Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/a87b7fc6-9e27-3fb3-851a-988448fc2a57.roa
File:                     a87b7fc6-9e27-3fb3-851a-988448fc2a57.roa (raw, json)
Hash identifier:          d0iwiTp3hoPv0+2IMFRjRztPquurzfxfhoNGR6PYBrs=
Subject key identifier:   FE:4E:55:80:60:6A:50:95:99:02:2F:5F:14:10:CF:76:1D:2A:1C:4D
Certificate issuer:       /CN=c186a276-9141-41da-babe-4559d2c6d734
Certificate serial:       010D0C9F4328584546A2B2A548B2318780FCB9B0
Authority key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/a87b7fc6-9e27-3fb3-851a-988448fc2a57.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     12129
IP address blocks:        206.168.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b2:a5:48:b2:31:87:80:fc:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c186a276-9141-41da-babe-4559d2c6d734
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=788bf5f3-d775-48f3-8290-82909e9dbd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:f6:2c:c2:4a:68:43:57:40:fc:b9:a1:2d:
                    e4:d3:6f:95:fc:58:c3:ef:51:59:32:36:9c:f0:2c:
                    b2:d5:ba:8b:90:16:13:59:8e:70:b6:b3:8a:99:0e:
                    38:1b:39:5e:8b:53:b7:c0:1d:4d:ac:4e:30:c7:87:
                    3f:0a:93:94:fa:74:bc:7d:95:bf:27:02:13:66:1e:
                    57:29:a4:a5:12:45:b7:8c:5f:f2:9c:70:25:f9:9d:
                    f9:f3:fe:80:0b:1a:ba:e0:f6:c5:5a:9c:f4:cd:58:
                    6d:9b:bb:01:76:f9:96:eb:78:42:db:ad:da:ac:ad:
                    4b:30:43:a7:c0:83:84:1a:f4:31:fb:a4:36:95:0e:
                    49:6e:15:9d:8f:e8:4d:74:24:9b:05:d4:dc:9b:cf:
                    98:21:0d:c7:ee:b5:ca:b9:0c:ef:a0:4d:dd:c6:8a:
                    01:ef:db:68:41:ae:1a:06:94:0d:ff:e2:97:a1:7e:
                    9b:45:b1:69:d9:0f:f5:30:e1:a7:3a:73:93:34:9b:
                    f3:d4:de:16:8f:3a:ab:fb:9e:22:31:db:fe:5b:65:
                    3a:81:e6:2e:0d:d0:41:cf:ed:11:6b:9e:3e:01:9f:
                    74:fa:b0:fe:82:08:e7:dc:9e:44:9b:9f:d7:99:54:
                    56:24:80:fe:fa:5e:a3:9b:aa:b7:8e:d9:2e:ad:6c:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4E:55:80:60:6A:50:95:99:02:2F:5F:14:10:CF:76:1D:2A:1C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/a87b7fc6-9e27-3fb3-851a-988448fc2a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl

            X509v3 Authority Key Identifier:
                keyid:6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:10:94:b3:94:1b:6a:9f:d0:e3:a5:6e:a6:eb:68:9e:e4:
         bb:cf:82:a4:73:c6:ed:b9:46:ac:71:f2:c2:d5:91:ca:44:e1:
         38:87:56:c1:53:5e:c9:a7:4e:0a:03:75:5d:1d:93:0f:a1:f0:
         4b:4c:a4:de:79:a8:76:a8:09:ce:f5:e4:8b:e0:9d:3f:b6:ae:
         3d:53:30:cf:e9:13:d5:44:da:e5:d2:d4:40:a2:06:e9:9e:5b:
         45:7c:7a:f9:4b:3e:97:c0:d7:b3:de:30:2b:fc:19:9b:7d:ce:
         d3:4f:3e:63:2e:b8:d6:94:96:b2:b6:47:6c:f2:3c:a1:8e:4f:
         22:c5:23:52:28:68:38:86:83:05:ea:02:c3:72:94:00:b5:59:
         82:d4:0a:53:c9:38:b3:09:49:1e:8f:3a:7f:53:b9:b7:24:2b:
         83:fd:90:66:56:26:8d:da:ac:fb:c0:64:85:3e:67:27:3c:d2:
         63:db:f8:7a:d2:5a:e4:1d:9d:de:f0:cf:44:4d:75:7e:53:60:
         42:0a:32:a4:c8:61:a6:98:8d:0f:43:79:2a:2e:cf:fc:aa:80:
         7b:1a:2a:34:06:b4:79:85:82:cd:c7:47:7e:8c:ba:a9:6a:a7:
         6a:04:7b:b8:f8:f3:44:2b:b3:fc:9c:5d:ae:69:22:9f:a4:e5:
         a9:c7:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:17 2024 by rpki-client on console-fra.rpki-client.org