Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15bdf843-55f6-3330-a2a2-7862b9ad9918.roa
File:                     15bdf843-55f6-3330-a2a2-7862b9ad9918.roa (raw, json)
Hash identifier:          BMSVIlA1NmZFZjNuFh1/nU/BgjLSy7Xt6wZ8x/oMhZE=
Subject key identifier:   24:86:A4:F4:C7:D2:52:9F:2E:37:09:89:EB:DC:3D:E0:F5:85:2C:29
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858477230F215B708201B5584E5C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15bdf843-55f6-3330-a2a2-7862b9ad9918.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     212238
IP address blocks:        206.123.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f2:15:b7:08:20:1b:55:84:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=cdef2d23-8c59-4461-873c-a91a31319677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:1d:35:95:d4:5d:11:29:eb:14:9a:30:e0:
                    8a:b6:ab:b4:a7:36:22:46:20:89:be:8d:3a:0a:fa:
                    d4:78:66:16:fe:e5:64:1d:a7:1f:63:f6:2f:7b:02:
                    e8:22:b4:c1:81:8b:09:68:87:cb:68:a0:cb:20:30:
                    16:fe:0b:1e:90:9f:a2:85:20:c6:13:ea:9e:72:18:
                    88:9a:a5:b9:bb:64:53:11:0a:41:94:d0:57:35:2d:
                    8c:4d:ef:ac:f6:13:dc:d2:d1:14:f5:55:15:c1:85:
                    a6:3b:21:c3:82:d6:04:c8:7f:63:6e:4f:cd:66:b5:
                    a6:14:e6:0d:98:dc:d4:6d:4e:2b:5a:0d:90:b8:c4:
                    50:a2:ee:83:55:61:87:7c:55:ed:44:96:b3:5d:67:
                    74:5e:13:f7:52:be:01:50:b7:cc:44:50:2d:e3:d8:
                    eb:b0:93:58:41:5a:7a:3e:2a:05:1b:68:8a:5a:68:
                    d2:b0:36:98:1a:33:79:9b:56:f6:af:97:66:dd:22:
                    56:ff:84:91:2c:69:7b:c9:c5:b2:ec:7d:61:bf:e3:
                    d3:0c:37:b8:ab:47:b6:29:2c:69:3a:df:59:1f:83:
                    f1:df:12:8a:79:d5:ac:27:b6:06:41:2c:c1:6d:92:
                    5f:e4:dc:11:7f:0a:35:c3:d5:06:be:58:59:20:5a:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:86:A4:F4:C7:D2:52:9F:2E:37:09:89:EB:DC:3D:E0:F5:85:2C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15bdf843-55f6-3330-a2a2-7862b9ad9918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:f7:c6:7a:20:b6:61:13:44:31:96:06:09:62:5f:e3:11:
         e0:e8:e2:f7:51:d9:d9:d7:e3:40:be:e4:b5:2a:d7:45:a0:24:
         15:4c:db:14:5b:e1:8b:a9:3b:3c:35:d9:b9:36:84:c8:3b:a7:
         1d:6b:2b:f9:36:a8:1a:a7:f1:ba:ec:b2:81:a3:3c:79:24:90:
         40:bb:96:26:3f:72:a6:9e:b8:b9:96:c7:2a:c3:77:00:0e:fc:
         2f:37:99:cb:91:ef:87:18:3e:9c:1c:b9:6e:32:d8:88:6f:6d:
         fe:70:b7:88:97:04:ff:9d:29:38:c1:eb:00:2a:86:dc:93:44:
         02:16:2b:4a:aa:9b:44:2c:3c:c4:ca:32:19:e8:e9:93:85:e0:
         f5:23:f2:eb:f8:c9:ca:c9:cf:d9:51:c5:a1:3b:d8:d2:4a:bb:
         65:36:31:f2:83:39:61:05:c6:47:23:00:9b:31:ad:b9:8a:55:
         46:5d:3d:fc:19:ca:f5:b2:91:08:fb:22:a0:c7:5d:3f:1e:c7:
         89:dc:9b:81:c9:90:0c:72:54:70:da:c6:85:0d:25:17:77:2d:
         2b:f7:82:36:d8:a1:71:f1:6b:d1:00:e7:a4:d1:1b:be:f7:93:
         02:d1:06:c1:81:45:5d:52:a7:b8:23:96:a6:77:88:48:7e:2b:
         29:57:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:53 2024 by rpki-client on console-fra.rpki-client.org