXhmCYskEl1htdZZ5VHF89MZUTI/p8zyB6bhi
Mz3pHE1oOudsbqsk0fYaij2ajaJ9jHewFXIXnRO1Z2fr66SlaPa763VYekHAqgNP
YVK728KhVQLysFotjrjZJ5sLz5Un8pdQpxC5TlK64cNDYZolQmjBop05LM4qoKfH
m0A4XDDbUPCx8ZofJVoF5L2Ov00BQSBaQ0ejjeEvTASK8CPXYi7e0gAOSloSoUWy
DScp8ZOEpRSh2Ifv7j1KR00CQvFotQf+BG09uDrL4DT2yovK/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItZt76vdy+AzBtUBK5mfRDLMCgtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvNmJhYjIzYTMtMWNiZi0z
YzY4LTljMDgtMjIzOWQ0MGQ5MjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjMrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEvfhxIatK61hdTn2qMZIdn1bPfuToO557wzqc/VE8l5EsGpFZucQn8
xcP3iEblwOdCog/l6CK/b+7jBBe8/A1cz8FegQjO9gjbaQKv/y9M6Kyriui4rq7s
is3nUwr2qS6kGz23f0MuxrRILwIVyYY29D6A+MGrqPIyoU3MEckLwaqpbNq5mSyP
t+etjJ2UYJrRAJb7UOa+ykRrGyoaFiDmuNdGIo5W70SrIx03fraVqU8RPUuj6BTE
PnqOOK7sGROzwOg+3VA5j40+dxNJV2WtXqWsuLJEiDd1/Y8m8/CM1zQi30OFIfBH
SZgz+iw+Ko42EWm6BvcLIaFA8kx1alg=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:44 2024 by rpki-client on console-fra.rpki-client.org