Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/4484c7ba-6c82-3302-b1ed-f3ffa9fd750a.roa
File:                     4484c7ba-6c82-3302-b1ed-f3ffa9fd750a.roa (raw, json)
Hash identifier:          llFiTBWPzg5YTgQ8ZBwxkq1NHQO66dG3UaB+rjUWmKE=
Subject key identifier:   A2:DA:58:9A:41:6D:6E:B7:38:98:FD:2B:15:14:73:D9:1C:FC:2F:4D
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F432858455CF82798F31BB7E7CDAA2F20
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/4484c7ba-6c82-3302-b1ed-f3ffa9fd750a.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     32277
IP address blocks:        206.186.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:27:98:f3:1b:b7:e7:cd:aa:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=f8652d1c-97d4-4338-954c-3f410aa13f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:65:f6:12:87:b7:0d:e1:10:3d:87:3a:96:
                    23:5e:f1:7f:8a:7d:4f:6a:6d:b7:de:30:be:66:e9:
                    ac:ac:63:79:2e:52:c2:c7:fb:3c:3c:87:3a:48:8e:
                    40:61:36:0b:df:02:94:e3:bc:ed:49:dd:ae:75:85:
                    d9:19:2d:dd:c4:3f:3a:d2:75:63:2b:ec:ca:93:b4:
                    cb:df:ab:8d:b7:10:74:77:14:95:50:5e:ad:29:ec:
                    1f:b3:cf:ef:c4:63:64:79:c8:38:d2:eb:bc:17:5f:
                    5a:82:72:50:4b:08:e7:9d:08:fa:8c:e0:ca:17:fa:
                    03:55:d6:b2:f9:e8:9d:fd:a2:5f:b3:9f:1f:4c:0e:
                    3c:99:08:ea:33:59:d9:ed:57:53:2d:48:71:e8:71:
                    2e:56:91:22:ba:19:c4:84:cf:a6:a3:5b:e7:9e:1d:
                    df:8e:1b:b8:f8:73:e6:b0:1e:d5:5a:ec:0d:51:1f:
                    4c:af:91:13:46:69:c1:a4:4d:ba:0a:d0:ee:38:6d:
                    a6:3b:02:28:d9:17:0f:e9:73:84:3d:f1:d1:e4:31:
                    47:3b:92:fb:53:a2:6f:5d:0f:0e:3e:dd:63:e2:62:
                    d2:cc:08:eb:73:4f:e4:27:8a:95:83:be:45:69:0f:
                    9e:02:00:a6:a1:d5:fd:cf:b1:91:a3:e1:87:52:09:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DA:58:9A:41:6D:6E:B7:38:98:FD:2B:15:14:73:D9:1C:FC:2F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/4484c7ba-6c82-3302-b1ed-f3ffa9fd750a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.186.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:86:c9:0e:2a:05:98:c1:47:8d:20:9e:ab:65:df:38:11:3e:
         6a:b0:cb:0f:db:7c:03:06:a2:1d:b1:00:36:cd:2b:59:29:6e:
         6a:ca:eb:af:e1:9d:5b:7c:fb:70:d4:3c:9b:9e:fa:df:d8:ec:
         e3:17:cb:52:ed:7f:25:81:44:a2:fd:a7:fc:5e:9a:d8:20:2e:
         62:62:0e:40:2c:23:98:7d:0b:07:b8:c7:b5:8e:c2:c9:3b:74:
         27:bd:99:81:cd:56:06:2b:0d:7f:bc:ba:dd:3e:b8:f4:cc:ec:
         4f:64:a8:58:28:5e:01:75:42:98:ec:35:c9:06:1c:11:6e:e6:
         b1:f9:25:b4:0d:2d:03:91:5a:6d:ed:55:76:cf:c6:30:00:85:
         23:3f:73:3f:8b:83:de:66:65:e4:4d:a1:9f:4c:45:74:af:41:
         de:bc:d5:5c:5b:c2:bf:4c:8b:30:39:5b:5e:40:69:1e:4a:fb:
         55:c4:e4:55:b1:a5:fb:8f:6a:0e:16:ae:e9:3a:9c:94:cb:e3:
         ea:d8:fb:a6:7b:cd:91:ba:5c:6d:e5:ce:ea:d6:cf:b3:fb:f9:
         3c:78:22:f9:43:6f:3e:07:9c:6c:9d:26:e1:58:e8:00:77:72:
         35:83:69:b3:cb:47:76:07:27:c6:bc:d3:f9:d0:64:78:ef:74:
         82:a7:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:45 2024 by rpki-client on console-fra.rpki-client.org