Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS206505.roa
File:                     AS206505.roa (raw, json)
Hash identifier:          67INXrXxWtvhnEErR5oFnG6qAbeuci3Ggd0egfUzYMU=
Subject key identifier:   E4:27:76:47:47:4A:ED:E6:CE:5C:2A:98:77:CF:12:48:1A:22:F8:31
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       72F4263B06D723EA8CE756B7D5BCA3F59A879630
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS206505.roa
Signing time:             Fri 15 Nov 2024 18:38:32 +0000
ROA not before:           Fri 15 Nov 2024 18:33:32 +0000
ROA not after:            Fri 14 Nov 2025 18:38:32 +0000
asID:                     206505
IP address blocks:        50.31.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f4:26:3b:06:d7:23:ea:8c:e7:56:b7:d5:bc:a3:f5:9a:87:96:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:32 2024 GMT
            Not After : Nov 14 18:38:32 2025 GMT
        Subject: CN=E4277647474AEDE6CE5C2A9877CF12481A22F831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:86:89:7b:65:26:6e:c3:b5:fe:c6:95:ad:
                    99:bd:53:55:5f:c0:06:c7:06:2d:ad:d8:1e:f1:d4:
                    a0:cc:99:c1:f6:31:4f:98:e4:c8:02:32:d6:7d:14:
                    7c:52:35:75:00:b7:4e:61:75:c4:3c:53:26:2b:2a:
                    c8:a3:46:b1:53:05:e2:47:32:73:26:9f:c9:12:bf:
                    96:d3:46:3a:3e:e7:d8:85:fd:43:04:1e:99:88:23:
                    a8:ba:93:0c:91:ca:ca:4d:56:63:2d:66:86:66:9a:
                    46:98:8c:9a:a9:d1:4d:ca:89:fb:1f:46:71:db:a2:
                    af:b3:a0:b1:8d:72:0c:9e:54:23:6d:16:ce:06:e6:
                    3b:43:47:00:c7:e2:bd:c4:f8:19:1d:3c:d0:f3:41:
                    b0:79:43:67:ad:e4:60:ab:ae:48:56:a7:24:a9:63:
                    e9:c2:6a:bc:4f:89:62:d1:a3:00:8c:d5:52:95:87:
                    34:a8:f9:84:84:3d:92:81:6a:e0:38:16:32:c6:60:
                    c7:2b:ca:8e:68:61:d2:3f:47:e4:d9:fe:ed:d4:94:
                    7a:e0:57:88:15:22:b3:7f:28:c0:04:1c:48:9c:78:
                    87:53:d9:dd:e2:ed:60:32:05:84:94:7d:43:40:b2:
                    b8:cf:44:0a:bf:5f:d2:56:ef:16:0c:b2:88:6c:0c:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:76:47:47:4A:ED:E6:CE:5C:2A:98:77:CF:12:48:1A:22:F8:31
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS206505.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.31.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:5d:78:eb:de:f7:e2:02:2d:ad:a8:d5:86:62:ab:f5:8b:c5:
         5c:1e:ce:a0:1e:a0:77:d1:75:0c:6f:66:e6:ab:59:2d:82:c8:
         14:05:bc:e5:8f:cc:87:3b:e6:b6:13:c3:40:d8:11:d3:4e:c1:
         98:89:a9:d3:9f:20:6b:d8:9d:59:b3:b6:b7:3f:34:f2:a1:a2:
         50:a4:58:ef:18:ba:ff:16:26:dc:3d:af:ca:1f:1d:d7:25:d4:
         77:32:33:98:c6:18:9b:58:85:76:de:a5:8f:f1:ac:89:f6:27:
         36:c0:ea:b9:19:34:56:09:5a:87:0f:05:eb:58:94:1a:66:28:
         29:c8:35:3b:80:bd:72:e7:ff:b6:d4:56:c0:5d:71:fe:cf:ce:
         53:fd:af:3f:f8:a7:75:98:35:68:2d:91:70:9b:10:3b:f9:3a:
         a6:7f:0e:50:ef:71:1c:64:84:77:d7:d2:16:e4:a1:de:b9:e7:
         79:b1:8c:c2:58:c7:88:1e:32:51:3a:eb:14:b6:59:32:ab:56:
         3e:c3:68:c9:95:43:aa:6b:c7:26:06:37:b1:67:0a:e0:7a:4e:
         4e:9d:f0:0e:fe:bf:d7:5f:ee:05:fa:da:62:77:d3:5f:57:fd:
         3a:cf:c1:6d:c7:34:c3:6f:44:9a:11:1a:d8:cb:1a:69:f2:94:
         99:33:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org