Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa
File:                     1de8ce08-3710-361b-8c99-fd785aea8a0c.roa (raw, json)
Hash identifier:          kDJiPS6zHR0olgDe/171MOl7iA6nU5xHRTvPD49c90c=
Subject key identifier:   FB:CF:33:1D:78:9A:09:AB:C8:64:DB:C3:05:FD:55:BA:12:27:59:4C
Certificate issuer:       /CN=d7937b76-1401-4a19-86ef-2351fd0198a6
Certificate serial:       010D0C9F432858477660FC747DA10A88575F6980
Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     11736
IP address blocks:        206.176.0.0/20 maxlen: 24
                          206.176.57.0/24 maxlen: 24
                          206.176.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:fc:74:7d:a1:0a:88:57:5f:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=2659c717-c15a-49e6-b419-4ae4dc26a8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:d5:d0:4d:b1:64:64:bd:d8:93:a4:94:4d:
                    b9:10:a5:e9:61:1c:a6:b2:20:31:51:af:32:29:cc:
                    eb:92:e9:44:4e:8c:0b:0a:63:dc:82:c9:95:c2:e5:
                    b2:20:f6:1c:98:ba:2c:ca:24:15:ad:80:1b:cb:e5:
                    f8:50:80:2d:54:bc:f9:64:70:f8:f1:37:cf:3e:ae:
                    73:0d:75:a1:45:48:ea:53:b8:f6:29:4a:7e:80:82:
                    1f:f7:a3:dc:df:c6:37:6d:e0:d6:cb:72:ad:bd:08:
                    89:eb:d0:8f:d3:3f:a8:f7:3c:9c:4c:cf:26:06:9f:
                    9a:11:36:ef:ca:32:15:90:c3:ee:6a:57:10:70:6d:
                    a1:aa:6f:5a:8d:2c:60:73:ec:ae:9d:87:1d:8a:c9:
                    58:f4:63:d6:e9:47:ee:29:35:af:5f:36:80:22:c7:
                    1c:88:7f:4d:92:d6:0e:3d:39:06:de:5a:92:65:53:
                    e7:7c:8b:c3:19:b5:62:20:1e:a0:4b:b4:ce:99:b8:
                    21:47:d3:ff:0c:5a:2e:dc:3a:9a:a0:b8:87:09:3e:
                    61:3c:e4:68:3b:6d:5a:ad:ca:94:c1:01:26:2b:1b:
                    e7:6f:c3:37:68:f2:ec:40:0e:b9:64:50:21:12:ef:
                    de:86:f5:2e:e5:10:10:9f:ff:f6:c2:4d:f2:07:78:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:33:1D:78:9A:09:AB:C8:64:DB:C3:05:FD:55:BA:12:27:59:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.176.0.0/20
                  206.176.57.0-206.176.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:88:0e:88:e0:5a:e1:19:87:04:80:f6:e1:5f:2d:0d:4e:
         fc:1a:32:c7:4a:34:01:87:dc:99:68:19:1b:a7:ec:e0:2b:60:
         7a:83:35:c8:55:72:78:bc:03:c5:84:4a:46:1a:ab:9c:38:09:
         1a:71:07:bf:dd:84:5f:ea:3f:21:58:98:04:0e:2b:01:5f:3b:
         00:ce:e2:7d:27:b7:f0:50:01:63:8b:9c:11:7e:8f:72:7e:5c:
         0c:da:00:62:fe:09:e6:82:4c:49:b3:5e:71:7e:d5:89:71:72:
         ab:3f:e4:1d:3b:4e:62:b7:0c:4d:4b:05:1e:19:ec:05:d8:a0:
         2b:4b:d0:ea:67:63:c9:56:82:73:5a:00:f9:fe:d7:b5:48:d6:
         d1:81:ca:fa:f3:76:b5:07:5c:bb:6d:ef:4f:1a:9a:a7:5a:51:
         5e:f4:4c:7d:21:c4:bc:57:55:c6:fc:c9:35:3f:a4:50:dc:43:
         db:1d:71:51:15:20:8e:77:4f:6a:77:67:2a:0f:27:35:c5:5b:
         92:62:2f:34:24:76:10:2f:99:36:9e:58:af:3b:2c:cc:28:0c:
         0b:c4:43:15:10:04:29:13:54:9a:a4:f4:43:1f:58:15:c9:9c:
         df:c7:af:17:01:11:d6:9c:86:36:f5:84:3e:63:27:22:5b:47:
         f6:81:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org