Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa
File:                     bb5a7ca1-3331-331a-bc29-294398077a39.roa (raw, json)
Hash identifier:          YjSDcM8k+ElD5jgkc6mXhMY+9Fj9fTi+MKwurFtCpA0=
Subject key identifier:   69:70:82:3A:4E:0C:D8:41:9E:C3:47:A3:25:B0:FC:D0:13:0A:97:89
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F432858472C65DCBEF15B3D17EA25BC80
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     14157
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:dc:be:f1:5b:3d:17:ea:25:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=faf2b188-132a-493b-b8ea-fffe1b422d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:39:66:82:54:2d:5f:e9:ed:e2:df:31:3b:
                    94:a8:94:82:bf:f0:11:05:be:6a:50:46:94:ad:28:
                    d6:65:41:ba:d1:92:e9:19:70:8f:ac:01:70:27:d6:
                    98:bb:e3:4d:eb:a1:87:f5:2f:2a:2e:d5:c6:66:7e:
                    de:64:bd:34:9f:c1:e4:11:e6:b3:d8:63:ee:72:4a:
                    58:7a:95:82:7c:23:a5:9e:56:d4:71:03:c4:46:14:
                    8e:4d:ee:52:4f:7b:b6:91:49:09:ec:dc:e6:a1:95:
                    4e:3d:63:18:27:ed:71:f6:c9:cf:1a:5c:ca:36:7b:
                    5e:f9:d1:09:e5:25:df:d7:76:4e:e2:12:e7:09:ae:
                    8f:70:ba:16:47:f3:2d:08:3b:12:3e:82:7e:be:f8:
                    73:f0:58:ef:3d:fb:25:90:d6:cc:c3:be:1e:dd:cf:
                    19:bc:08:c8:a6:62:5f:3d:85:fc:64:1e:d4:b8:2a:
                    f4:ac:36:6e:ec:82:b7:ba:a5:9e:13:b5:6b:eb:bc:
                    73:02:b6:1f:5e:d4:58:9e:92:10:aa:91:8a:a6:46:
                    2f:85:a5:3c:35:d6:3e:5e:dd:f4:91:c1:64:23:ec:
                    f4:ee:37:67:e8:87:65:5d:d3:1a:ef:52:69:61:c9:
                    0c:7b:34:b6:60:cd:bc:24:33:d8:dc:1c:68:4a:03:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:82:3A:4E:0C:D8:41:9E:C3:47:A3:25:B0:FC:D0:13:0A:97:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:81:88:89:ff:91:f5:84:2f:94:70:b2:0a:bc:aa:bf:f9:14:
         4a:eb:2c:17:e8:f5:7e:f0:82:42:0b:29:6b:91:9b:bf:aa:77:
         5c:e7:07:47:c0:e5:87:87:d0:16:af:e4:34:36:02:3c:47:8e:
         43:43:a3:ac:e8:2a:f7:35:b8:bd:f8:1d:d2:8e:2b:39:35:94:
         70:6f:f7:b5:f4:fb:04:fa:2f:b4:25:3b:93:89:0c:77:69:94:
         3a:0d:c8:a9:af:f2:e4:b7:93:1e:cc:c9:84:c5:85:55:e1:28:
         f6:0a:c6:9b:03:05:4d:0b:f1:81:9c:87:12:55:ca:ab:6d:c9:
         a1:eb:b9:bd:81:02:0e:a2:5e:7f:67:de:87:f1:a0:c5:c6:63:
         f5:21:86:ad:2a:6f:66:79:f0:c7:c3:9a:aa:99:a9:bb:49:51:
         12:7a:72:83:5c:a5:f0:14:02:37:8f:07:1c:e9:f3:5b:8d:30:
         62:ff:f2:fb:bc:02:f4:f1:52:f8:5e:24:34:1b:18:80:b7:0c:
         20:31:33:66:72:d5:78:dd:9d:db:85:77:2c:d8:e2:a5:af:a0:
         3c:92:8c:ed:42:d8:75:06:e1:5e:95:75:a4:95:4f:60:14:d0:
         a2:ba:bd:ae:96:ae:ee:a6:6a:e5:ba:b0:6b:e2:eb:53:8c:45:
         a8:79:78:ab
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEcsZdy+8Vs9F+olvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmIyMjU2ZWMtY2UxMS00N2ZmLTkyYTYtNGJhMTg4NTcw
YTI1MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZmFmMmIxODgtMTMyYS00OTNiLWI4ZWEtZmZmZTFiNDIyZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xw5ZoJULV/p7eLfMTuUqJSCv/ARBb5qUEaU
rSjWZUG60ZLpGXCPrAFwJ9aYu+NN66GH9S8qLtXGZn7eZL00n8HkEeaz2GPuckpY
epWCfCOlnlbUcQPERhSOTe5ST3u2kUkJ7NzmoZVOPWMYJ+1x9snPGlzKNnte+dEJ
5SXf13ZO4hLnCa6PcLoWR/MtCDsSPoJ+vvhz8FjvPfslkNbMw74e3c8ZvAjIpmJf
PYX8ZB7UuCr0rDZu7IK3uqWeE7Vr67xzArYfXtRYnpIQqpGKpkYvhaU8NdY+Xt30
kcFkI+z07jdn6IdlXdMa71JpYckMezS2YM28JDPY3BxoSgOyQQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFGlwgjpODNhBnsNHoyWw/NATCpeJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mYjIy
NTZlYy1jZTExLTQ3ZmYtOTJhNi00YmExODg1NzBhMjUvYmI1YTdjYTEtMzMzMS0z
MzFhLWJjMjktMjk0Mzk4MDc3YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmIyMjU2ZWMtY2UxMS00N2ZmLTky
YTYtNGJhMTg4NTcwYTI1L2ZiMjI1NmVjLWNlMTEtNDdmZi05MmE2LTRiYTE4ODU3
MGEyNS5jcmwwHwYDVR0jBBgwFoAUOPQfK7VAkPSQYjvG9L2NszdpDEQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mYjIyNTZlYy1jZTExLTQ3ZmYtOTJhNi00YmEx
ODg1NzBhMjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOwMA4E
AgACMAgDBgAmIAEW8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArgYiJ/5H1hC+UcLIKvKq/+RRK6ywX6PV+
8IJCCylrkZu/qndc5wdHwOWHh9AWr+Q0NgI8R45DQ6Os6Cr3Nbi9+B3Sjis5NZRw
b/e19PsE+i+0JTuTiQx3aZQ6Dcipr/Lkt5MezMmExYVV4Sj2CsabAwVNC/GBnIcS
Vcqrbcmh67m9gQIOol5/Z96H8aDFxmP1IYatKm9mefDHw5qqmam7SVESenKDXKXw
FAI3jwcc6fNbjTBi//L7vAL08VL4XiQ0GxiAtwwgMTNmctV43Z3bhXcs2OKlr6A8
koztQth1BuFelXWklU9gFNCiur2ulq7upmrlurBr4utTjEWoeXir
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:39 2024 by rpki-client on console-fra.rpki-client.org