Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15bdf843-55f6-3330-a2a2-7862b9ad9918.roa
File:                     15bdf843-55f6-3330-a2a2-7862b9ad9918.roa (raw, json)
Hash identifier:          iG5sNPYoPpzrbPStXBKdvp3gN8TRrI4U52iE0vt0phw=
Subject key identifier:   DD:B3:57:10:4C:F1:BE:00:E0:93:A5:36:E0:64:42:A2:12:A4:8D:83
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845B21E301B5792A968674B6040
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15bdf843-55f6-3330-a2a2-7862b9ad9918.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        206.123.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:30:1b:57:92:a9:68:67:4b:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=06005129-528e-4ce8-b945-7460c60fe8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:4d:98:63:82:1a:4a:3a:fd:bb:e7:47:f0:
                    89:5f:5e:7b:13:4f:50:22:ef:96:40:ea:36:d2:8d:
                    16:5f:b2:b9:97:26:8e:90:66:76:6e:af:51:a9:01:
                    e6:0f:09:22:8f:d5:e0:99:4c:10:81:fd:8f:3f:29:
                    36:dd:2d:9b:5c:4e:24:4b:fb:db:6e:2d:99:f6:74:
                    97:d5:ee:4c:5d:95:40:36:0d:15:76:24:4d:28:68:
                    00:ce:b3:e7:a8:84:84:fe:4c:1a:53:4e:8c:c5:6e:
                    1c:c4:04:ff:dc:ea:8c:bf:5e:15:0f:71:86:29:85:
                    b8:c1:91:b6:71:77:56:1b:21:82:c8:c5:d9:97:f0:
                    8c:a0:90:f7:0b:12:7b:8a:ca:cd:5b:c0:5b:5b:ad:
                    98:49:64:cb:de:df:05:dd:59:24:a7:f2:15:98:6c:
                    ed:92:f7:f5:f3:11:44:a9:93:ef:c7:9e:80:a5:53:
                    e0:d2:78:a4:60:cf:45:08:a7:b0:89:a3:bd:5f:e4:
                    dc:fd:d7:cc:b2:e6:eb:d6:cd:01:da:43:ab:4e:7f:
                    f2:a2:96:e3:d4:fa:f6:15:04:92:2b:ff:e2:32:a8:
                    5f:eb:41:cc:6f:18:e0:40:46:36:9e:b4:cf:f6:e5:
                    5d:59:82:98:38:79:04:cb:22:8c:a3:47:5f:6c:43:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B3:57:10:4C:F1:BE:00:E0:93:A5:36:E0:64:42:A2:12:A4:8D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15bdf843-55f6-3330-a2a2-7862b9ad9918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:bd:33:dc:69:b1:bc:18:24:05:e4:f4:ab:97:39:52:fc:
         c8:56:31:8b:94:f6:4b:30:23:ab:db:7c:47:40:36:ac:57:a4:
         5d:42:10:5d:4a:c1:56:1e:fc:83:6a:55:1a:c1:6b:eb:ec:9e:
         d2:23:54:31:98:4d:9a:66:aa:c1:73:9d:7a:8c:c2:12:5f:b2:
         aa:be:fc:e8:74:86:7a:b9:29:ca:b1:6e:46:ae:11:ed:28:d2:
         8c:47:9f:09:b4:66:6e:19:8a:fe:ed:2e:58:7f:ae:4e:62:4c:
         e9:82:36:56:f7:70:69:60:a2:b5:fd:9e:72:da:86:20:1a:03:
         0b:aa:15:1c:47:e5:70:7b:97:65:58:e6:fc:44:00:98:67:e9:
         76:62:fc:63:04:a6:9e:c9:ec:ac:16:a7:93:12:0e:f1:ad:9b:
         f5:d2:3d:6e:35:02:3c:f2:cb:f4:ea:2d:4e:38:65:55:09:d8:
         ea:60:7f:d6:f2:dd:d0:c3:fc:74:fe:da:40:53:89:c7:8d:7e:
         28:fe:09:7f:d4:86:bc:12:5e:1f:a1:d1:19:1f:2b:5c:1e:f7:
         f6:ba:a7:9b:66:c1:47:e4:ca:33:d3:5e:5c:eb:fa:30:90:14:
         dd:c9:6e:67:5c:2d:03:bc:ac:35:84:d6:1d:28:dc:d8:9a:b0:
         e8:ad:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:07:43 2024 by rpki-client on console-ams.rpki-client.org