Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa
File:                     3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa (raw, json)
Hash identifier:          a29VWQSMz5ey+vctfvt9u+vs40r+7jWovU/H75V75WA=
Subject key identifier:   00:87:13:ED:4B:12:12:F3:B5:DF:2C:5B:22:A3:E7:47:2C:E4:71:31
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285845C01391D6BADEB164FE54F380
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     22808
IP address blocks:        206.49.107.64/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:91:d6:ba:de:b1:64:fe:54:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=ef24fb3d-0e41-4b3a-9f8b-bfc6b6d53d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:05:b7:6a:4d:24:2b:db:51:04:e6:07:c7:ff:
                    d7:3c:10:0a:ba:6e:f8:f4:bd:4f:a3:90:17:9e:23:
                    e8:f6:db:15:b1:e8:3e:a9:cd:38:b2:2d:87:ff:31:
                    8f:91:ea:59:5b:ef:3b:e7:e1:c9:ef:f5:da:07:f9:
                    96:7b:0b:7c:9c:a2:1f:5b:11:e8:ce:0b:21:e4:4b:
                    5a:eb:07:62:42:e9:dc:11:6e:67:77:e9:92:3a:3c:
                    f5:19:66:3e:1f:c8:55:fc:d0:97:5a:60:06:d7:f3:
                    86:5d:b8:8c:20:c0:3c:3c:b1:0f:cd:40:4a:ce:66:
                    9a:40:80:34:79:0d:af:3a:e1:b2:92:3a:3d:a7:2d:
                    55:fe:0d:0d:2d:f4:12:c1:84:f4:c2:5f:78:c2:65:
                    53:bf:88:6d:bf:08:5f:fd:66:ad:91:30:05:c9:b5:
                    91:4c:9e:5f:de:e0:e2:cd:63:9a:47:d6:aa:b3:28:
                    5a:54:45:1c:74:b7:8b:3d:fc:86:1b:d0:ef:25:92:
                    b2:de:97:5b:52:02:54:36:ab:54:d7:17:9d:38:3e:
                    b8:5e:c4:de:16:02:87:b1:a9:8d:ff:61:40:23:dc:
                    13:95:33:6e:8f:b0:9f:6f:00:cb:98:48:fc:7b:99:
                    91:d5:cd:22:30:c6:11:4d:7b:77:56:d5:2a:02:27:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:13:ED:4B:12:12:F3:B5:DF:2C:5B:22:A3:E7:47:2C:E4:71:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.49.107.64/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:00:42:c4:ca:fc:d0:ff:16:7d:c7:61:9e:8a:ff:88:2d:eb:
         b1:5b:2a:af:b8:aa:b7:a5:e1:9e:23:98:6e:f0:7a:ff:6e:90:
         4f:2d:d0:ce:ff:4d:45:13:07:08:2b:1c:a6:c2:0a:46:4b:3a:
         cf:40:39:d8:01:d5:07:ec:9e:1f:a4:48:00:76:ce:1d:51:17:
         af:17:5f:b5:17:09:17:43:ed:87:71:42:e5:1a:34:fe:be:ce:
         a7:08:60:19:6d:38:65:45:10:af:ad:47:19:94:aa:db:7b:ec:
         19:59:a8:5c:67:28:df:c1:71:c5:8f:cc:72:18:97:56:a6:71:
         95:71:31:55:31:ad:af:be:41:74:1b:b9:f8:7b:ea:0f:bf:ea:
         85:a8:3d:a8:12:c1:37:d4:7d:2c:11:15:7e:d3:98:08:34:1e:
         c0:5e:db:34:4b:38:05:ae:d0:c7:25:ee:30:57:b6:73:3d:97:
         c4:14:92:e1:ec:e7:a1:47:40:e3:56:75:35:27:23:ae:a9:27:
         56:2e:46:fc:f7:56:40:6c:2a:64:3c:74:f6:53:86:71:fd:80:
         11:c8:9f:4e:65:91:72:49:19:f9:66:3a:6a:2b:66:b8:0d:1c:
         cf:b8:25:28:12:2b:af:d2:06:d9:ac:e7:b3:f7:00:ea:4c:fe:
         6c:20:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:40:02 2024 by rpki-client on console-ams.rpki-client.org