Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa
File:                     4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa (raw, json)
Hash identifier:          VyVgK0sVdV0XEcJDbHrcjkMEcoPrSfhmEaEc8/ER7hk=
Subject key identifier:   54:29:96:3E:2C:3C:2C:63:24:4D:77:AA:18:63:F8:BF:24:53:F1:C0
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285847A04147E8475834ED42745C80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     26421
IP address blocks:        206.169.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:47:e8:47:58:34:ed:42:74:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=3f466404-3904-4782-be55-3cfd5bfdaab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:4e:36:ea:e6:4c:28:8f:3d:da:f5:0a:57:
                    b1:80:28:ce:93:73:f8:c4:cd:dd:40:e9:e2:3f:59:
                    96:7f:e5:06:5b:6a:f6:e0:72:2f:ae:9c:34:33:1e:
                    1a:42:2a:b9:de:9c:75:e1:75:a2:a9:e7:1d:e9:ea:
                    f4:58:c7:7b:8e:32:2d:c0:1b:90:90:44:89:24:64:
                    e2:fb:51:32:48:37:b1:0a:62:cf:9f:54:33:0d:d1:
                    d1:c9:e0:df:1f:be:0b:b1:41:31:88:cc:94:77:27:
                    5e:9d:95:bb:a2:dd:8e:e0:ac:23:0e:85:33:90:c1:
                    c4:74:b0:58:30:77:65:48:8d:b9:28:4d:fc:88:1f:
                    d8:be:ca:0c:a2:39:1c:69:39:46:8e:e7:03:27:e0:
                    db:ff:69:b8:72:e0:75:28:de:41:c6:5c:01:c6:9a:
                    cd:ea:29:e3:86:3b:9e:70:5d:ba:cf:6a:b5:76:63:
                    1f:a5:d2:7e:29:d3:61:c9:aa:04:d1:ec:a1:a8:35:
                    fb:a1:94:61:7c:12:d9:e8:fc:88:a3:f6:56:b3:49:
                    65:3a:01:e4:09:e2:e9:d7:bd:74:d1:fd:4d:97:04:
                    d3:be:4f:b0:85:9a:40:eb:4e:cd:75:32:3e:04:3a:
                    bb:fd:cd:fc:cd:f6:17:8f:58:04:1c:de:4a:a0:ca:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:96:3E:2C:3C:2C:63:24:4D:77:AA:18:63:F8:BF:24:53:F1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.169.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:51:6c:51:0c:d4:e3:28:ff:df:f3:18:6b:a5:82:d0:ef:bf:
         7f:26:af:28:42:a1:51:83:25:81:68:1e:b8:a6:6d:72:21:c0:
         cb:96:c7:30:1e:95:93:e9:ac:c3:88:76:07:09:c3:33:b1:a5:
         b7:72:99:8e:a2:14:3f:63:f5:ba:60:63:04:67:6f:4a:35:d2:
         27:2d:23:20:c2:9a:5f:53:2f:a9:a0:6e:62:a5:2d:ae:7d:e5:
         d5:b7:e9:0a:67:67:17:65:02:11:09:c1:90:6e:ff:56:0e:89:
         a5:3b:40:43:2c:07:83:c1:ad:71:ca:bb:0b:d7:71:68:70:5b:
         ef:cc:4a:b5:cd:c8:46:3d:ca:ff:4f:db:35:37:72:2b:69:17:
         4d:a5:31:cb:87:d5:32:af:57:4a:4d:b5:25:bf:d8:51:5e:31:
         ef:77:9e:fd:d3:d6:13:2f:ef:4d:4c:28:d5:ca:34:ca:f7:1b:
         c9:da:05:02:85:ad:4c:35:4b:20:95:82:c1:a7:a1:7e:3e:e7:
         5d:1b:d3:75:0b:00:88:20:0f:a5:2e:aa:63:7f:6b:62:bd:81:
         b4:0e:89:36:97:72:63:6d:5a:00:b8:d6:f8:97:e7:0f:63:98:
         03:08:48:f4:ae:93:58:74:ff:44:b6:37:19:e7:47:55:c3:fd:
         b0:bb:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org