Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3/bee4bc8c-afb1-3dbf-9eee-eee8da53714b.roa
File:                     bee4bc8c-afb1-3dbf-9eee-eee8da53714b.roa (raw, json)
Hash identifier:          4zU7+0ncOcLZ86u4raE3ZymdE/czAGAvg7Jqaul8rJA=
Subject key identifier:   E9:0E:6F:2F:8D:54:B0:51:EC:96:2B:C0:C9:7F:F1:02:B5:CB:97:BF
Certificate issuer:       /CN=63938e70-10a6-47d2-a682-6004e07e17c3
Certificate serial:       010D0C9F43285844F73009B8CE8D6C7D05015F00
Authority key identifier: 2C:B8:F1:43:4D:8E:29:B0:BD:57:8E:39:B6:A4:DF:CB:84:46:72:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3/bee4bc8c-afb1-3dbf-9eee-eee8da53714b.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     1239
IP address blocks:        206.82.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3/63938e70-10a6-47d2-a682-6004e07e17c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3/63938e70-10a6-47d2-a682-6004e07e17c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:09:b8:ce:8d:6c:7d:05:01:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63938e70-10a6-47d2-a682-6004e07e17c3
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=67ac9e3f-8868-48dd-a9e9-a5265257b5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:9a:77:92:32:1d:d4:08:d7:84:98:1d:1b:
                    10:d3:2f:82:55:92:ae:c5:64:2a:ac:87:f2:ec:dd:
                    78:67:47:f9:c2:74:68:06:0f:a1:8a:74:b7:2c:ba:
                    94:08:eb:55:d0:d4:97:0d:2d:36:e0:56:c7:8f:b0:
                    5d:3a:2f:05:b7:ea:6b:b2:46:4a:41:78:22:26:c6:
                    8b:ea:07:02:9f:85:ff:66:9a:14:ea:88:76:fc:9e:
                    92:1b:c6:ba:82:3d:8e:78:96:84:01:31:d4:1b:7d:
                    07:87:8b:f6:df:f6:1f:ee:a8:b9:f9:ef:d8:6a:1e:
                    85:e3:c8:af:68:ec:e1:7b:b6:40:4c:ab:dc:6a:90:
                    b0:43:4b:7a:43:8e:1f:ca:a2:c3:39:9d:aa:fb:3b:
                    86:fa:77:c7:1e:25:9d:64:10:b9:e1:f1:f8:86:1e:
                    b8:90:15:ed:ff:ca:2e:de:c3:05:b1:76:bb:ce:d1:
                    e3:a9:f4:2c:95:26:97:19:bd:18:e6:8a:b3:ba:13:
                    ec:c8:ea:84:a0:f1:af:2a:16:85:4b:26:81:7a:49:
                    10:64:7b:3c:e3:83:be:e8:9b:82:c6:55:1c:e6:ba:
                    c3:64:f5:7b:d9:6d:da:ee:72:68:cc:06:a2:18:ce:
                    d9:6e:ed:0a:ca:90:25:28:f8:c9:29:ee:d6:e2:27:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:6F:2F:8D:54:B0:51:EC:96:2B:C0:C9:7F:F1:02:B5:CB:97:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3/bee4bc8c-afb1-3dbf-9eee-eee8da53714b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3/63938e70-10a6-47d2-a682-6004e07e17c3.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B8:F1:43:4D:8E:29:B0:BD:57:8E:39:B6:A4:DF:CB:84:46:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63938e70-10a6-47d2-a682-6004e07e17c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:fb:0a:83:8b:0a:4b:a5:f6:45:38:a8:14:e7:0b:51:4d:
         fe:a5:4f:4c:32:47:90:d1:e2:ef:ac:08:ac:88:94:af:d2:71:
         eb:77:6d:f9:f7:17:85:5b:28:b8:cc:03:37:7d:6a:1c:70:9c:
         9b:30:c7:f8:e7:eb:90:b1:41:58:18:02:94:db:5f:0b:83:98:
         17:c0:ce:a9:36:9c:b1:d5:a8:5a:e6:9c:5a:db:1f:0f:7c:94:
         ea:5e:22:30:c6:7d:81:d1:bc:0d:44:dc:55:28:4b:ee:36:8a:
         5d:e3:a5:09:b8:e7:7d:21:d0:dd:3d:33:3e:ff:58:30:36:52:
         3c:d3:46:c2:e7:2a:7d:87:e3:c0:bc:34:bc:65:f5:88:11:6f:
         36:b1:fc:94:2c:1c:a6:96:a0:93:b6:1c:4d:df:c9:63:d0:18:
         64:f0:46:bd:6a:02:40:03:77:72:1b:84:76:9c:1f:30:bd:7a:
         45:88:9b:03:ef:ff:b2:ae:45:a2:69:a4:e0:0e:76:ae:42:b0:
         e9:75:fd:7d:ae:bd:f2:0f:38:c2:ba:b9:9f:ce:f4:55:76:80:
         aa:c9:bf:87:33:cf:21:eb:6a:2c:a2:02:6b:2e:55:23:c8:0a:
         46:bf:dc:f0:50:2a:ad:5e:aa:c4:a9:6d:52:ec:e9:75:2f:23:
         08:6d:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:15:46 2024 by rpki-client on console-fra.rpki-client.org