Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa
File:                     c80ec47b-3377-3193-adad-335df6fc44c3.roa (raw, json)
Hash identifier:          YYsiO7PmqS619aFSALvSj7NZWgP/a5QI/bCNTcNeB9I=
Subject key identifier:   3E:F6:C6:0A:38:D3:BC:3B:16:6E:77:2A:AC:29:03:9F:DA:6C:AF:0D
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F43285845777DE3D56CE7B7EE1EEF9904
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     0
IP address blocks:        206.80.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e3:d5:6c:e7:b7:ee:1e:ef:99:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=d058bbbf-9b2c-4cd9-a542-72638d3c37d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:54:91:88:bd:c6:3e:f4:f7:97:a1:3f:82:
                    0b:e7:06:00:a9:0e:17:2d:9d:d6:de:7d:10:ad:6f:
                    37:26:10:52:7c:75:82:c6:64:e7:59:88:a6:a4:71:
                    98:1d:d7:0a:3c:c4:4f:ed:dc:28:4f:e8:02:19:b8:
                    e5:64:af:3f:41:d0:71:8e:3d:ae:47:ce:80:62:77:
                    1e:ac:24:54:3b:d1:11:0b:48:e4:aa:56:6d:25:55:
                    27:d1:96:82:e4:3f:d9:3d:94:a2:fb:6e:52:97:a0:
                    af:aa:d3:a9:47:9a:42:ed:b0:96:48:50:dd:7f:60:
                    5a:ae:71:81:c5:4d:e1:a3:7b:e5:b0:27:19:de:98:
                    9b:de:5f:04:7c:8f:9b:3c:3e:96:22:90:cc:b7:db:
                    c0:d2:a3:89:fe:e4:f4:d6:8f:41:f8:72:1f:85:35:
                    fc:d1:74:42:e1:f0:27:b2:82:2d:a2:e2:a1:20:a8:
                    90:8e:f3:33:59:d1:9a:d2:49:68:fb:0e:ed:c2:68:
                    7d:f8:37:51:76:4b:7c:d1:c5:1c:dc:6a:86:74:1f:
                    93:39:95:df:11:46:12:fc:b2:34:fb:42:11:d6:94:
                    63:56:fe:ad:61:2d:dd:f9:96:d3:f1:52:9e:52:23:
                    a8:a8:86:4b:24:5d:30:62:97:56:85:92:bf:74:0b:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:C6:0A:38:D3:BC:3B:16:6E:77:2A:AC:29:03:9F:DA:6C:AF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fa:79:9b:da:67:c6:a3:6c:08:f9:b8:bc:ec:df:fd:21:5d:
         ff:c5:6f:03:22:f9:ce:fc:5b:c5:29:76:5b:df:7f:68:a5:49:
         09:dc:e3:32:e5:88:77:17:ce:a2:c4:73:e0:8f:ff:a3:5e:a6:
         ed:ec:d1:3c:5a:3e:13:dd:db:a0:ca:03:67:ab:c0:aa:2a:11:
         ba:fa:60:50:83:db:2c:b6:69:8c:5a:e6:89:fe:1c:99:d2:1f:
         44:ba:9b:9f:7e:cb:46:db:71:ff:fd:a8:ee:6f:34:b0:0a:84:
         99:05:f7:1a:8f:2d:7c:6a:7a:a1:ed:f6:87:82:4a:da:7d:1c:
         06:9a:a9:8f:a5:fd:e8:fd:03:4b:c2:22:6e:2a:11:1f:86:db:
         21:1c:4a:f3:86:6b:f4:78:dc:2b:ac:bb:f0:1d:30:c4:2e:7f:
         dc:53:81:41:0d:ce:3b:c0:43:3a:c0:98:bd:f7:16:be:89:76:
         12:40:7c:b8:cb:8a:cb:64:43:64:69:6f:e8:3b:25:50:50:c4:
         2e:dd:58:65:32:5d:e0:4b:91:53:a2:9e:d2:43:a2:0d:1c:b5:
         a3:d8:d6:9c:55:91:5c:d4:a9:8a:b0:c0:2d:0e:7f:3b:53:da:
         8f:29:77:ed:4d:af:cd:42:a8:d8:7e:65:6e:16:a6:8b:0a:36:
         c5:9f:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:59:43 2024 by rpki-client on console-fra.rpki-client.org