Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/2f5a1ed2-32b7-38f3-b06d-7b252f0f986c.roa
File:                     2f5a1ed2-32b7-38f3-b06d-7b252f0f986c.roa (raw, json)
Hash identifier:          QXh/WgazKIzVU0eeQXFKKglKLYBP8z6S2InWoc/bZJk=
Subject key identifier:   FC:BC:F3:6D:00:37:71:13:2E:F7:47:0F:E9:EA:3F:90:1A:79:58:71
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F432858478F813019AD274D788DE45180
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/2f5a1ed2-32b7-38f3-b06d-7b252f0f986c.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     29802
IP address blocks:        206.251.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:30:19:ad:27:4d:78:8d:e4:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=9f55ad9b-f973-46ba-80b5-5a1fbad8575f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:f4:f5:ae:c1:34:58:07:48:a4:15:48:4f:
                    7f:36:23:ce:4e:3b:aa:32:4b:4d:d1:a7:72:41:ab:
                    c4:84:8b:2f:c1:cd:37:60:fd:e6:9f:3d:15:65:72:
                    ba:fa:d9:87:51:98:1c:d0:d1:75:56:2b:e5:3a:bc:
                    db:e4:2b:8c:df:07:cf:8f:f7:12:b9:fc:9f:1c:2d:
                    97:70:ad:56:7d:55:97:37:9c:8e:8e:af:ba:a6:94:
                    e0:70:37:68:9e:3d:73:09:1c:1f:e4:ae:70:10:66:
                    28:fd:06:d9:8a:6d:b9:fa:03:60:64:71:fd:31:2a:
                    60:0f:14:d4:cd:3f:fc:48:0e:1c:bc:46:4b:02:06:
                    a6:82:66:c2:26:1f:ff:06:50:78:ce:66:41:54:29:
                    3d:25:80:43:53:d3:cb:7b:c8:72:fd:67:7b:e8:12:
                    8f:eb:f9:9a:f2:ac:52:e2:88:5b:8d:6f:47:86:6c:
                    e9:7a:27:cf:fa:3e:71:39:ee:de:88:e7:23:81:d4:
                    36:dd:d1:90:f9:7f:0d:c8:73:2f:52:01:59:07:06:
                    6f:95:1f:70:e7:7e:d0:a6:b2:9f:4e:13:67:11:d6:
                    b7:36:01:e2:c9:55:3f:e8:b0:2f:c2:86:4c:e6:fa:
                    b4:da:42:32:bb:a7:20:04:c5:71:5f:94:c2:3b:d9:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:F3:6D:00:37:71:13:2E:F7:47:0F:E9:EA:3F:90:1A:79:58:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/2f5a1ed2-32b7-38f3-b06d-7b252f0f986c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:6e:d2:3d:cd:91:3c:72:cc:d8:f6:fd:14:9f:7d:5b:31:
         13:67:f0:e4:50:c8:26:5d:10:a1:5c:dd:31:2f:f2:72:96:d1:
         5b:89:d8:c8:0f:d8:e1:7d:3d:59:82:9e:6e:a9:5a:2f:08:0c:
         7a:e4:44:16:39:95:b7:a4:fe:9e:33:c0:56:65:49:e4:48:c2:
         8f:21:b3:1c:67:c1:b0:c6:a8:f4:ec:c5:41:12:4f:e9:e9:56:
         32:e4:19:98:76:da:c0:31:03:33:ef:ac:49:bf:a9:4f:d2:56:
         4d:33:a7:cc:0e:05:30:2f:68:96:f5:af:69:df:c6:11:67:c9:
         ef:4d:1b:48:51:a7:18:f2:9c:ad:fd:2d:f6:ee:e3:ef:5f:59:
         b2:c0:11:46:b0:88:1c:c9:12:4c:c2:71:21:15:e8:42:47:85:
         de:9c:d7:fe:c6:20:dc:4f:a1:88:5e:76:3e:75:d9:75:62:68:
         c3:04:86:e7:e0:43:87:79:25:05:3e:0e:02:e6:e8:b4:48:c3:
         e1:11:2f:07:2d:93:2e:f8:8c:19:db:3f:42:03:54:b5:82:bc:
         f5:ad:4f:ab:93:f5:74:ca:a6:8b:11:96:cb:ec:47:ed:30:0d:
         26:b6:bc:b7:71:1c:4c:22:66:45:e8:e2:c3:27:d0:79:1f:a7:
         41:cf:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:04 2024 by rpki-client on console-ams.rpki-client.org