Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
File:                     bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json)
Hash identifier:          Y7MbRfD71LhbVvdkDmt7r1bMmEQsY9Ns93ZdmAyQhSY=
Subject key identifier:   CD:AC:FA:43:44:03:36:8B:0F:9F:E4:5A:94:9B:A2:54:F4:2D:3C:8D
Certificate issuer:       /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial:       010D0C9F43285847AB6C12D7DA0484739B80C500
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     25779
IP address blocks:        206.168.9.0/24 maxlen: 24
                          207.174.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:12:d7:da:04:84:73:9b:80:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=eed1ae3d-0cad-4ab5-a247-0ec1e4b9d799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:4d:99:1f:3a:70:30:58:33:78:93:40:ba:
                    97:97:1a:93:27:48:9f:e9:4e:4a:3b:63:1b:89:b3:
                    2c:df:fa:1c:73:6a:b1:9f:da:14:a2:f1:3b:f6:1c:
                    e1:46:54:ff:90:4d:6e:f2:fb:67:4a:e1:a7:97:68:
                    00:24:ea:94:18:d5:85:2a:30:1b:db:82:bd:6a:4b:
                    7f:d3:6b:76:b4:d5:ce:4f:db:b0:ac:aa:d9:e7:0d:
                    15:9c:ea:f9:ba:29:56:cc:04:9f:ed:e3:bf:a8:d3:
                    f6:99:5b:e5:54:a5:77:f0:b2:15:d5:65:ff:61:5d:
                    87:f1:83:7e:01:0b:ef:c6:48:49:d6:d8:7d:ee:48:
                    83:09:f4:4f:94:50:5c:b8:d0:7c:bf:e5:00:e8:04:
                    7d:93:3e:55:ec:6f:34:ed:25:dd:d7:19:46:4a:30:
                    65:ec:33:de:e4:80:f5:6c:cd:fa:71:6c:4a:b0:09:
                    86:b7:25:ad:e0:d4:7d:f7:9d:b8:89:b0:0b:e8:c7:
                    9f:c5:3e:7e:67:45:51:cf:18:0b:cd:44:40:fe:88:
                    e7:ea:aa:db:5f:0d:81:9d:f5:c6:95:2a:1c:56:ef:
                    d5:fd:b9:d9:52:08:4a:b0:2b:d1:aa:b5:c9:56:d2:
                    fd:6f:19:a9:89:67:4b:52:a9:5b:64:b0:8e:65:47:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:FA:43:44:03:36:8B:0F:9F:E4:5A:94:9B:A2:54:F4:2D:3C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl

            X509v3 Authority Key Identifier:
                keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.9.0/24
                  207.174.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:dc:81:e6:98:4e:fd:e3:57:e1:b2:56:03:5b:c9:84:15:
         2b:19:31:63:71:03:2f:ff:a4:ce:16:f9:b6:c5:84:52:0d:03:
         8f:06:9b:f0:60:26:33:2b:45:be:1e:df:35:ee:36:cc:9a:2d:
         70:70:3e:2b:e8:e5:68:38:c5:8b:73:98:ed:d6:fd:99:6d:45:
         b9:f9:00:67:97:83:62:c4:62:65:e4:b6:5d:67:a6:73:11:54:
         c7:fe:67:87:60:b3:40:ad:da:da:a8:d1:87:ec:19:bf:cf:cc:
         b0:1a:d1:5c:f2:32:02:24:59:3a:30:ad:02:b5:af:19:13:ff:
         b7:59:48:8e:6f:9d:06:8d:8a:fd:f6:66:29:0b:f5:ee:de:ce:
         02:59:64:9d:ca:62:cd:6f:b9:fe:70:fa:74:1d:fc:7b:39:90:
         fd:5b:18:81:a9:b0:f4:82:50:3d:50:56:74:49:c4:4b:98:72:
         a9:b8:7a:c5:3f:01:47:79:9c:c2:78:7e:ea:65:9d:48:3a:6d:
         8e:93:c5:2a:76:73:98:0d:8e:fc:5f:30:1a:ce:69:0d:75:85:
         5b:36:34:83:c2:92:18:a5:e3:db:4e:5c:00:f3:c2:ed:e8:5f:
         63:5f:51:7c:6f:5c:e6:a9:d0:c7:61:06:61:2b:68:55:f0:53:
         87:12:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org