Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/28454528-1552-3135-8dac-9517c884a41f.roa
File:                     28454528-1552-3135-8dac-9517c884a41f.roa (raw, json)
Hash identifier:          sq16pHGf9po/jR6g1X46kZSbiHWSoIxkSihTkZwESN0=
Subject key identifier:   45:71:2B:74:8F:9B:82:6C:77:35:36:7B:E1:27:E8:9E:7B:5A:E0:51
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847E78F6799D604A2DD08E61380
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/28454528-1552-3135-8dac-9517c884a41f.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     25961
IP address blocks:        206.192.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:67:99:d6:04:a2:dd:08:e6:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=eb2f8e74-10a2-47ab-9049-b050abfcda66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:c0:8b:37:12:56:fd:51:17:9a:15:78:88:
                    8f:4a:02:99:98:d4:4c:28:7c:f3:39:c3:ea:ed:3a:
                    87:64:d0:3d:f2:40:24:43:d1:02:0d:cc:51:8d:78:
                    9e:34:9f:a9:1b:72:b2:dd:fa:af:30:a3:e1:2d:33:
                    23:a7:5b:58:c0:ae:9d:bc:dd:4c:13:f9:f2:34:3d:
                    1f:04:0c:60:d4:ce:7f:fc:f6:19:83:82:bf:53:13:
                    b8:de:d8:5b:21:a5:d9:15:df:be:40:a5:70:3b:02:
                    ce:54:c8:5b:18:21:7a:e8:c9:95:86:9c:09:58:cf:
                    0e:b6:9e:d2:f1:b9:d7:aa:46:61:23:2b:70:4c:6c:
                    de:63:20:99:b7:0a:f2:ca:bf:73:72:b5:f0:b4:fa:
                    d7:c6:29:d8:df:8c:85:dc:8f:46:b1:a1:eb:3c:2e:
                    81:5f:c4:90:e6:cf:d2:bc:81:49:3f:ce:80:51:9b:
                    00:40:ec:91:4e:a8:0d:0d:2e:2e:77:3b:3b:3e:9d:
                    13:f7:97:f0:6e:21:94:8d:6c:9d:cd:13:37:69:44:
                    d8:1b:ef:66:27:c2:48:57:79:a7:80:31:03:4e:11:
                    91:90:92:9c:2b:14:35:33:73:3a:3c:c4:ba:a6:2d:
                    c6:e7:f9:f8:29:ad:30:8b:0b:b4:01:42:f1:02:d3:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:2B:74:8F:9B:82:6C:77:35:36:7B:E1:27:E8:9E:7B:5A:E0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/28454528-1552-3135-8dac-9517c884a41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:12:eb:1b:99:7f:c4:dc:24:38:e7:eb:0e:35:41:e2:a8:b1:
         b2:01:b8:62:ff:03:1a:24:d9:99:e8:0d:c8:ec:b2:00:30:30:
         cc:25:90:ba:ca:0a:0b:cd:aa:5d:b8:68:89:4e:14:a3:58:bd:
         d2:6a:1d:04:2f:40:54:79:03:5f:c1:e4:f9:30:15:49:ab:d5:
         3c:00:5b:e2:48:da:84:7a:34:93:47:05:db:45:54:a0:d1:5a:
         3f:f6:5e:2d:9f:60:63:37:86:cd:8c:c4:19:f5:52:01:34:d8:
         e5:7d:e0:1f:2d:9e:61:d3:2f:22:d5:81:5e:56:28:e4:58:1c:
         3f:3e:c1:a9:f2:2c:48:34:7b:03:9f:4f:7d:1f:d7:65:74:8f:
         79:ae:ef:60:70:3a:99:06:5f:3e:87:50:fd:92:34:19:d8:89:
         ad:03:b6:78:40:a3:ee:d8:ae:be:cb:ec:a9:88:e9:2c:be:3c:
         0d:05:a7:27:c3:a9:04:77:f4:f4:10:ed:c2:76:24:f3:86:cc:
         53:00:e1:a7:31:bf:dd:4a:00:db:c5:7a:82:29:3c:f8:bb:95:
         d3:eb:bd:b0:cf:f0:24:b6:0d:62:fc:d3:f0:21:44:cc:fa:8b:
         6a:5f:82:22:f9:98:53:c3:15:d9:74:db:d0:78:23:54:3a:c1:
         fa:b1:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:02 2024 by rpki-client on console-fra.rpki-client.org