Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa
File:                     1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa (raw, json)
Hash identifier:          mhmJv5N/JFn12pieVtSqO9Le+odGjBxqalcItrBojB8=
Subject key identifier:   12:6D:80:65:3E:49:1A:75:FF:7B:C3:C0:4B:AC:16:E9:14:E1:44:74
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858473A5B95ABE4E54881E87BCC80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     25899
IP address blocks:        206.192.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:95:ab:e4:e5:48:81:e8:7b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=3fab2e33-66a3-4894-bada-da9b2f10fc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:43:46:2c:b7:bb:c0:77:ef:84:bd:e5:02:
                    70:95:e9:c5:cb:4e:46:b2:d0:51:65:46:6f:ec:3f:
                    5b:e9:da:4b:e9:86:6a:fa:97:37:83:4c:db:e1:b3:
                    d6:a0:06:8e:4c:c7:64:f9:8d:6e:03:fb:b4:77:93:
                    26:db:0a:fe:91:cf:73:29:3d:df:dd:87:42:ea:4a:
                    0b:51:cc:2e:c7:dd:42:ea:c9:3b:14:49:74:19:4f:
                    a6:bb:e1:04:59:a6:5d:9c:4c:72:1b:eb:e7:6c:9d:
                    c6:61:11:68:68:bf:5e:ae:13:69:66:de:00:df:71:
                    9e:19:2c:9c:bf:a2:6e:4b:d4:49:75:92:4b:8d:eb:
                    48:82:69:2f:39:44:17:be:cc:fd:ba:92:03:13:f1:
                    ff:4b:fa:32:31:0e:04:90:a0:3e:b6:7d:8e:70:66:
                    8b:b7:20:7e:43:1b:fc:a8:3e:4e:37:4b:1a:b4:c0:
                    7e:14:ea:ac:e2:29:d2:f3:57:2b:21:4b:0a:12:6a:
                    dd:24:14:86:94:fa:4b:a5:49:16:cf:96:af:20:81:
                    d6:5d:5e:9f:09:de:fd:10:22:a0:db:36:08:2e:f5:
                    51:23:76:72:e8:fc:c7:2a:0b:dd:6d:57:36:b5:88:
                    70:e7:d5:e6:16:2e:3f:b2:fe:c2:ae:64:b0:03:ae:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6D:80:65:3E:49:1A:75:FF:7B:C3:C0:4B:AC:16:E9:14:E1:44:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:48:93:f5:51:14:3e:86:4d:c1:10:7b:66:b0:38:62:43:32:
         e1:68:8e:e7:76:3b:55:74:2b:1e:9c:05:50:ac:a0:e2:df:ff:
         b7:7f:d2:01:48:c4:2c:86:a6:76:86:46:fb:23:cb:d8:37:ad:
         2d:74:b4:ae:77:dc:66:b9:3b:cd:38:0a:05:18:c6:21:93:97:
         eb:13:92:06:28:b2:9b:22:af:82:9e:28:49:1e:9b:f5:26:24:
         58:98:cf:4c:56:8b:41:3a:cc:8e:6c:59:2f:5c:d9:5d:2d:4b:
         4b:56:53:f5:14:aa:ab:01:88:d8:60:5e:d8:22:d8:77:34:46:
         44:af:35:08:ec:d8:09:fd:a5:e3:1f:2e:7b:41:da:35:ab:6d:
         ec:3d:6b:db:5b:c7:0e:c1:c2:22:1a:f4:be:24:a0:da:11:77:
         c3:45:14:67:aa:e3:02:78:0a:03:07:b2:e4:8f:9e:d8:e2:49:
         42:ac:95:1c:b5:09:08:b8:09:77:f2:1f:04:e0:92:17:91:c0:
         34:da:79:a6:a6:79:05:15:54:a9:81:88:b7:d7:b9:4d:41:c3:
         54:a1:fe:b8:d2:87:a1:bb:95:de:cc:84:3d:54:c1:45:1b:e1:
         e0:ba:58:db:cc:3c:d8:87:49:f6:a6:82:d7:7f:49:ad:e1:7b:
         26:8f:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:14 2024 by rpki-client on console-ams.rpki-client.org