Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa
File:                     c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa (raw, json)
Hash identifier:          dGpaV5zjtvWRiPopdXCqGXV+I3k6vdGEA/pONSbNVhE=
Subject key identifier:   5F:7C:D6:38:02:28:4B:A5:BE:C5:78:37:D1:01:35:7D:C5:2D:A0:69
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285847F2502B6D6ABB222F770CB100
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa
Signing time:             Wed 20 Nov 2024 22:27:06 +0000
ROA not before:           Wed 20 Nov 2024 22:27:06 +0000
ROA not after:            Tue 18 Feb 2025 22:27:06 +0000
asID:                     11090
IP address blocks:        206.55.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:50:2b:6d:6a:bb:22:2f:77:0c:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Nov 20 22:27:06 2024 GMT
            Not After : Feb 18 22:27:06 2025 GMT
        Subject: CN=6a6edf69-b395-459e-b45e-4eff67b1fbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:3f:af:0f:43:f1:cc:24:80:06:12:68:d3:
                    c1:6a:eb:7d:6d:fc:70:6b:a8:59:aa:a4:51:3b:81:
                    5c:db:35:36:87:d2:40:00:3b:ac:34:97:b0:71:c4:
                    38:e4:93:d5:f4:66:d0:a3:39:20:81:a7:69:b5:d8:
                    3b:97:4d:48:56:7e:bb:3c:77:f7:90:d3:46:68:f6:
                    bf:e8:27:3b:9e:e5:ba:72:69:a4:9e:bc:c9:4d:30:
                    ec:67:d5:0d:1c:40:35:46:0a:e4:93:c1:68:1b:15:
                    32:92:51:f6:08:26:33:53:44:80:21:02:a2:20:9d:
                    33:7c:f4:56:67:00:03:b4:df:3d:49:8d:4a:01:a6:
                    a0:dd:b5:e8:69:d9:5b:bf:cc:90:c6:61:8a:30:6b:
                    49:1c:19:ae:04:7f:6d:bf:5e:38:81:46:61:8a:b5:
                    50:4a:10:7c:e1:2f:30:a6:b9:ae:f2:52:66:76:6a:
                    22:95:91:9a:ff:65:ca:b2:81:6b:4d:37:5d:56:3a:
                    fe:a3:19:a5:e0:f2:3c:a2:31:d8:02:e2:c3:e0:81:
                    95:8d:6c:ab:de:e4:ad:2a:ed:4a:00:1c:21:f1:9a:
                    02:71:bb:6a:20:f3:4a:7d:c9:e7:f8:00:a4:37:1c:
                    b8:40:cb:32:fb:b3:dd:e4:42:5c:15:e3:a3:c2:8c:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:D6:38:02:28:4B:A5:BE:C5:78:37:D1:01:35:7D:C5:2D:A0:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:aa:a6:7d:65:a8:6a:01:af:8b:97:f1:3d:76:8c:07:11:
         e0:fa:37:b1:58:15:3b:e1:c0:45:aa:9f:a0:00:e5:fb:59:1f:
         cd:75:a1:4d:c1:63:bc:8e:dd:df:f2:80:02:dc:04:6e:c2:98:
         e7:01:7e:20:7e:09:2b:b4:e6:ec:d1:ac:bb:6c:d5:40:c6:fc:
         de:c9:44:2d:ed:c6:8c:68:4d:df:35:b2:bd:57:0f:04:12:b9:
         95:d7:8a:bb:4f:8f:41:5f:ea:28:d7:76:7b:b7:21:1d:b5:10:
         dd:d3:5b:b0:43:7c:50:a7:e0:3b:ba:a1:29:d1:06:9f:b5:6b:
         11:61:4f:d7:7e:25:4d:5d:a7:3f:08:3c:0b:e4:4e:74:4c:9f:
         1a:28:6f:e9:3b:4e:c6:82:40:f5:c1:e8:66:e2:19:16:80:3a:
         ad:c7:93:d1:82:ed:9f:9f:8e:2a:a3:7e:92:cd:28:1c:13:e1:
         20:e3:cd:2f:a4:d7:35:32:38:10:bc:bf:e3:03:a4:63:f3:4c:
         9a:3d:c9:0e:9f:6c:03:f2:7e:26:9b:c7:81:6d:e3:2c:a2:4e:
         ea:24:ba:14:2d:c1:35:8c:9a:01:71:80:b4:3b:44:e0:7b:9d:
         e8:4c:01:5c:51:17:85:f6:9e:43:ca:87:04:ca:0b:e3:5d:9d:
         0e:f0:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org