Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa
File:                     4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa (raw, json)
Hash identifier:          vCxRpip/iRmueHNLFU91k+paT0kaFg4R037+PmQYx/s=
Subject key identifier:   B1:2D:89:30:B1:CD:59:E7:E6:FE:B1:1C:F6:7F:66:3A:A1:93:A7:70
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584559D0669A3220CBE8A2E04B77
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa
Signing time:             Wed 27 Mar 2024 21:52:55 +0000
ROA not before:           Wed 27 Mar 2024 21:52:55 +0000
ROA not after:            Tue 25 Jun 2024 21:52:55 +0000
asID:                     26842
IP address blocks:        206.132.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:d0:66:9a:32:20:cb:e8:a2:e0:4b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 27 21:52:55 2024 GMT
            Not After : Jun 25 21:52:55 2024 GMT
        Subject: CN=40d194f4-502d-435e-9f78-385462f8ccb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:4e:70:85:91:bb:62:e4:11:2d:90:20:51:
                    f4:b3:fd:22:74:38:b3:8b:11:7d:1c:d1:b6:45:45:
                    b2:38:34:a1:5c:eb:82:f9:05:7d:99:82:44:4d:8a:
                    04:2b:ad:29:6f:5c:85:b3:34:b0:39:01:18:97:26:
                    33:08:83:60:c8:ec:35:05:58:a0:59:bc:cb:e2:52:
                    02:5d:92:80:37:e7:63:d8:b9:e5:68:66:5d:61:30:
                    18:fa:22:de:9d:ab:d5:35:59:6a:28:6f:ff:0c:6a:
                    25:41:dd:95:f6:a3:63:f3:8d:37:33:2b:bb:0a:18:
                    97:ea:96:ac:02:1d:a6:36:e3:5c:fe:bd:dc:52:22:
                    d9:8b:4b:69:d0:04:0f:b1:2d:04:15:fa:fa:e9:04:
                    91:c5:7a:25:c0:6d:4b:19:17:50:3e:ec:6a:60:fa:
                    40:0b:58:1d:1f:6f:cd:1c:8f:40:f2:31:8d:b9:00:
                    84:a6:0c:86:f8:fe:c9:46:bd:42:96:1c:53:a8:13:
                    fe:98:54:82:9d:3d:ba:83:16:69:e2:24:6c:b3:da:
                    1b:47:c4:83:55:88:42:22:a9:83:07:22:56:81:b0:
                    6c:8b:9e:f8:c5:96:4c:a1:59:c8:5e:6b:8b:ad:c6:
                    de:ab:42:f5:86:71:d3:09:a7:13:1f:a4:39:39:77:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2D:89:30:B1:CD:59:E7:E6:FE:B1:1C:F6:7F:66:3A:A1:93:A7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.132.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e5:d5:c4:91:1f:f1:48:5a:3c:30:17:f6:06:ba:ea:12:f5:
         02:4a:ed:76:f1:5d:00:34:dc:f9:77:15:26:72:d4:12:c4:86:
         cf:a5:49:08:ec:e5:16:4f:36:43:b4:0c:4f:b9:34:d6:41:a3:
         3a:49:0d:94:f7:ae:c1:51:3c:61:ca:c1:a4:f5:52:0c:c6:1a:
         ec:77:84:42:d4:c1:07:9e:3a:00:86:d8:4b:6a:5a:a4:22:a2:
         0d:1d:d4:88:c6:87:a4:1a:eb:96:c0:4f:09:a6:ce:20:33:f7:
         4f:1e:20:0f:b8:1c:06:20:76:ba:25:2f:0e:5c:94:fb:be:5c:
         e0:f0:54:03:b3:fc:6e:94:22:8e:0a:8f:49:c1:77:b1:c8:9a:
         b6:c7:7c:b8:27:1f:56:fe:44:a7:8b:44:39:8d:b4:18:be:36:
         31:a9:02:1f:d5:97:69:0e:46:17:ed:eb:68:da:24:e3:56:82:
         be:c8:b3:3d:6b:9b:30:fc:2c:b5:48:4d:62:00:53:12:07:99:
         9e:dd:4f:f1:8c:d7:bc:8b:ff:43:6a:02:da:38:16:e5:67:7a:
         ee:05:eb:be:cc:d4:6d:ab:9c:de:70:72:61:d3:03:b3:aa:e2:
         d8:f7:15:b6:d5:97:c4:a8:ae:f1:95:1a:40:71:df:84:86:19:
         c1:cd:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:57:06 2024 by rpki-client on console-ams.rpki-client.org