Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa
File:                     69cdef79-d280-3419-8f19-f2ec48165ccc.roa (raw, json)
Hash identifier:          3cmWzN3v9vGPTb5xGNCR0sti9iZi0SrsRI5Wo82FcQY=
Subject key identifier:   15:8B:05:21:A9:02:EE:D3:0F:F2:2E:0D:4E:20:F5:5A:18:00:EC:51
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584757AB7479E5EEFAB84454E400
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     33211
IP address blocks:        206.41.112.0/20 maxlen: 20
                          206.41.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:74:79:e5:ee:fa:b8:44:54:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=a494527f-d78f-42b8-b61d-81a4449bb4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:02:62:bd:31:a5:10:e3:cf:e0:93:c3:97:
                    d8:ef:44:af:19:6b:33:c7:c6:ac:f4:90:0a:b2:70:
                    c4:08:7d:47:a3:2f:a6:0b:5e:10:a3:8d:b5:24:81:
                    b1:31:7f:5d:5f:10:7b:7c:cd:ee:35:3d:ab:1c:b3:
                    a1:d7:7b:b3:42:f9:2d:f6:1c:c3:b7:d0:bd:d1:4c:
                    41:a8:48:d8:b4:c1:cc:6d:a1:72:f9:79:44:00:ee:
                    5f:70:fe:71:c1:e0:f8:99:a4:7a:4c:8b:69:67:c1:
                    3f:fe:22:68:e1:cc:3d:95:4c:fd:b1:1c:85:14:65:
                    00:d2:99:f9:93:34:b2:8a:4b:c6:14:95:25:89:b7:
                    0a:bc:31:2e:e0:89:34:a6:5f:a2:62:ba:12:bf:cf:
                    56:24:d8:89:34:fe:dc:50:ee:80:36:d6:64:94:2e:
                    2d:94:46:d6:27:75:4c:5a:20:e0:7c:d9:04:86:74:
                    8f:1c:11:f6:83:25:c7:d7:c3:6c:c1:d8:af:21:d3:
                    dc:9a:40:cf:39:4c:04:c6:af:5c:11:80:81:52:d1:
                    78:ca:b3:b4:3a:4e:ec:29:ce:8a:1f:56:5d:20:cd:
                    87:a1:dc:01:24:71:fd:f4:e3:10:ec:58:5f:89:d1:
                    a9:95:d3:2d:be:90:ef:28:08:9b:d2:cd:52:b2:2c:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:05:21:A9:02:EE:D3:0F:F2:2E:0D:4E:20:F5:5A:18:00:EC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:dd:ae:ea:2f:fd:62:a9:95:6f:33:79:84:c2:19:3f:b9:ad:
         78:ab:ba:68:eb:f0:0a:61:90:5f:0d:b1:23:6a:a6:b2:98:82:
         ab:47:dd:82:bd:6c:fe:0e:de:7d:7c:5f:2d:60:f0:2e:4f:24:
         ab:17:8b:79:60:35:df:df:0c:79:91:20:d6:f3:8e:07:f3:0b:
         cd:68:93:c0:80:09:6c:08:29:5a:da:91:d1:32:b7:f7:fb:c9:
         4c:b4:e0:10:a6:30:34:de:48:bc:4e:08:54:9e:4d:e0:8e:50:
         bd:60:92:6d:90:87:4e:c5:d2:37:a9:04:08:c9:8d:81:19:79:
         46:03:c7:1d:6d:7c:34:cc:21:2a:f8:bb:8e:5d:59:eb:d4:73:
         5b:0f:b6:ea:46:2f:69:e5:87:76:19:b3:2a:07:e0:2b:b2:55:
         dd:94:77:c2:4c:2d:3e:a9:77:63:27:1b:9d:10:45:70:21:fc:
         40:c9:29:f5:90:ff:33:5c:b6:89:14:d0:5b:a6:cb:9a:0f:76:
         bc:1f:f7:eb:b8:74:2c:fb:c9:40:c1:be:e9:1d:6b:b0:5f:e0:
         8e:98:d8:99:97:3a:89:b4:0c:4a:db:cb:a3:f4:b4:e7:c3:a0:
         e5:fb:c1:a6:13:ca:6c:05:62:31:d7:46:89:a5:b8:1e:46:cc:
         1b:65:90:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org