Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa
File:                     e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa (raw, json)
Hash identifier:          mXFG/5r2jF++EcTgCMZKrU+iY4zwTlIH4YEloEDz6U8=
Subject key identifier:   0C:E7:AF:74:6F:F1:52:BF:F5:E5:BA:A3:BE:9D:7F:1F:F6:2D:CA:A3
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F43285845E45E7CEFA61AFFC22C9CF6A0
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        192.206.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7c:ef:a6:1a:ff:c2:2c:9c:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=a9d02100-ef86-413c-bb4f-a07ac93f9062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:09:ba:ee:f8:6c:90:4c:c9:e1:f1:b1:5a:
                    b6:1f:77:06:5a:b1:41:93:ee:8a:be:06:77:1b:ca:
                    2d:27:26:cd:ef:81:2c:65:d7:26:86:24:8a:c3:18:
                    4f:46:98:6c:cf:49:9a:77:85:ac:f9:19:f0:32:ce:
                    e6:51:cf:ae:b1:3b:a4:95:b9:43:c3:a6:02:72:63:
                    8f:30:d9:05:17:fb:d7:52:e6:52:ee:e3:f9:71:2f:
                    6d:7d:48:4a:10:8b:00:5c:52:b0:94:41:a6:41:87:
                    7c:cc:ff:47:1a:c2:e8:f3:28:95:41:03:a5:64:22:
                    16:f4:f5:2f:3a:46:1a:4e:c3:e5:c8:a3:0f:7f:83:
                    5e:fb:6a:3b:a4:23:80:4a:ff:c3:c8:57:50:9c:69:
                    35:93:a5:69:26:d2:fc:65:3f:75:16:4f:a5:6f:44:
                    60:fb:c0:ea:d5:70:03:5e:7c:c2:8f:af:47:4a:ae:
                    82:6d:b6:f8:b6:8b:45:7f:c2:06:dc:5d:33:de:33:
                    ec:3f:1c:b2:90:da:a7:6c:43:3d:ae:dd:15:3e:e9:
                    7f:07:7e:6b:5d:49:d8:d6:e8:bb:65:14:88:fb:b1:
                    ad:f1:70:b0:01:aa:09:c4:02:d9:83:45:a6:65:db:
                    1e:45:c0:ba:5b:fc:6b:4a:7f:ee:08:c8:7f:e0:ef:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:AF:74:6F:F1:52:BF:F5:E5:BA:A3:BE:9D:7F:1F:F6:2D:CA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:32:f0:74:b1:8b:66:7c:38:4e:bf:67:60:5d:d0:3b:bc:f3:
         b5:55:8e:9d:2c:9c:c0:8d:19:59:42:4c:df:88:8e:0d:bd:d5:
         65:4d:43:60:f4:ae:73:42:65:14:4d:e9:9f:a2:b7:bd:e3:55:
         c9:0f:a6:93:16:82:24:51:2e:55:85:58:3d:ef:d8:aa:d7:82:
         cd:8b:38:c4:e1:27:1e:f6:ee:1c:0c:5a:d8:b5:4b:30:c0:e5:
         84:1a:4e:c1:b9:b2:f2:e4:c9:f5:06:c3:9d:b3:ef:53:83:02:
         41:31:49:e9:52:bf:b3:9e:35:cf:9c:85:1e:36:39:7d:cc:82:
         3d:72:e8:b8:56:8b:1a:6e:37:5f:77:4e:dc:fb:64:01:99:54:
         48:81:27:28:83:e0:c7:b5:68:5f:d8:29:0b:b3:7b:fb:40:0c:
         4f:88:af:8f:f6:ef:a6:30:90:e2:52:a1:fe:85:10:ea:78:9b:
         9c:49:fd:fb:ff:cd:9b:5e:a6:de:23:30:f0:85:57:05:ad:71:
         a0:2a:c7:76:e4:a1:9e:5f:cc:9d:51:50:77:09:ac:0f:6f:88:
         43:19:2a:88:5c:70:5d:90:6a:11:f8:98:be:10:da:35:73:11:
         8e:c5:1d:b6:0c:28:c9:25:40:4e:55:a8:c9:38:bf:01:d4:f2:
         18:40:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:19 2024 by rpki-client on console-fra.rpki-client.org