Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
File:                     243ae32a-0e53-30df-b63c-05db2f38f611.roa (raw, json)
Hash identifier:          mF9WlT/Bjl2mmI/ol6U+eqn7JbF45N6ttP6UTjiFlf0=
Subject key identifier:   79:E8:47:AC:D3:09:CF:75:B5:7E:EC:0F:58:4A:D7:29:F5:CA:8F:49
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F4328584754E0C81165BB36D7A1068400
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     64213
IP address blocks:        206.53.142.0/24 maxlen: 24
                          206.83.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:c8:11:65:bb:36:d7:a1:06:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=38580a79-f31b-45d2-940f-792d69a1b832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:91:10:54:32:b7:63:44:15:60:31:68:6b:
                    97:1e:0c:dc:e3:eb:de:e3:d5:0a:b2:cb:14:62:45:
                    38:68:fb:9e:69:ec:77:a7:ac:c7:78:c5:11:f6:41:
                    27:c9:a9:af:85:ad:51:d3:e9:70:aa:2c:57:7a:50:
                    a2:2e:2e:ed:15:01:53:7a:5e:62:50:e2:1c:a9:a3:
                    0c:9a:78:98:34:5e:ba:f3:4b:b0:2f:e4:6e:2f:80:
                    06:54:05:06:03:41:7c:c7:0f:b3:89:0b:10:4b:9c:
                    2d:a6:9d:65:25:4e:2a:f8:c6:b7:50:c3:0f:03:ce:
                    37:16:d9:ff:fc:46:03:d2:23:15:92:ba:93:68:4f:
                    ea:9c:3b:9b:f7:15:85:25:e5:12:ea:2b:7c:0e:5f:
                    32:7b:17:08:b3:4a:36:da:b3:af:29:99:b3:9a:61:
                    16:dc:cf:c1:73:77:d2:e4:0f:30:59:b3:3c:38:33:
                    0c:e8:51:18:a7:7c:1e:4b:d3:ea:cf:0e:f5:fe:53:
                    b4:39:31:ce:7a:33:11:ea:d5:8d:5a:40:92:c1:95:
                    0e:91:e5:33:f7:b4:81:52:29:10:fe:cd:f8:24:c4:
                    24:8e:4e:e3:b0:67:51:f7:78:60:0c:2f:ea:7a:bf:
                    7d:b3:ba:31:92:29:16:81:27:73:af:4f:03:cd:26:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:47:AC:D3:09:CF:75:B5:7E:EC:0F:58:4A:D7:29:F5:CA:8F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.142.0/24
                  206.83.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:2d:64:4d:0f:6e:c7:a2:ef:5b:0f:ca:98:34:77:54:e0:
         7e:ee:e5:33:bd:9a:12:31:e6:1e:33:b4:8a:e1:41:12:ac:38:
         06:c0:c0:91:aa:a9:86:a0:9f:69:b5:63:3b:47:50:a2:d2:e0:
         b4:cf:b6:ce:b9:7b:2d:cb:08:01:24:c5:99:74:11:a0:47:51:
         37:f0:09:64:42:11:0f:d4:c8:93:cf:3d:56:f0:07:b3:36:bb:
         e0:f6:27:8a:84:4b:bd:40:c1:60:5e:5a:cd:0f:c7:b8:bf:e9:
         e0:da:d9:8b:4b:4d:f5:82:26:fc:c1:e8:f6:67:39:78:e8:ae:
         3a:75:9c:a7:ff:ba:9b:ee:d4:5e:71:67:1f:77:bf:6a:2a:80:
         60:47:40:5c:6d:1d:0a:25:c4:1f:4c:ca:dd:4b:6e:07:0f:4c:
         53:fd:4c:95:48:72:61:c8:6b:ba:dd:af:e4:42:74:21:f2:68:
         53:9a:f1:4c:cd:35:6a:c5:43:e7:97:22:f8:81:64:6a:e5:45:
         91:85:82:63:cc:ad:d7:42:79:02:78:1e:18:48:de:fd:f9:03:
         56:9d:0e:d3:80:3d:06:97:38:f9:99:56:12:5e:ce:8e:41:7e:
         07:f4:cd:65:55:cf:4f:bd:94:ba:6e:fd:46:6c:b8:20:c9:d6:
         0b:97:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:19 2024 by rpki-client on console-ams.rpki-client.org