Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6bb3cbae-990d-32c7-a237-c3be9e183144.roa
File:                     6bb3cbae-990d-32c7-a237-c3be9e183144.roa (raw, json)
Hash identifier:          2p2kqDos1IF7tNAqVaMpVOVWndkm1IkG6Qw4YolspVk=
Subject key identifier:   E4:09:EF:80:BE:F2:E3:44:82:32:30:5E:97:1C:59:BA:29:32:50:06
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C1C47A31AAF224C477C480
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6bb3cbae-990d-32c7-a237-c3be9e183144.roa
Signing time:             Mon 11 Nov 2024 18:44:58 +0000
ROA not before:           Mon 11 Nov 2024 18:44:58 +0000
ROA not after:            Sun 09 Feb 2025 18:44:58 +0000
asID:                     376
IP address blocks:        206.167.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c1:c4:7a:31:aa:f2:24:c4:77:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:44:58 2024 GMT
            Not After : Feb  9 18:44:58 2025 GMT
        Subject: CN=0662350d-ef3d-465b-b469-08887093a80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:02:d2:52:b9:0f:0e:8e:86:c8:c8:16:62:
                    96:12:94:f0:a7:2f:5a:bb:9d:59:4a:9a:f5:62:30:
                    c7:fb:67:52:4b:74:ff:f3:6f:dd:0f:c3:ab:e5:3b:
                    a3:d9:e8:d6:56:21:90:1c:b9:07:71:31:b5:05:a8:
                    57:78:72:d2:b1:9d:fd:07:d3:b8:47:47:16:9a:00:
                    95:69:1c:3d:72:10:31:fc:8d:16:7e:5c:1a:91:ef:
                    93:e0:88:6d:0d:54:fc:65:e2:41:2a:fe:27:2c:8d:
                    98:8d:32:6e:ff:46:f9:ac:e0:54:c7:24:49:df:fe:
                    81:29:fe:d7:90:0d:67:05:60:f0:68:39:b1:4e:78:
                    b4:34:c8:d0:af:4e:58:07:8b:67:65:4b:76:fa:91:
                    ba:68:41:cf:7f:b0:bf:b8:49:19:f9:8a:86:79:1d:
                    3b:da:ce:1b:7a:e1:34:cf:03:7b:07:b0:fb:fd:0a:
                    85:10:f8:93:fc:4a:f7:03:fc:e1:90:5e:ca:38:06:
                    34:8c:0c:fe:1f:c5:b0:4f:5d:03:8b:bc:a8:2d:40:
                    6a:f1:9c:8a:f2:f7:7e:f5:8c:a8:6c:59:88:c7:60:
                    14:f5:63:c4:f5:5c:17:03:b2:67:5c:ac:a6:24:4b:
                    1f:bc:3f:b8:74:f3:7a:36:a8:79:9d:10:5b:0a:bb:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:EF:80:BE:F2:E3:44:82:32:30:5E:97:1C:59:BA:29:32:50:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6bb3cbae-990d-32c7-a237-c3be9e183144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:2d:43:bd:dd:74:be:9a:bc:b4:da:3c:55:b3:91:79:3b:
         2e:e4:79:b2:71:c1:86:f6:c8:d4:26:19:60:92:2d:41:b0:8a:
         0c:24:1d:24:cd:7b:43:68:b6:1e:f2:5b:c4:08:1c:72:73:3e:
         22:1e:6a:6c:f1:13:8d:47:c1:f4:0a:83:88:fa:19:3a:06:53:
         a3:ee:22:a0:0b:6a:f4:24:c1:ed:18:d6:64:60:98:26:4c:26:
         9b:40:50:bd:35:51:aa:da:5c:03:cc:70:05:77:e3:0b:3e:f7:
         71:a5:a6:9b:a5:64:6c:3c:f4:b8:7f:f4:26:6e:7b:b0:cc:46:
         6a:27:2b:cc:da:bd:3c:f1:d4:d1:26:21:3d:3a:6b:36:97:32:
         23:84:b6:98:22:f4:bf:6f:0b:d2:a9:01:29:88:a7:97:f7:b8:
         71:0a:75:6f:ea:86:20:c6:78:4b:1d:85:d8:a3:7c:5f:ae:75:
         00:47:c0:c5:32:b5:ec:7a:6c:39:fa:95:cf:2e:3c:6b:c9:3d:
         02:5e:35:93:01:bc:4f:aa:7c:55:bb:84:d8:fe:88:18:f1:e2:
         3a:67:95:a8:6b:16:29:26:78:85:bf:fa:6a:27:2d:3c:e9:b3:
         c4:46:91:15:ad:79:60:6d:d7:d8:68:c3:a6:f1:2c:bc:b2:ab:
         d9:51:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:31 2024 by rpki-client on console-fra.rpki-client.org