Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
File:                     0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa (raw, json)
Hash identifier:          GBykATxO60c6YVHrT6XMz6c/cVwjunP0TQ8ggKevzRE=
Subject key identifier:   04:85:EF:36:BA:EF:7A:17:6D:8F:0F:BD:06:19:DC:B1:BE:08:AA:22
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F43285847CE6F415D39E40531F2B07000
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     208889
IP address blocks:        206.168.135.0/24 maxlen: 24
                          2602:fbd9:ff0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:41:5d:39:e4:05:31:f2:b0:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=81dc4ce7-3af6-4bf3-9855-99f0c058577f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:1f:e7:0d:f3:fc:c8:8b:08:75:db:0b:b3:
                    59:78:04:66:7e:4b:92:30:f8:d4:5f:92:9f:b4:b7:
                    2d:33:23:2f:1d:ce:f5:0e:47:24:be:81:ba:c9:42:
                    c5:13:2f:ad:8b:ba:c4:da:77:92:dd:58:ed:2b:1c:
                    ea:25:84:e0:33:d5:da:06:b4:32:04:1f:84:46:8c:
                    ea:11:5a:b4:37:60:54:37:2a:83:99:f6:39:b6:4e:
                    d1:be:61:d7:f2:d1:e8:be:48:16:70:a3:ee:7e:16:
                    2c:42:11:92:07:b6:e3:26:b8:23:0b:48:02:c8:fb:
                    95:01:c9:77:8e:93:b2:c6:23:16:61:a2:14:07:d1:
                    4f:b7:07:4a:2e:87:b0:68:7f:63:a4:8b:0c:c7:34:
                    3d:db:b7:8d:35:a6:3e:43:45:b5:2e:f9:24:03:d6:
                    49:bc:b3:93:7c:45:c3:43:77:bd:e1:b9:75:95:8b:
                    8f:4c:ea:e0:9f:64:15:52:ec:d8:d6:b0:36:07:3d:
                    27:fc:76:41:7b:40:a6:e3:1f:f7:1c:d1:8b:16:9a:
                    80:93:6d:c8:3d:aa:8b:6a:70:d8:a5:79:60:8c:96:
                    25:47:7f:f1:76:8a:c0:f4:81:e0:8d:08:1f:a7:e6:
                    23:40:a9:30:be:e5:e2:52:70:b8:5d:7e:39:62:8d:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:85:EF:36:BA:EF:7A:17:6D:8F:0F:BD:06:19:DC:B1:BE:08:AA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.135.0/24
                IPv6:
                  2602:fbd9:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:ed:5f:e4:26:19:c4:8d:b5:3b:c1:07:d6:93:eb:01:5a:
         cb:42:67:5d:64:de:fb:17:45:34:bb:6c:30:fe:6a:b7:bb:b7:
         40:f7:6e:ec:b6:c5:85:a1:6c:f5:23:fe:ca:5c:b5:ff:37:ab:
         fe:7c:e6:d2:38:22:58:8e:a8:8f:9e:71:f8:9b:01:25:37:7c:
         56:51:42:21:05:ad:95:ee:6a:fd:0a:3d:44:83:93:f1:0e:5c:
         20:36:b6:70:d7:9e:ba:40:fb:9d:ce:13:b5:02:96:d1:ca:8b:
         ab:ed:b7:34:5b:78:5e:91:a2:10:89:70:2e:78:5e:3e:e3:b8:
         ad:c0:53:4f:03:51:2f:02:52:0a:2f:c4:cb:24:c3:c3:7c:54:
         18:21:0d:41:f3:ef:3e:3d:f9:44:72:95:39:5d:60:65:f9:bf:
         15:e5:08:0e:8f:c7:63:67:a3:d8:ee:fb:1d:dd:4d:c7:4d:f5:
         c6:5b:63:1e:fc:14:91:e1:26:bc:d1:67:4e:fc:55:c7:ff:18:
         ba:06:7e:ef:1e:2b:99:7a:27:08:ca:87:e0:b3:34:d5:d5:ed:
         fb:d8:92:f9:1e:10:13:ec:83:b4:28:e4:bd:e9:58:60:df:46:
         fd:7e:e5:c3:08:a6:c5:ac:b6:40:e8:9c:70:32:d7:e1:8a:89:
         05:c7:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:59 2024 by rpki-client on console-fra.rpki-client.org