Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa
File:                     28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa (raw, json)
Hash identifier:          S9sHm2gy5xlGgWSNCtvtFWZUPz0sHEwaLjPd3DaON2c=
Subject key identifier:   38:07:69:50:46:6A:16:4C:FC:44:77:E3:F3:04:1A:5D:50:3C:1A:A1
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C321699910BC26BD4AE080
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa
Signing time:             Mon 11 Nov 2024 18:47:43 +0000
ROA not before:           Mon 11 Nov 2024 18:47:43 +0000
ROA not after:            Sun 09 Feb 2025 18:47:43 +0000
asID:                     376
IP address blocks:        206.167.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c3:21:69:99:10:bc:26:bd:4a:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:47:43 2024 GMT
            Not After : Feb  9 18:47:43 2025 GMT
        Subject: CN=7233c5a6-9cfa-4ab6-8406-348ea223ea73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:47:f9:ed:ac:b9:72:a0:c3:b1:fe:75:b1:
                    9e:b7:c6:81:4e:4e:fa:02:26:75:fd:9b:99:e2:9f:
                    c3:95:3e:4b:ef:9a:b5:30:24:be:47:ba:60:a3:45:
                    90:a6:64:c5:41:ab:e7:ea:ce:ce:4b:52:09:9e:62:
                    8d:4c:09:26:55:2b:e6:a1:be:ac:ec:04:6b:2e:6f:
                    77:ac:34:7d:57:94:ab:a6:4c:c8:c5:f4:dd:aa:e9:
                    18:23:f7:80:aa:f3:39:0c:83:ae:0b:03:c9:c1:23:
                    77:5a:42:08:3a:f7:06:0f:09:d4:65:b1:97:36:82:
                    4a:28:97:7a:3e:b5:48:d1:86:49:b4:61:e5:17:5d:
                    27:a9:0a:f9:74:66:ba:86:e0:32:81:e5:6b:78:47:
                    72:e8:6a:5d:3c:29:15:cd:61:45:89:73:e6:ba:88:
                    11:7f:bf:cd:61:ec:b5:e5:04:25:4b:8d:65:98:32:
                    39:a9:4b:da:bd:d6:6d:fb:0b:fa:c5:b4:c0:68:09:
                    bd:f7:55:30:16:0e:58:3e:b3:fb:bf:e0:43:64:a8:
                    46:22:ce:f0:5f:02:0e:08:13:17:08:91:4b:1e:b3:
                    19:1e:bc:ff:ee:af:2e:59:5c:37:8a:53:aa:11:44:
                    ff:eb:4d:10:b7:7b:0a:0c:58:2d:6d:40:eb:39:8b:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:69:50:46:6A:16:4C:FC:44:77:E3:F3:04:1A:5D:50:3C:1A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8f:1e:7b:4d:99:00:38:61:a1:a5:c5:e1:8c:63:23:5d:23:
         58:02:4d:4e:87:f7:2b:cf:98:4a:18:65:4d:e4:81:51:34:59:
         2b:e7:9c:e8:61:ae:5f:06:07:90:03:d1:a4:f9:8a:9c:f6:0c:
         04:d4:a9:fc:03:3f:6a:92:c9:be:26:96:61:76:0d:47:57:af:
         a5:cf:c3:69:ff:f5:b7:ff:95:7d:1f:7c:da:a3:5c:4c:b3:2a:
         92:a3:ee:c7:b7:99:59:5c:71:a9:1b:8c:ec:77:b9:62:ae:64:
         d5:a0:59:52:83:13:c4:bd:e9:4c:52:69:33:d7:0c:62:24:d0:
         e4:8b:24:51:85:15:f7:cc:07:5d:c1:48:1e:db:aa:f8:3b:24:
         e7:26:91:5a:b5:8b:5d:5a:eb:d9:0a:2c:44:f3:41:7b:ed:55:
         5a:03:35:47:c4:19:33:29:88:95:bd:7f:3f:b1:44:22:b4:24:
         ae:da:ae:36:8b:05:09:bc:16:b7:5d:7d:2b:ac:4c:4e:95:82:
         bb:5f:0b:08:82:7d:c5:b3:e9:dd:93:b7:f7:ca:1d:0b:b9:14:
         2d:ab:8f:ba:17:75:6f:16:d0:a5:b6:29:95:08:5c:eb:3d:c6:
         ca:c2:55:54:4d:23:84:59:c4:49:f3:fb:2a:12:d2:a2:1b:5d:
         1f:1c:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:31 2024 by rpki-client on console-fra.rpki-client.org