Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
File:                     936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa (raw, json)
Hash identifier:          CZ0P1wpS3M0mVcRGUyacGGgsx3iZnuEfUomUhSOZ4oU=
Subject key identifier:   13:93:11:D9:D8:FA:3F:39:E2:17:9F:E7:2B:73:19:89:6E:8B:FC:97
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285845AF5370EAF489E231462E5200
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     398071
IP address blocks:        206.227.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:70:ea:f4:89:e2:31:46:2e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=f330d4db-c10f-48f6-b0df-02ff9b44f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:cc:e6:05:ed:df:76:8c:68:e6:6a:df:7d:
                    52:17:1b:58:fc:60:ee:87:f3:8e:9a:a4:8f:58:f6:
                    e6:6b:b8:7d:ca:50:a1:61:bc:59:36:d3:4b:79:2d:
                    29:e6:9e:02:1a:77:c1:79:b4:b7:42:8a:4c:2b:81:
                    78:ae:53:dd:0a:59:f0:f8:b6:89:b9:f8:6a:7d:74:
                    40:65:09:90:9c:d1:b6:39:57:e3:fa:1b:01:f3:6b:
                    b2:fc:2a:18:d1:1a:d6:ab:ed:34:94:90:a6:94:25:
                    82:d1:c1:ec:f2:63:0f:5b:a5:77:fb:a9:64:26:ec:
                    62:7d:43:06:37:00:20:6b:87:fc:5c:1e:99:cc:13:
                    2a:4d:9c:51:9f:4f:ca:a9:e8:e9:e3:18:c2:b9:cb:
                    e6:76:97:4c:bf:97:fb:95:2f:df:a5:5a:5e:ae:0a:
                    bc:d0:4a:bf:42:bf:31:66:8e:f2:a8:cb:22:92:92:
                    2e:02:95:8e:60:62:66:1c:63:6e:92:2b:74:96:d8:
                    15:98:2f:c1:7d:79:2b:8b:96:97:85:d4:f0:c4:e4:
                    2b:aa:53:84:c7:34:1a:85:ef:90:8e:f4:b8:47:09:
                    cf:35:bb:09:d0:b3:c2:9c:97:ea:c7:2f:a1:6d:42:
                    70:a9:55:47:b2:e3:a0:61:a2:7b:c6:c3:da:ad:30:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:11:D9:D8:FA:3F:39:E2:17:9F:E7:2B:73:19:89:6E:8B:FC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:98:40:a3:00:01:36:3b:2d:b1:24:da:d4:93:b4:42:36:
         71:84:22:13:1f:bc:8f:a5:11:01:ec:57:39:70:75:e1:16:2a:
         af:64:ce:97:f1:4c:70:27:4c:4d:60:b3:f3:65:0b:c6:d4:3c:
         10:08:05:0b:7f:cd:e7:b9:9b:88:a2:72:b0:de:8f:d9:b8:2f:
         93:1d:4a:60:a7:74:db:84:93:8b:12:01:83:aa:1b:3f:f6:0b:
         06:ad:b5:69:27:f5:a8:e5:98:28:b9:ff:88:95:31:a6:13:94:
         2f:0b:89:a7:06:66:4d:c4:af:31:04:ed:39:9d:5e:75:99:78:
         6e:e5:5c:fb:ec:2f:87:f5:36:a6:ee:65:60:85:70:de:6a:3c:
         73:92:dd:fa:84:44:cd:06:dc:0c:b2:95:2a:ae:dc:47:db:47:
         47:ee:e6:fc:9b:37:f9:ba:a4:8a:08:5f:ab:29:8a:da:0d:22:
         dc:50:0e:09:5f:56:55:25:cc:4d:db:77:48:4c:04:8b:26:59:
         6b:0b:54:79:b7:52:30:cf:ae:54:8d:8e:d8:b3:0b:46:4e:9d:
         9c:f0:63:e6:80:4c:49:e9:88:9a:51:d8:35:1c:47:33:c1:f7:
         37:21:16:1e:8f:b7:d5:ba:ec:bc:4a:9e:16:da:f2:90:06:04:
         d8:de:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 04:37:08 2024 by rpki-client on console-fra.rpki-client.org