Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa
File:                     d28faf09-4fd1-3fda-ac12-cd817516eb65.roa (raw, json)
Hash identifier:          UGgW3ourseEnwJBvIgaOojRiwnaqFXkigNZuWga7vSQ=
Subject key identifier:   F1:3C:9A:A5:BC:8E:00:65:5C:36:19:63:5C:BD:01:A1:0F:2F:43:98
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858476E010B89B53FE29EC683BB00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     393740
IP address blocks:        206.180.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:0b:89:b5:3f:e2:9e:c6:83:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=a135dfb5-d4be-4b2b-89bf-cea3c22f24e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:92:ea:74:cb:01:2e:49:93:7c:c6:b9:09:
                    d1:f1:79:24:6c:3c:99:70:16:22:19:a5:a2:9f:03:
                    01:54:a5:a3:89:e6:49:c0:19:96:2d:65:1d:cd:8c:
                    58:ea:33:eb:5c:5b:1e:08:f6:fa:24:f5:86:03:61:
                    02:3e:b6:16:de:9f:2e:ab:e7:9a:07:a5:cf:97:57:
                    50:75:71:e0:4c:92:59:7d:ae:0c:8f:fa:70:2e:53:
                    57:11:59:47:71:50:39:73:1c:af:dd:b6:3e:c3:12:
                    e7:2b:db:25:81:3f:5b:cc:05:dd:aa:86:a3:8a:88:
                    61:4e:1b:66:ef:aa:13:60:a2:ad:f0:3d:2f:2b:cd:
                    87:75:5e:15:e8:6b:a4:0a:50:c6:7b:9c:1b:e7:90:
                    2c:da:40:1b:25:76:ea:c5:20:41:9c:c6:75:0d:1b:
                    32:5f:6d:ae:b9:8d:56:7b:8e:52:31:f6:3c:07:9b:
                    82:35:b5:86:a4:a9:17:0f:74:ad:a8:b7:59:d2:0e:
                    9d:98:d8:e7:7a:96:3b:ff:14:53:53:2c:64:f1:ed:
                    1b:25:d4:bc:e0:b4:48:ba:34:43:47:32:49:40:a6:
                    39:c4:db:ce:ea:e6:13:07:16:d9:36:14:32:fa:d7:
                    cd:fb:ee:0f:e8:26:47:0c:0c:18:5d:cd:4d:1d:5f:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3C:9A:A5:BC:8E:00:65:5C:36:19:63:5C:BD:01:A1:0F:2F:43:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d1:cf:12:a8:7a:e6:4f:f4:ad:2d:a5:bc:77:5c:42:a3:66:
         93:b4:b2:ce:2d:01:1b:36:1e:da:cf:16:0f:42:c0:3e:c7:33:
         6b:d3:ec:7b:c5:de:47:36:b3:13:89:88:00:b2:49:8a:5f:79:
         58:db:b2:77:67:f3:0e:fe:0f:1a:9e:22:a7:0e:21:0f:35:aa:
         3d:2c:aa:7c:07:9c:d2:54:1b:68:d4:af:4a:c3:87:d4:6e:e3:
         57:7d:d5:5c:47:77:f7:03:29:78:24:90:bc:df:0d:e6:04:c6:
         05:c6:1e:65:e6:fc:20:19:b1:9d:b4:96:99:19:b9:56:e6:64:
         3d:82:2c:32:f1:ed:ef:d7:a6:48:ba:3c:d2:81:6a:fe:1a:00:
         26:fd:94:94:d2:51:b4:d7:a4:51:ef:30:e2:3b:91:58:2f:f4:
         88:55:71:e3:ea:25:35:f5:a2:2f:e4:29:1b:50:23:ad:cf:b8:
         2c:28:91:ed:cf:57:64:c0:b5:6f:4c:92:a8:bd:7e:a4:ed:8b:
         ef:61:59:9c:81:2b:9b:a9:14:32:46:88:21:74:8b:76:70:74:
         ec:35:ff:51:73:4d:4a:1f:87:28:fe:fe:15:27:14:e9:76:91:
         7d:60:f0:31:ee:d8:fd:de:58:86:37:e7:46:ad:17:3e:3d:be:
         76:97:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:07 2024 by rpki-client on console-ams.rpki-client.org