Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
File:                     a96f000e-3ea0-3413-9d0e-ef701db4c430.roa (raw, json)
Hash identifier:          vcEH3y6EsrCpzYuQEX4ylavZozqUs8CONHr6JInSG5U=
Subject key identifier:   11:DB:B2:66:8D:AB:68:D1:9A:D4:F6:B5:30:92:50:B6:E9:74:04:2F
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F432858457049BDB72FB715C258329C00
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
Signing time:             Thu 04 Apr 2024 23:05:11 +0000
ROA not before:           Thu 04 Apr 2024 23:05:11 +0000
ROA not after:            Wed 03 Jul 2024 23:05:11 +0000
asID:                     40676
IP address blocks:        206.183.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:49:bd:b7:2f:b7:15:c2:58:32:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Apr  4 23:05:11 2024 GMT
            Not After : Jul  3 23:05:11 2024 GMT
        Subject: CN=f6ca0a6b-7692-4516-b906-6c77bdb38fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:88:a8:df:c1:1e:ea:86:48:03:44:6a:b6:
                    c5:15:8b:23:e6:8f:53:00:3c:a5:4c:2a:f8:46:68:
                    38:50:74:7b:8c:eb:d6:cc:44:47:f5:74:dd:8c:d7:
                    51:b8:fc:98:d4:7c:6d:20:79:53:9d:e8:9a:df:df:
                    bd:3f:1d:98:6f:dd:dd:38:e5:cb:59:fa:ef:c3:b1:
                    d3:72:88:2a:a8:a1:ab:9b:f4:62:6e:c0:8c:e3:f3:
                    bc:4f:1c:95:c3:c4:ef:5a:a5:ae:95:ce:a5:83:93:
                    a5:e6:26:df:36:ce:ec:da:9b:04:37:ab:c8:34:a5:
                    a6:7d:c8:23:47:77:f2:50:13:4b:81:dc:3b:91:ee:
                    33:99:fb:8a:9b:f9:12:ff:a8:ca:65:25:5c:d3:14:
                    fd:13:d9:c0:ce:b6:79:e0:3b:ab:81:68:67:81:ba:
                    9d:e3:58:67:89:ce:82:60:57:21:f4:4d:37:92:32:
                    a8:c1:71:f8:3b:6d:38:21:93:f8:d6:73:1a:0c:d3:
                    3d:7c:bd:9c:67:b3:40:1e:73:f0:40:26:6c:14:0b:
                    98:ef:82:ad:fb:6a:d6:7f:98:38:2d:dd:28:2e:36:
                    ea:43:19:a5:d7:9c:0b:28:5d:b2:8d:c1:5d:64:57:
                    e3:2b:5c:8c:51:b2:5d:22:62:8b:e8:e9:77:d4:80:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DB:B2:66:8D:AB:68:D1:9A:D4:F6:B5:30:92:50:B6:E9:74:04:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:e3:7d:48:38:ef:cd:84:69:ed:2b:70:38:85:89:2d:6f:
         13:57:d2:18:01:26:38:7f:d6:77:7a:93:15:09:ce:2e:70:de:
         19:20:52:92:c7:40:e6:7a:bb:01:02:73:8f:f3:24:02:db:82:
         ce:d6:b2:b2:8e:c0:c4:87:60:0a:6f:62:8b:08:e5:ef:29:10:
         5b:06:b0:2e:0b:7e:54:b4:7c:8e:60:a7:18:2a:8c:54:4d:8b:
         90:cf:eb:c3:e9:c3:58:92:3e:eb:81:f4:f4:b4:50:49:0b:e7:
         f8:81:6e:53:db:f2:bc:60:89:27:3b:bd:5f:c7:ca:c2:be:19:
         5a:82:4d:45:a7:90:6a:d1:73:b2:fa:c8:62:00:87:d1:0d:db:
         d9:01:04:9b:89:00:0c:c5:fa:da:04:09:dc:d6:7f:fa:f6:4c:
         3a:a2:f9:d6:bc:a2:56:85:69:b8:00:38:5d:01:36:86:a4:c8:
         f6:99:e7:a3:35:7d:c3:21:31:c2:f0:19:35:75:31:e0:56:e6:
         3e:2e:29:62:34:c2:86:33:6e:3e:96:23:8f:8b:8e:d2:bb:fb:
         05:2c:30:94:20:f6:e7:41:24:52:f7:ee:76:fc:5b:f2:da:c8:
         b7:a4:06:72:4b:3c:e0:7a:4a:04:8e:d7:8f:ed:67:da:14:3d:
         61:77:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:45:00 2024 by rpki-client on console-ams.rpki-client.org