Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa
File:                     3f7623ce-fa12-3190-93d6-daf4bba1752a.roa (raw, json)
Hash identifier:          LEt8RHkx8/gJhl022/7PbFVXQRkyee6+9iR2a+YEXMQ=
Subject key identifier:   CD:26:E3:00:9E:2A:D7:3E:31:BD:FF:D7:24:E1:11:48:9D:C7:8A:FB
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285845612858D820F8CFF22C517540
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     6505
IP address blocks:        206.48.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:58:d8:20:f8:cf:f2:2c:51:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=6fa1d4ca-73c6-4037-8173-08a21475cd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:ee:16:23:c2:28:fb:ca:02:e8:90:e7:2d:
                    73:44:1b:a3:8c:4e:33:ce:35:d4:94:db:4d:db:54:
                    e9:21:2a:45:f5:ed:63:98:41:f5:c2:b0:8f:2b:b6:
                    93:ba:2b:8c:21:c7:49:6a:1f:b0:4d:b7:02:b6:5c:
                    3f:7e:18:b6:73:75:ec:1a:6f:67:57:47:77:73:39:
                    5d:06:d7:c8:28:fd:56:09:8b:5e:0f:e6:30:74:d9:
                    b0:40:a6:4d:48:d7:72:f2:58:b8:31:54:72:67:3a:
                    b0:5f:19:66:1e:49:13:a6:3e:cc:88:6a:bb:2b:63:
                    be:fc:c4:35:ad:5b:1f:6d:74:43:c8:4b:68:4b:9c:
                    62:a9:49:fc:96:27:d1:c4:9d:c9:99:55:eb:c3:9e:
                    53:e7:0b:df:15:a8:2c:6e:75:a6:73:8d:59:65:45:
                    3b:fb:20:50:00:26:46:d9:43:ee:75:5d:06:9a:ac:
                    5d:d9:9d:12:2c:f7:ce:a5:cd:f6:59:5a:2b:2f:35:
                    cc:52:d3:f9:0c:f4:63:df:e3:7a:1f:5f:a3:93:ff:
                    83:3e:67:06:d0:e2:42:79:23:47:64:bc:98:52:03:
                    b3:a7:cf:8c:46:22:68:50:98:f5:a6:64:90:3c:42:
                    bd:24:e9:86:9f:bf:6f:73:fe:d0:73:a1:51:6f:97:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:26:E3:00:9E:2A:D7:3E:31:BD:FF:D7:24:E1:11:48:9D:C7:8A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:a7:ec:85:a5:8e:76:d4:70:26:70:31:17:7a:86:53:45:
         08:b6:67:4b:bd:4b:87:65:3b:c4:7d:1e:cb:c9:74:74:41:85:
         ed:8f:59:f7:27:04:f5:3f:7a:db:0b:13:9e:05:e8:c6:33:01:
         d6:f1:7d:3f:ba:29:fa:58:8d:ce:f1:b9:82:54:d3:9f:b5:4b:
         ff:50:52:0b:ee:e2:da:fb:cc:97:cd:54:ed:dc:ea:d7:9e:6b:
         2a:75:06:76:d6:7b:9d:4d:51:21:0d:ec:f2:51:1a:39:33:a8:
         99:0f:45:2a:bb:2e:b9:4c:13:dd:6c:b1:6f:af:9c:6d:c9:2d:
         af:30:e2:44:2a:28:b9:07:69:63:4f:55:99:aa:c1:3d:e7:2a:
         57:ec:9c:24:ca:08:2b:16:16:1c:87:77:93:9b:fe:0d:87:59:
         3d:c2:19:0b:4e:1e:54:2c:89:a1:ac:5e:05:70:6b:6f:72:51:
         43:ca:28:8c:7a:7c:92:3a:53:08:1e:4d:4d:44:59:4f:f7:b8:
         63:98:1d:7a:e5:a8:dd:bb:7d:aa:af:23:22:a7:12:bd:2d:57:
         16:a1:50:b7:0b:80:9e:3f:bd:77:fd:c2:46:95:ea:55:0d:e9:
         01:80:19:1c:ec:41:89:f2:bc:4e:b7:a5:67:c0:ea:21:e7:17:
         a2:a5:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:44:50 2024 by rpki-client on console-ams.rpki-client.org