Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa
File:                     8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa (raw, json)
Hash identifier:          HvVfeUTjo2jA3ioZhRmktpmKiyYNKx5TxjWmYcStuAQ=
Subject key identifier:   D4:72:93:95:D7:D4:49:BF:57:1C:BA:37:EB:5F:F4:C2:23:F1:DB:A2
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7EC26D7310ACD8610A000
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     14740
IP address blocks:        206.210.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ec:26:d7:31:0a:cd:86:10:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=27e7d1e1-04ec-45a4-9f9a-18828633ccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:86:08:f7:ba:d7:21:d1:ad:45:b3:f4:a7:
                    38:d2:25:40:45:17:f5:0b:a0:f5:dc:e1:9f:f1:f3:
                    ce:aa:69:f7:ae:a5:59:16:d2:61:7b:5c:ab:ee:fe:
                    ac:cc:0e:e7:33:c5:47:3c:17:4a:e7:05:f6:ad:c4:
                    cd:1a:3f:a3:c6:b0:b6:9a:e0:e9:f6:e6:42:8c:e0:
                    64:b3:90:90:29:f1:b9:b5:7b:48:7c:ba:cb:0d:e2:
                    69:5e:29:14:ba:5a:af:a5:ce:85:c4:85:84:a6:cf:
                    2b:3b:0b:91:5c:ca:3e:d0:cd:68:90:66:34:62:84:
                    b3:85:eb:fa:52:29:22:54:b5:e8:7e:7b:91:d8:1d:
                    82:16:77:4e:f4:9b:62:81:db:f6:6b:8e:31:44:3f:
                    24:c6:b7:3d:68:d0:5c:5d:2f:f3:6c:91:cb:ad:57:
                    9b:cb:8c:a7:db:2c:a7:9d:fa:db:9a:30:cd:96:91:
                    df:60:29:02:3e:71:fa:90:16:6a:b9:fb:28:db:2d:
                    b2:52:65:89:cf:bc:3c:82:e4:d7:ee:8b:e0:55:ba:
                    63:0c:6d:23:b0:1d:9b:d6:9b:b5:e0:03:7a:c7:8c:
                    e4:9f:65:92:d1:3b:cb:55:30:77:c9:07:fa:c4:e1:
                    9a:28:e0:cd:33:19:d6:30:d6:42:30:22:c9:0f:c8:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:93:95:D7:D4:49:BF:57:1C:BA:37:EB:5F:F4:C2:23:F1:DB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.210.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:da:ac:fa:3a:30:38:03:6f:65:ea:c0:bf:7f:3b:73:31:
         8d:ae:44:1a:5e:8e:a9:27:6a:2b:ec:68:e8:66:37:42:b4:3a:
         d1:b4:8d:4f:e1:1a:5c:98:97:28:47:b8:6b:d8:23:6a:b3:0b:
         6a:2c:24:e7:86:e8:a3:3a:9f:c7:c9:7d:16:d1:75:d6:fe:ae:
         6b:78:21:56:df:04:0d:b4:34:a0:50:24:63:5b:c1:23:85:12:
         f2:14:6f:7e:63:01:af:4f:fd:ee:54:e9:54:56:b5:07:bc:2e:
         32:69:76:20:0d:ae:18:a6:2e:82:09:33:ee:5a:8b:87:c2:d6:
         34:cc:38:33:54:d7:15:a4:da:6e:b4:39:52:5a:82:85:b0:f1:
         bd:8d:cf:64:87:f8:2c:0e:8e:47:9e:13:3b:74:50:aa:e0:73:
         20:d9:20:b9:5d:46:93:17:f3:b5:68:ee:a4:76:b4:2b:b2:db:
         ba:9c:3f:f2:2c:ea:53:a2:41:fe:9f:7f:f5:7f:fc:28:98:99:
         68:c5:48:e6:50:a2:bf:98:3b:91:13:28:6e:c6:39:6f:07:9f:
         e9:b8:28:72:44:62:b2:b6:29:eb:91:f4:7a:e4:ab:57:64:9b:
         04:7c:12:bd:b8:d9:17:08:08:0c:d4:ca:f3:19:ac:3c:77:e6:
         cd:55:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org