Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa
File:                     d3d52428-3366-3940-ba48-6c79fec227e0.roa (raw, json)
Hash identifier:          I7ZH8CStjfeaSc5qwDww5EFXm3KelR/ihYUPkmDm0z8=
Subject key identifier:   47:AC:C7:A7:92:24:29:66:FC:4B:CE:04:59:5C:24:85:99:7C:80:13
Certificate issuer:       /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e
Certificate serial:       010D0C9F43285847845672E73BF9306DBBA05780
Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     11736
IP address blocks:        206.209.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:72:e7:3b:f9:30:6d:bb:a0:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=fec08784-a868-4ce5-9e59-fd5ebcdbc340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:47:e9:ee:7f:94:56:43:d5:6f:82:b8:cc:1e:
                    e1:56:b9:a3:43:73:c5:39:4a:f2:ba:90:5c:47:b5:
                    3d:d5:66:c7:ee:6a:30:bf:d8:47:04:3b:b1:7d:e8:
                    28:df:4f:a2:4e:37:eb:54:62:7b:89:5b:b8:ab:8f:
                    83:cc:8c:94:52:0c:86:2c:f1:96:bd:78:6b:e8:be:
                    8f:3f:a6:f0:23:2e:75:6d:c5:db:91:05:22:2b:33:
                    fd:fd:7a:6b:53:b8:55:38:88:7e:fb:55:97:83:31:
                    c1:1a:8d:4c:ff:19:7f:68:29:40:f5:4c:f6:c2:d6:
                    87:7b:48:0f:8a:97:d5:55:ce:28:3b:de:72:80:1f:
                    5c:8f:eb:7a:06:2e:a7:f7:5b:b3:49:30:01:4a:51:
                    09:22:32:48:d5:62:42:9d:bb:30:80:8e:46:4f:53:
                    a7:cc:d7:8b:83:69:d6:bb:18:a8:1b:32:74:c8:21:
                    93:6e:a7:46:0f:c0:8a:26:a7:3d:fd:03:a6:29:3e:
                    f4:a6:86:05:de:1b:86:0a:0e:f9:98:0b:05:5a:26:
                    66:ff:7a:16:5f:ec:f1:ae:97:b6:d7:89:5a:21:c2:
                    76:2e:fb:b7:a6:bd:36:27:36:46:18:98:2e:c3:4a:
                    8e:fb:cf:2f:b3:33:64:97:c4:fa:c4:85:4c:20:ce:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:C7:A7:92:24:29:66:FC:4B:CE:04:59:5C:24:85:99:7C:80:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl

            X509v3 Authority Key Identifier:
                keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:ee:32:a0:a5:4b:fe:5d:19:8a:dc:45:2d:a7:b0:4f:e3:
         ae:a2:a9:9d:9b:3d:f1:b0:8c:ad:b8:02:3b:1f:00:64:29:2f:
         3a:49:97:c4:93:b5:c0:93:ee:24:7e:09:dc:92:d7:ea:e3:83:
         ab:0a:4c:4a:5a:2d:cf:ea:66:e8:aa:8f:67:95:c2:6b:05:73:
         7d:65:3f:20:5a:b6:bd:42:c3:21:49:a5:fe:2d:13:8a:3c:03:
         13:9a:90:6c:bd:26:ed:0c:7a:f6:61:5e:c9:3d:64:1e:dd:07:
         3f:e0:dd:af:1f:82:63:9d:6c:38:56:a0:4d:02:78:69:74:5a:
         19:d5:f7:ec:17:ed:cb:7f:38:71:11:c0:df:e7:f7:65:28:15:
         4c:9e:a1:a6:22:b3:e9:cf:89:9f:cc:d0:20:50:f9:75:34:6c:
         a7:b4:53:bb:92:a8:81:5c:0e:a9:01:e8:33:59:4d:c6:fd:1c:
         a5:24:a5:a0:cd:c6:d8:80:f9:0f:37:63:16:b4:87:70:24:af:
         7a:71:b6:2d:71:6e:64:77:0a:26:64:a3:a1:e7:3a:d3:0e:ed:
         85:58:d0:46:3d:d4:89:d9:38:98:34:ad:d6:f5:a3:bf:4a:fc:
         83:01:8d:13:75:e7:04:48:a5:78:01:07:0e:74:23:70:39:94:
         89:bb:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:39 2024 by rpki-client on console-fra.rpki-client.org