Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa
File:                     871367a2-06a4-3d61-9643-e4d5d8226731.roa (raw, json)
Hash identifier:          JMGHK2MO1tTDsdj0zPR3m4BoZjtH9hFkVwIzMl4ayuc=
Subject key identifier:   1E:83:E9:60:57:51:77:52:41:21:69:51:CD:0F:C4:93:6A:B7:BD:B4
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845883DD3DD3CAAA1883B656800
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     209
IP address blocks:        206.99.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d3:dd:3c:aa:a1:88:3b:65:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=6cff56b9-56fd-4dcb-8b70-5fbdf53d4fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:fa:b2:96:c6:00:05:d7:7b:49:a5:84:7d:
                    fe:f3:91:b2:23:39:02:fa:0e:cf:d5:e2:ec:c3:bf:
                    f7:a7:78:4a:fe:70:09:9e:53:29:05:bc:81:ff:0f:
                    60:8c:e8:d5:f9:a3:1a:e9:ec:8e:49:76:87:d3:65:
                    76:28:66:99:f3:e5:fa:b5:a2:48:d7:f5:c3:1e:e1:
                    3b:01:11:6b:bf:7a:8f:df:91:b8:c3:5e:3a:93:df:
                    e5:f1:d5:de:5e:01:2e:ec:a2:cf:ef:56:5d:f9:f5:
                    6a:59:35:87:a1:f0:1d:34:54:b7:42:a5:48:8e:61:
                    9b:ac:46:23:b8:d4:29:6d:10:e5:41:1a:88:71:58:
                    4b:9a:bd:2f:2c:94:49:2f:1d:fb:6e:88:1e:0e:79:
                    94:0f:90:85:d5:f9:78:38:19:9a:ca:6d:f7:e7:83:
                    13:11:c8:66:86:65:f4:e5:3b:9a:46:ba:bf:e0:d0:
                    5e:57:1b:bb:5b:ce:a2:91:d6:aa:b7:a5:d8:f4:90:
                    56:64:da:33:0b:3d:ae:37:c0:ce:0d:9a:23:87:f5:
                    e4:79:29:6e:78:ee:38:28:12:a5:62:54:ef:51:1e:
                    86:2f:d4:ea:6f:1c:a5:fc:f4:53:9a:a5:d2:3d:0b:
                    a3:80:0b:d1:27:ea:a0:c0:46:44:3e:7a:53:fa:6e:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:E9:60:57:51:77:52:41:21:69:51:CD:0F:C4:93:6A:B7:BD:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.99.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:40:31:cc:98:b8:d2:0d:da:a3:8a:0e:1c:48:a2:9e:3d:
         5a:35:c3:a5:fd:cb:05:b0:72:93:7f:f5:72:4d:f2:26:a8:96:
         73:06:a9:de:52:d6:90:20:fb:7a:51:a6:f8:e3:5d:ba:f9:84:
         ae:ad:ac:27:cf:a7:3c:3a:e8:77:35:e1:2e:c7:0c:29:5d:70:
         7d:02:82:ed:24:60:e7:56:28:c0:cd:54:b8:37:f6:83:32:72:
         22:c0:e7:92:4a:a2:53:42:26:a3:5e:67:68:cf:26:1e:9e:91:
         08:3d:81:96:68:f4:d6:6d:90:9e:4c:2c:c4:e1:9d:1d:e4:2d:
         a6:01:f7:7c:cc:12:68:81:f8:20:29:37:46:80:11:0e:33:1f:
         2f:3d:a4:ad:a5:ee:26:18:c9:26:00:96:b3:79:5f:33:62:1a:
         98:9e:58:81:15:ca:dc:8c:41:cf:ea:51:28:57:3e:59:b5:90:
         85:50:3a:54:f4:af:26:52:18:8e:52:b0:1b:b9:ad:4b:78:e1:
         33:b5:66:eb:64:90:0b:e6:3c:64:5d:63:f9:58:31:19:0b:9a:
         73:36:8c:c8:15:bb:62:e7:b1:c9:1b:96:dd:bf:45:a7:39:75:
         b9:34:2b:16:84:54:57:5d:96:d9:33:ba:a7:55:2d:8e:1d:00:
         2c:91:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:13:05 2024 by rpki-client on console-fra.rpki-client.org