Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/edee01c6-638a-350e-a2b6-c16a10f840cd.roa
File:                     edee01c6-638a-350e-a2b6-c16a10f840cd.roa (raw, json)
Hash identifier:          KlbOJnsQ9JnasMh6y7rjiDOF6iWcZo3ddDBzGpWyWfQ=
Subject key identifier:   15:DC:F5:89:B2:C7:DE:81:99:0B:01:5F:5E:4D:2B:03:14:2B:CB:59
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1058BEC24E6798D089FC80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/edee01c6-638a-350e-a2b6-c16a10f840cd.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     19842
IP address blocks:        206.47.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:58:be:c2:4e:67:98:d0:89:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=f23e63e6-1d23-4acc-a164-e5d3f749b1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:cf:3e:23:60:6a:91:cf:14:01:6b:ff:e8:
                    80:04:6c:e4:f3:ae:92:0f:8f:47:b4:c4:d3:dd:19:
                    f2:de:a0:e4:56:fe:4c:e8:a5:5d:35:8b:df:2d:28:
                    88:3b:06:c6:bd:03:9f:c3:f2:ff:bf:e1:c9:00:04:
                    ae:fa:9e:46:eb:f9:a3:8a:95:1b:40:9c:ea:63:56:
                    1d:cb:6f:1a:7d:af:fd:96:85:65:bd:b3:66:b4:a8:
                    d6:bc:85:f3:e1:c1:3c:65:53:a6:8b:f5:bf:f6:f2:
                    07:d3:d2:dd:9f:5e:84:64:15:5f:27:6e:48:e0:5c:
                    1e:d9:0f:ac:1a:3e:1f:40:d9:75:e5:df:25:e7:34:
                    e5:57:db:02:0a:4d:71:d4:7f:ec:2e:0a:f2:79:b8:
                    a1:49:8c:8c:ac:17:b8:7a:2d:44:16:48:bb:00:20:
                    d2:e4:83:58:14:e3:10:5f:53:5f:2a:d3:27:79:7e:
                    aa:c2:f7:b9:d1:d0:aa:0d:c0:27:83:3a:a5:58:de:
                    ae:ad:ea:0a:49:ff:00:eb:7a:75:d1:46:2b:d5:dd:
                    5d:45:83:a2:b7:1a:1c:fe:b7:63:48:af:7a:f0:67:
                    ab:9d:bd:53:22:1f:7a:86:b0:cd:2c:6e:67:a4:e9:
                    1b:f5:a6:5a:77:48:27:d2:4a:14:84:56:54:3d:eb:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DC:F5:89:B2:C7:DE:81:99:0B:01:5F:5E:4D:2B:03:14:2B:CB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/edee01c6-638a-350e-a2b6-c16a10f840cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:39:05:86:d5:a3:00:8c:74:cc:a6:83:d4:eb:09:fd:02:d3:
         9e:4e:cb:91:92:79:12:d9:d3:ec:82:54:c4:ad:31:10:3d:46:
         64:61:d3:3a:64:14:0c:92:72:37:a0:73:2f:24:d1:12:fa:c0:
         81:ac:62:c0:de:4e:84:d7:1f:28:19:76:5f:c8:42:d8:d6:0e:
         b6:24:91:cf:60:67:d6:64:a0:76:ed:ab:ab:c0:cd:0e:7e:0d:
         af:13:5f:fc:34:5d:db:e8:ef:aa:c2:84:0e:da:5c:43:ba:1d:
         18:4c:6b:cf:5f:1e:6c:77:83:08:23:bb:ba:bb:e8:0d:4f:2d:
         4f:da:ba:5d:07:91:d3:17:49:2a:68:20:d9:54:dc:4e:04:d5:
         3c:de:4a:65:f7:ed:e3:4d:1d:61:2c:69:85:4e:70:8a:75:42:
         72:a4:bb:60:3e:2c:4e:b0:05:30:09:8e:ab:d6:e4:fb:34:55:
         64:c0:b6:5b:5f:d8:db:05:41:19:e1:7e:d6:53:2a:e1:ef:5e:
         21:e3:c9:a6:32:c1:74:aa:21:2b:69:fa:49:70:0b:a5:cb:f8:
         0e:7f:98:73:21:d9:29:bb:6a:70:b2:6a:10:e9:ed:91:fa:5c:
         24:ac:1e:d2:d5:ec:8e:b8:07:88:c7:67:00:4a:17:e6:7f:3e:
         9c:48:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org