Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa
File:                     d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa (raw, json)
Hash identifier:          yZNYilvVnAO77/gwFMvy5la+9Y/QrL20a1QEl8aUC5o=
Subject key identifier:   62:67:CF:3F:EA:6E:99:F5:2F:93:1E:91:56:94:A8:31:E6:DE:19:90
Certificate issuer:       /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Certificate serial:       010D0C9F43285847B3CC0508FB35C375B6A2CD80
Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        206.220.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:05:08:fb:35:c3:75:b6:a2:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=f7d6e708-509b-4571-9a65-82abc6668649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:80:c6:93:19:c5:94:a9:fa:8b:11:2d:89:
                    bd:7d:20:dc:17:38:b2:87:44:ec:bb:9b:35:99:36:
                    c3:97:40:b5:27:09:52:db:3f:c9:dc:89:81:1d:7e:
                    ef:0e:ba:de:97:98:bf:7b:2c:5e:36:7f:35:45:b9:
                    f0:55:7e:9b:06:ed:02:c7:f6:74:0c:6c:6b:71:35:
                    89:cb:e9:8c:b3:d7:ea:1a:06:18:31:73:fe:8c:72:
                    b1:0f:e7:a9:87:06:d4:c3:b3:9b:c7:18:5a:05:9b:
                    33:68:92:71:29:e9:ae:82:c7:0e:3d:e3:0b:7e:35:
                    14:8a:52:fe:c8:79:c2:91:31:23:7d:fb:56:84:e8:
                    51:d3:4a:ea:e8:13:35:98:7b:18:c7:d7:3a:46:b4:
                    3c:d9:a8:ff:78:5e:ec:4e:4b:57:45:3d:55:53:a6:
                    50:a1:ae:4e:dd:ff:29:73:97:1d:19:6f:83:f8:a0:
                    b0:81:c8:35:88:19:e5:64:24:59:84:90:0d:be:9b:
                    73:3e:2a:31:8a:74:27:fd:92:7d:8b:6c:80:ac:bb:
                    63:d3:de:c2:1c:b2:88:d2:58:21:9b:90:21:6e:2f:
                    cb:af:15:6e:ee:82:98:da:5b:41:83:1d:97:1a:ba:
                    7b:bf:91:04:e8:16:51:06:f8:f7:5b:5f:2d:03:d4:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:CF:3F:EA:6E:99:F5:2F:93:1E:91:56:94:A8:31:E6:DE:19:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl

            X509v3 Authority Key Identifier:
                keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:22:e0:b0:4d:66:3b:83:e8:b6:b6:d1:07:5f:20:c5:65:a9:
         ff:97:fb:01:69:27:a9:73:54:1c:23:89:0b:e7:cd:4f:78:8d:
         3c:3f:ab:2d:e6:56:83:59:17:47:bf:a5:3f:45:35:52:e4:16:
         cc:0a:51:e2:37:3f:19:e2:eb:97:66:ac:1a:28:e7:d1:32:74:
         ce:49:88:8c:79:97:bb:70:03:fe:69:f3:6b:be:b9:a1:5a:6f:
         95:e9:c1:f2:64:51:38:a5:58:66:2b:c2:2a:77:fa:54:8e:59:
         86:4d:41:6b:3e:1c:dc:e2:3e:32:d7:7f:f1:1c:ba:2c:ba:14:
         3d:0b:9a:9a:96:19:65:89:2d:a3:20:2a:76:2b:96:00:69:89:
         78:75:1e:e8:d4:e5:7a:05:9b:1f:08:b0:a8:4f:46:b5:6d:be:
         f1:f7:2b:1d:8a:dc:0c:67:df:1d:c3:f8:41:8e:68:2e:dd:ad:
         26:fb:b9:d1:e4:b7:41:f9:03:92:e0:fb:2d:e2:a4:ef:b9:b3:
         14:b3:e4:4c:eb:66:15:4e:ff:9a:71:24:71:96:b5:8b:f7:e3:
         69:af:5b:5a:0f:f2:82:00:c0:b6:9a:a0:35:2a:e9:fa:03:4c:
         5a:41:fc:1b:ca:41:5b:f5:d9:b3:7e:2e:4f:8a:c3:30:8c:26:
         9b:37:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:42 2024 by rpki-client on console-fra.rpki-client.org