Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa
File:                     0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa (raw, json)
Hash identifier:          YvJ/QnnNk/aYZDT6nWjQmz8wFGDSECvLS/qTAf/Zd7A=
Subject key identifier:   FF:AC:AE:FB:67:F9:79:95:33:B5:97:4C:2B:8D:58:0D:EB:C1:6D:88
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F43285845A15DFC105DEBFD05AC3B9D00
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     8987
IP address blocks:        206.204.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fc:10:5d:eb:fd:05:ac:3b:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=56e8875d-0061-4dff-9f50-c4f1fbafbc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:da:9b:75:ad:2b:db:1e:be:b3:97:e1:ea:
                    1e:90:3e:39:ac:70:da:6a:83:23:d7:94:f3:bb:29:
                    73:5a:25:4a:36:ab:8c:75:17:00:5e:54:4d:03:10:
                    f6:5c:74:ad:b0:10:ae:fd:e4:2a:b3:22:42:98:d8:
                    cd:42:fe:91:f6:6c:00:a2:db:bf:26:bc:9b:96:cf:
                    ee:fd:ed:4d:64:21:f8:cd:9b:8b:3a:d2:4e:03:2f:
                    bc:1a:82:50:23:6e:22:d6:ed:18:37:4a:f4:cf:bd:
                    85:20:40:1b:7e:38:d0:1c:44:ea:c8:fb:69:e1:70:
                    d5:63:0d:00:b3:6b:fe:2b:50:df:76:2f:db:f0:02:
                    26:fc:b3:63:0c:b2:1f:10:9f:ad:2b:4a:e6:bf:53:
                    76:50:e1:bf:59:5c:26:10:e2:ed:60:de:34:f2:ec:
                    e6:0c:bd:0c:68:36:83:f7:b2:db:e8:ed:b8:e8:24:
                    5e:92:4e:2e:af:32:2f:36:c1:c1:eb:17:3a:c2:b7:
                    4f:fd:72:41:b5:fa:7d:e8:81:c5:4c:9f:49:79:20:
                    7c:68:49:ce:03:9a:04:72:32:f2:61:41:5a:43:1c:
                    ca:39:aa:d4:63:3f:7f:35:5e:0f:5f:a2:a3:e0:4f:
                    8a:60:a2:b4:83:41:b7:20:3a:48:e0:84:e3:b9:18:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AC:AE:FB:67:F9:79:95:33:B5:97:4C:2B:8D:58:0D:EB:C1:6D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:ea:b5:7c:d6:e8:15:c8:24:fe:1f:8b:69:b8:cd:fe:84:
         17:fc:12:6c:11:8b:38:4d:ac:00:58:27:a2:d2:61:5b:7a:25:
         3a:b6:b8:9d:6b:eb:0a:6c:33:0c:53:22:57:9a:ba:14:48:44:
         fe:d8:72:1d:59:47:1c:52:5a:20:96:59:6b:6c:86:d0:69:cd:
         9d:61:e9:e0:d8:00:ff:8b:7b:a9:43:7c:2f:51:33:0a:62:02:
         50:77:9d:21:91:37:ce:bc:32:d3:5e:1d:5d:af:72:77:d7:8c:
         cd:b3:13:6c:58:fc:f1:70:be:63:91:bc:a9:26:bf:f2:d3:b2:
         a3:39:5a:0a:36:fc:b9:d4:00:53:00:91:c0:1c:7c:9d:f4:37:
         ef:0e:c0:7d:2b:11:db:69:6b:70:6f:d2:c1:b6:8f:8f:aa:13:
         db:6a:ad:76:35:a8:96:90:bd:15:aa:2d:8c:5b:75:d6:de:fd:
         0e:10:8f:e8:8e:80:7b:71:32:eb:fc:d1:5f:73:0a:b8:ef:0d:
         32:3a:0c:32:ca:ed:3f:07:89:2f:2d:57:d2:8c:0f:2f:78:3c:
         8f:30:6a:b6:34:62:ce:7b:10:31:49:54:fc:c8:a8:d0:ca:f5:
         89:66:03:90:cc:eb:c2:ac:95:6c:c3:01:78:e9:5d:e0:74:db:
         86:c9:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:23:43 2024 by rpki-client on console-fra.rpki-client.org