Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54ed9f9a-1c3b-3a1d-81c4-b1da6c180e69.roa
File:                     54ed9f9a-1c3b-3a1d-81c4-b1da6c180e69.roa (raw, json)
Hash identifier:          WNSxTMqZocuLQ+jqt2DzXKHaEFVBMSb5nSWiA9Yl5Ds=
Subject key identifier:   E3:C7:F6:86:07:22:BD:FE:DB:D8:23:B5:F6:F9:9B:DD:03:6C:1F:D9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FAB76FC93
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54ed9f9a-1c3b-3a1d-81c4-b1da6c180e69.roa
Signing time:             Wed 15 Jan 2020 23:08:19 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     22892
IP address blocks:        206.58.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:ab:76:fc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=631e130f-0030-40da-850a-a0ed437c90fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:fa:d3:be:67:9b:98:ed:bf:07:35:3c:14:
                    7a:40:e5:37:32:55:23:0c:e0:23:b5:0c:8e:62:f6:
                    24:78:7e:50:84:58:5b:0b:83:01:4e:4e:8f:3a:eb:
                    e8:b0:73:7c:46:a5:55:e3:f7:3a:3a:7a:f8:78:c6:
                    c0:e2:43:61:d7:1c:44:b0:c9:e6:47:ed:5a:55:40:
                    6f:04:21:6c:90:3d:36:6d:a1:39:d1:92:fd:b4:9e:
                    d1:48:8c:58:ca:7c:f3:d8:dc:9b:01:68:64:4f:b0:
                    51:d0:0f:ca:1b:fd:ab:79:d7:e1:11:b2:4d:e8:2d:
                    78:fc:a8:e6:5c:71:ac:eb:19:43:8b:a3:cc:0a:cc:
                    01:00:bd:be:ef:10:de:40:84:ef:cb:12:7e:88:80:
                    7d:9e:ac:48:0f:63:10:4c:2a:17:15:1a:f7:7a:b1:
                    de:0c:46:f8:6f:21:03:b2:cd:0b:9e:57:1d:54:e3:
                    6a:b2:21:c7:91:ae:49:58:9e:27:ab:91:34:3e:be:
                    93:07:c0:3f:2c:09:92:e0:4c:3e:96:20:be:8b:26:
                    d8:d6:73:43:1a:43:67:e4:27:82:ed:c9:20:3f:e5:
                    51:5b:83:6b:76:d5:25:6c:66:7a:20:d2:a1:b7:0b:
                    3f:5c:56:fe:b4:a6:99:68:08:90:f7:2d:18:ad:78:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:F6:86:07:22:BD:FE:DB:D8:23:B5:F6:F9:9B:DD:03:6C:1F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54ed9f9a-1c3b-3a1d-81c4-b1da6c180e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.58.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:f7:7a:f0:a9:71:c2:91:99:77:dd:ba:ea:08:b3:f0:a6:
         9c:d0:a4:16:27:66:6f:91:de:77:17:29:85:89:e4:25:ed:9a:
         5d:2c:66:0f:08:6c:a3:86:93:cb:ac:30:2b:01:0c:81:c2:20:
         ba:b4:1a:5c:0b:5f:3e:84:1b:2f:3a:9d:a4:c1:1c:fe:b9:86:
         ea:be:dc:89:fc:d4:3f:51:05:7b:b5:81:6a:21:64:7b:2a:f9:
         81:31:4c:36:49:51:00:c3:74:d5:d9:b4:62:55:81:2a:2e:b3:
         54:eb:9b:b4:ba:e1:35:f4:5b:b0:02:27:29:ed:8b:5e:c6:da:
         74:a5:2c:08:86:3b:20:18:6d:f3:a9:ca:4e:5a:ce:6c:58:88:
         ea:07:cf:2e:2b:c5:07:4a:7a:b6:65:fb:10:49:b4:46:8b:73:
         19:47:fc:f7:c0:f1:a5:ea:dd:3c:c6:22:1c:74:27:94:da:9b:
         84:70:71:0b:2e:cb:a1:b2:60:17:ff:4d:19:cd:6d:20:a5:20:
         5a:23:d3:ba:7d:6a:80:f8:ea:1a:7d:b3:c6:35:54:78:9d:65:
         79:11:c5:1b:93:c0:ce:75:19:a5:74:f3:10:e6:e8:b2:cb:d7:
         15:ee:91:2b:1b:eb:cc:d3:ee:59:a4:f2:a1:5f:73:d6:b7:a4:
         ac:9d:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:11 2024 by rpki-client on console-ams.rpki-client.org