Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/211bb791-f615-328f-aa4a-b58ac1a58dd9.roa
File:                     211bb791-f615-328f-aa4a-b58ac1a58dd9.roa (raw, json)
Hash identifier:          zpVepUJxtN1SFfiVEP+fT28975lBvRG63DaTsniKCYU=
Subject key identifier:   D0:96:C3:D9:71:17:F9:1A:DE:2F:7C:6C:5B:7F:7B:BB:30:01:06:DA
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F43285847888656DA9F994AF9BCA01FB0
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/211bb791-f615-328f-aa4a-b58ac1a58dd9.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     7922
IP address blocks:        206.183.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:56:da:9f:99:4a:f9:bc:a0:1f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=078fd30b-04af-4302-bb6a-051a7dc7da11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:18:68:88:b4:c0:e2:76:79:d2:db:8c:f6:
                    e2:0b:95:ae:d1:cc:51:f2:11:9e:5d:fc:ed:8d:44:
                    af:41:a7:ae:97:70:25:4d:7f:33:ff:bd:63:28:be:
                    da:69:35:48:04:a5:6c:81:dd:bd:90:07:eb:20:2b:
                    a2:84:78:90:d3:01:6b:32:11:64:50:5b:65:aa:6a:
                    27:11:24:2f:93:cd:a9:d0:3a:57:13:b5:bc:46:e8:
                    3d:22:66:27:eb:d0:d1:10:ca:34:d7:29:51:05:81:
                    61:fb:19:a0:b7:9d:4c:b1:42:02:3f:a5:95:ad:90:
                    47:27:b4:59:49:f4:ab:d6:32:0b:2d:c7:42:f3:47:
                    d6:c6:a0:f3:b8:69:db:98:2e:77:5d:9a:bc:2d:2d:
                    2b:2b:87:7a:28:74:8c:21:f6:51:34:a8:17:9f:8d:
                    b1:f6:22:cc:7f:49:c6:c5:40:0a:2d:d0:56:6e:8a:
                    c2:ae:0b:07:2e:61:6e:3c:9e:5c:e6:4b:42:3d:ad:
                    64:e4:59:2f:62:a8:dc:ca:db:d5:1d:99:3a:56:a1:
                    36:10:b9:d9:30:00:e7:10:a4:2d:56:f0:33:50:7e:
                    7a:b6:3a:e1:9d:cd:df:a6:97:c3:48:e0:5e:26:e6:
                    fb:fc:76:bb:d9:17:3e:44:2b:95:ac:d6:8b:41:10:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:C3:D9:71:17:F9:1A:DE:2F:7C:6C:5B:7F:7B:BB:30:01:06:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/211bb791-f615-328f-aa4a-b58ac1a58dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:3a:0a:de:35:44:21:11:48:79:7a:18:de:15:b2:ab:9c:
         bc:fd:0b:dd:c6:d4:f6:6c:25:02:51:f2:1c:0b:f3:f9:77:4f:
         8f:ee:e8:64:9f:31:a2:cf:64:2c:6a:ce:a8:70:b2:1c:2c:38:
         62:4b:4a:f1:2d:d1:f2:ec:96:29:57:a8:66:0c:e7:66:48:88:
         b0:c8:ff:7e:74:45:3b:47:61:10:53:29:bc:6a:e5:ca:6e:5d:
         07:34:80:6e:82:20:14:51:7c:df:d8:df:50:09:9e:5c:97:29:
         0d:64:b8:25:8d:13:25:85:02:f5:79:52:07:07:e3:b3:7c:45:
         c2:9c:52:60:2d:89:3c:6a:43:c8:1c:8f:2d:7d:27:86:fc:89:
         52:f8:2e:6e:85:dc:56:45:4c:c6:57:ed:dd:8c:12:38:e4:78:
         17:f8:a6:21:79:dc:b2:c1:6a:90:78:64:32:48:05:6b:b1:63:
         f6:63:9b:6f:2e:24:81:d8:00:3d:74:bf:24:da:23:3e:47:85:
         8f:37:89:7e:a9:73:3b:02:64:3e:e2:35:e6:07:f4:05:c7:fc:
         06:09:eb:98:11:22:bc:5c:9d:ad:ec:32:cf:9c:72:36:ce:d1:
         c5:9d:ce:bb:66:c4:65:3b:35:1e:3b:5e:ed:c6:ba:94:4d:b8:
         f5:10:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:39 2024 by rpki-client on console-ams.rpki-client.org