Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa
File:                     2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa (raw, json)
Hash identifier:          E7KBN2lV31gEIq6zuz7ErtilZp+62Jiui5mEf1efyD8=
Subject key identifier:   39:C1:86:9F:2C:35:77:70:FC:AD:93:A3:29:08:FB:A7:14:EE:26:9D
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F432858473095EF0AB7E682C4829388EA
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     0
IP address blocks:        206.72.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ef:0a:b7:e6:82:c4:82:93:88:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=817ecf75-793a-4d3f-81ca-8a90460e2830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:51:e2:e1:27:e7:b6:f3:c5:da:d8:11:ca:
                    26:27:42:2e:e8:07:39:25:32:01:6d:40:51:aa:68:
                    7f:32:0d:f9:05:6e:d8:ca:1c:d1:81:44:89:89:2f:
                    95:51:61:20:ba:fb:ee:ed:12:7c:eb:f1:fd:6e:e5:
                    b6:32:c7:58:ef:d7:f1:6c:9c:da:93:8a:99:56:fc:
                    b9:38:99:88:63:b6:28:17:a5:f1:8b:59:4c:3c:ef:
                    ee:a1:60:df:bf:72:5b:d0:dc:43:0a:a5:22:9c:a5:
                    78:27:9f:f3:98:41:11:ce:5a:7d:c8:7b:ea:20:80:
                    c0:91:e3:fe:e8:e8:1b:94:59:69:cd:22:c6:5d:b1:
                    81:70:39:52:e0:12:00:82:68:12:a5:ba:47:b7:35:
                    01:47:b4:37:cf:36:40:6f:81:1e:a1:a4:cb:ae:de:
                    9c:74:7e:5f:f0:5d:74:b7:17:13:73:c1:54:1f:61:
                    82:18:7d:42:82:c7:a2:e2:ef:20:c4:91:35:49:47:
                    64:8d:5e:a3:ec:69:28:40:08:41:0d:c0:f1:61:54:
                    42:82:f9:3a:3c:c7:0b:de:f3:65:33:68:10:dd:28:
                    b3:73:b1:d5:d0:b4:c7:cf:0f:56:1d:71:35:24:14:
                    cb:1b:d2:26:66:29:6c:cd:23:33:94:ff:05:cc:7e:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C1:86:9F:2C:35:77:70:FC:AD:93:A3:29:08:FB:A7:14:EE:26:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:4a:7c:e5:25:1b:ef:9c:c7:5e:d2:1a:32:a6:8b:e9:0e:
         14:49:2d:21:ba:a8:43:0e:a9:86:b0:ef:fd:d1:f2:54:87:50:
         c2:de:00:d9:4a:5a:82:3f:81:ba:3d:d8:66:f7:e9:63:50:4a:
         38:3d:ac:b7:f6:a1:16:93:d6:10:eb:b1:a7:0d:06:a6:05:74:
         3c:bb:a8:a1:1f:7d:43:1f:7e:79:58:53:d9:75:db:47:62:04:
         e6:11:cd:4c:b3:26:9b:aa:b8:7b:ee:40:29:85:58:0c:af:1f:
         f8:1a:89:d1:ba:74:34:e8:f8:d6:b5:39:ae:a9:c7:1f:26:3d:
         20:47:52:75:34:ca:6f:cc:dc:d7:9b:13:22:31:f9:0b:95:96:
         eb:ba:d3:8b:a8:2a:92:e0:96:79:4a:bf:15:9e:38:59:79:13:
         bd:9f:b1:16:66:9c:f1:c0:d9:fc:dc:cc:9c:b5:a1:85:9b:70:
         21:06:3d:a4:26:5f:cd:64:3b:b3:4a:12:9d:86:5b:e8:49:53:
         cc:82:91:5d:21:9f:2e:3d:d6:2f:1e:94:3c:41:9b:e9:39:97:
         a7:6c:70:0e:c8:87:6a:73:60:7a:72:87:05:27:b0:98:4c:9e:
         4e:2a:4f:ea:68:63:c6:c1:ae:35:e8:2f:e5:96:15:fb:36:06:
         31:59:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:27:58 2024 by rpki-client on console-fra.rpki-client.org