Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa
File:                     b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa (raw, json)
Hash identifier:          qibMSybNSutioeseuSJKFF49RgySTPKKROYMQN/QIH8=
Subject key identifier:   1B:CA:28:7A:DD:B6:38:4F:F3:03:4A:D3:4A:A1:0F:10:30:5C:67:B2
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F432858471D0B1513B4FFAFC5CFDDA440
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     32277
IP address blocks:        206.186.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:15:13:b4:ff:af:c5:cf:dd:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=70e7e6bc-9c45-461e-bd51-edda7af44477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:41:4a:38:28:ae:7b:c8:62:40:01:0f:4e:
                    07:0b:9c:06:21:3c:2a:bc:5c:80:b0:1b:07:2f:a3:
                    37:7f:a9:fb:54:a5:e0:e2:5c:46:27:3f:bf:3a:34:
                    97:1a:c0:50:9f:a1:9a:0b:5e:48:64:52:40:12:e7:
                    01:5f:2b:d3:e9:e5:d8:a3:a0:fe:bb:f6:09:2c:67:
                    c8:6e:66:ac:35:96:fc:ba:c4:7e:7b:5f:b8:e4:72:
                    dc:f1:02:a5:14:0b:1b:83:34:9f:9c:b0:67:7d:e1:
                    d3:f4:47:3e:6e:2d:8c:85:fc:39:d5:0b:ef:1c:9a:
                    e3:16:3d:0f:d4:e2:78:e5:7f:51:ae:b5:49:7b:44:
                    32:6b:78:e9:3e:6a:17:ed:da:0e:51:b3:49:fa:82:
                    6f:d5:24:b3:b6:58:e0:09:0a:a1:4b:92:ee:72:70:
                    e1:e5:d0:5e:ac:ca:ee:06:bd:cb:8a:51:f2:94:7c:
                    3e:6b:10:e3:6a:da:cf:25:59:e2:22:08:75:76:a2:
                    80:68:cd:a2:a3:78:ed:34:dc:46:97:b7:a9:07:f1:
                    43:83:7d:8b:fa:bc:0c:0d:c8:ca:14:73:70:ff:b6:
                    32:4d:c2:c7:c1:16:dc:99:08:b4:c6:71:65:05:1e:
                    7d:85:dd:6c:52:e9:4e:02:db:95:fe:74:fa:47:a1:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:28:7A:DD:B6:38:4F:F3:03:4A:D3:4A:A1:0F:10:30:5C:67:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.186.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:93:0d:fc:c9:95:c8:d3:39:c9:aa:8b:28:3f:45:03:ff:f0:
         b4:2a:b7:3d:87:4f:48:91:92:2f:92:d6:09:5c:aa:2c:ec:91:
         87:82:8b:79:11:f5:d7:da:c3:13:db:81:ba:b3:61:7d:74:a2:
         8f:db:a0:12:6c:ec:63:4a:68:fd:4c:ff:7d:99:65:b3:dc:43:
         9c:c4:1d:b6:f3:94:a2:92:bb:f7:8c:6f:12:63:5a:c8:4f:7e:
         3c:31:d2:e6:bf:55:0f:62:6e:81:ef:e6:80:1a:04:30:09:8b:
         3a:64:b6:cc:ef:b6:e7:41:1d:c7:5e:ac:ac:bf:e7:10:52:4a:
         3b:26:35:06:44:19:47:50:1b:2e:26:ef:5f:f7:9b:a7:a0:bc:
         5d:ea:8f:71:f8:5c:d8:99:8e:94:ca:eb:e1:10:06:09:93:0a:
         34:fb:d7:b7:29:9f:6a:85:45:64:94:bc:63:5b:ef:c2:22:4c:
         4d:22:2e:19:e8:4a:e2:0d:02:7b:1e:d0:7e:a3:4d:ce:90:d7:
         43:17:37:36:04:67:ee:3b:c2:15:04:f0:fb:72:14:65:92:ad:
         29:5f:81:3a:14:59:c4:0d:3c:b7:39:da:e6:1a:48:44:2c:d0:
         83:b1:81:44:76:7b:d3:70:49:c3:47:58:b7:68:33:0f:02:ec:
         95:15:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org