Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
File:                     c78bccb7-aa67-36b0-b486-2629fba09248.roa (raw, json)
Hash identifier:          ZfM8wDiOvuu2fbuSmxYKm1d60fqiqfytyYfpMGEiYb8=
Subject key identifier:   72:8C:75:B1:8F:C8:B4:08:48:67:DD:CC:BD:B3:F1:67:C3:7F:15:73
Certificate issuer:       /CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Certificate serial:       010D0C9F43285844EC054D7BEAD4A70783378B80
Authority key identifier: 77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     0
IP address blocks:        206.108.255.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:4d:7b:ea:d4:a7:07:83:37:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=057ee5ab-2d8c-43b7-8165-7acaf01f721d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:9a:47:df:0e:66:85:f6:96:35:56:a7:1a:
                    05:9f:8a:5e:fa:ce:69:ba:f8:d3:27:fd:f2:0c:a0:
                    fa:49:e6:fe:b3:19:98:76:a7:5a:93:c0:45:ba:47:
                    c6:af:0b:07:de:05:6a:ee:24:57:d5:fd:91:44:51:
                    81:4c:eb:34:be:73:9c:9b:0e:bf:a8:c6:1c:1b:ee:
                    4e:61:0b:74:e7:77:e1:0a:53:44:02:82:de:c8:1f:
                    74:a2:7c:6f:f3:b2:01:9e:ab:02:70:00:dd:76:06:
                    9c:cd:8a:d1:6c:30:87:07:7a:74:8b:91:3d:7d:33:
                    0f:75:07:17:27:8b:b4:7d:b5:d2:ea:63:38:81:b9:
                    57:8c:1c:dd:86:6a:98:dc:13:6f:6e:e8:ab:13:26:
                    8e:9d:13:ce:aa:e7:cf:d1:10:e0:b6:24:bc:f3:fc:
                    9f:24:2d:42:b9:8f:8f:07:45:42:74:02:32:44:d6:
                    f4:39:9c:94:9a:aa:19:4f:8c:4d:50:43:7a:a4:0e:
                    43:19:4b:59:11:74:ec:41:10:d2:95:9b:8b:e7:b9:
                    8a:1e:de:ef:c1:b1:a0:e7:04:5a:f6:60:df:0c:d3:
                    aa:31:0d:86:1e:35:50:c4:1d:3b:75:33:1d:5f:e6:
                    ab:81:1b:6c:8d:b0:43:8d:51:d6:01:5d:0f:24:42:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:75:B1:8F:C8:B4:08:48:67:DD:CC:BD:B3:F1:67:C3:7F:15:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl

            X509v3 Authority Key Identifier:
                keyid:77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:38:73:60:8e:36:4a:5f:7b:1a:79:7b:be:10:ea:48:66:d6:
         86:da:93:60:c8:8f:6c:34:a1:ff:b7:03:99:56:5f:4f:bb:a3:
         26:a9:7e:31:9a:ad:73:d6:e9:e6:a8:f8:41:14:64:9f:5c:45:
         19:b5:db:82:7f:f7:71:85:84:a1:a9:c4:c1:d0:d2:46:68:1e:
         58:ff:5b:27:f0:d4:fe:fa:2a:68:96:fc:86:cc:99:5a:4c:03:
         8c:af:a1:56:cf:ee:7e:ab:93:50:4c:04:3e:79:65:a6:1c:e1:
         64:c8:b8:09:bd:c3:24:f9:97:1b:ef:e3:fd:04:3b:dc:87:c4:
         69:ea:7e:2d:7c:2b:07:e3:db:1e:00:28:ee:bd:2d:a8:35:70:
         44:a3:4f:c6:7c:d2:d8:85:61:2e:ff:ee:8e:d4:24:71:c0:4a:
         ef:f3:c0:08:7a:be:3b:bc:3b:20:da:0b:e2:38:ff:9a:61:25:
         3d:12:70:f2:6e:42:31:dc:d3:43:43:65:53:e9:f3:57:39:ca:
         21:d9:39:d1:e1:c2:11:a6:b5:ba:7d:a1:46:dd:3e:43:10:61:
         41:5c:ed:29:86:e3:2f:d9:39:ac:8e:50:a2:11:81:14:3b:a1:
         01:c9:16:63:17:68:ef:3f:6c:2c:37:9f:9f:4c:a9:87:27:22:
         1a:16:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:16:09 2024 by rpki-client on console-ams.rpki-client.org