Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
File:                     62dd0302-3085-3f70-8edd-449ecdbc6149.roa (raw, json)
Hash identifier:          pUqDoq6t2tpo8GA0qyAwgeJXfOEyGOqjp4UWXGgxzHc=
Subject key identifier:   10:B5:E0:3F:5C:21:A3:6B:62:38:01:58:4B:DD:B1:F1:1A:05:CB:8B
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F43285847213B252AA7C9DF440977C36C
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     33211
IP address blocks:        206.41.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:25:2a:a7:c9:df:44:09:77:c3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=6856936f-c354-465f-901d-c70f78e9be71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:a9:b1:ad:2c:de:5f:de:f7:65:b0:1a:60:
                    09:a7:33:3f:ec:10:29:90:05:1d:f2:60:17:dc:c3:
                    66:ef:d3:fd:88:e5:46:7b:10:46:e1:f4:5b:ec:2f:
                    c9:cb:ba:47:22:22:f8:3f:d6:1e:07:7f:dc:4a:d5:
                    e2:fe:7e:90:47:6e:82:50:b0:82:bd:5b:89:70:50:
                    8e:10:49:a7:c7:70:28:94:38:40:7f:1d:77:44:7c:
                    07:ec:d0:77:e0:35:81:5c:b5:b9:73:4f:c4:7c:3f:
                    d1:7e:91:0c:2b:d0:be:c4:e4:42:b4:35:71:fb:1a:
                    c3:e1:7c:f0:c4:91:87:d1:a6:c3:55:7a:ea:3f:eb:
                    aa:fe:c7:22:0f:4e:84:86:05:67:ed:b3:9b:61:36:
                    ce:aa:90:36:ec:5b:90:18:6c:42:eb:dd:fa:6a:14:
                    24:4c:96:29:e2:94:38:c9:b9:0a:06:15:9c:9d:4d:
                    e0:a3:a5:ae:55:e5:68:18:56:14:20:75:23:f3:a5:
                    29:df:45:b3:23:13:47:ed:92:8a:fe:0f:db:d2:e9:
                    19:cf:0b:52:45:11:24:24:42:39:2c:5c:2b:30:26:
                    49:65:8f:9a:35:a7:ee:8d:c0:40:bf:b9:1a:2c:e9:
                    1f:30:01:f3:a7:9d:4c:cb:45:4c:0d:ec:43:33:39:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B5:E0:3F:5C:21:A3:6B:62:38:01:58:4B:DD:B1:F1:1A:05:CB:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:77:68:cb:ef:60:32:13:8e:f4:3c:57:45:f0:f8:14:4e:d9:
         f4:a4:c6:89:19:fb:ad:56:10:3b:8c:28:ea:26:16:2f:2d:1b:
         11:bf:a8:70:0a:6a:a1:fa:e9:36:16:1c:5b:61:0d:1a:ea:cc:
         a7:fd:ae:98:7d:95:30:48:5b:e8:7e:75:6a:46:29:94:8c:28:
         eb:98:dc:db:65:a7:1f:33:64:3d:37:a0:47:73:e1:b8:61:e4:
         18:be:56:df:37:7e:92:02:3e:8f:87:51:09:f3:be:7d:13:a7:
         b9:46:d4:4f:ee:4b:05:2a:eb:e8:e6:21:53:a6:e1:ea:47:86:
         05:c9:2c:9c:49:18:da:ee:5b:4e:45:f7:a9:05:6e:84:99:85:
         01:44:31:0d:9c:0d:a0:f8:51:fa:66:90:52:ce:8f:6b:5a:ba:
         0c:6c:ce:00:51:84:8e:93:16:70:18:97:6c:d7:72:35:8f:ac:
         fe:8a:45:7a:ac:67:3a:1e:3a:2e:0e:b7:29:06:25:b0:df:89:
         21:da:87:88:cf:cc:a9:fb:aa:1b:ce:bf:3f:d3:97:93:a9:c8:
         5a:5c:c6:2a:25:1a:2c:3d:f8:50:a8:d0:e6:a4:4d:7d:42:4a:
         23:2c:dc:a2:c2:09:21:fd:5e:2c:74:c7:c9:99:9e:b0:32:f0:
         0d:fd:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:51 2024 by rpki-client on console-ams.rpki-client.org