Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4afccf21-00bc-3fcd-8eea-012951aaef3e.roa
File:                     4afccf21-00bc-3fcd-8eea-012951aaef3e.roa (raw, json)
Hash identifier:          xjsfZFyyrtJbVRS7U0qj11vjC45fRGvkrip0NBaf/tU=
Subject key identifier:   DA:5C:67:F5:98:38:85:AB:57:E9:5C:98:C8:2F:32:83:37:8F:C5:F3
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858457A487DED5962DC4731EE2F00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4afccf21-00bc-3fcd-8eea-012951aaef3e.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     25899
IP address blocks:        216.110.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7d:ed:59:62:dc:47:31:ee:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=657b6d4a-6914-4352-99f2-3513af782eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:e1:d1:2b:4a:bb:51:94:6a:b4:19:e4:aa:
                    9c:55:e7:9e:4f:d9:9e:30:b7:ce:43:e3:bc:df:f5:
                    ec:84:ef:84:fe:57:06:ef:8f:66:32:46:fa:84:82:
                    cf:a2:2c:e4:74:0d:40:f9:3b:4d:94:a3:2c:0b:ee:
                    b2:b0:ac:c3:9e:2a:88:a2:80:6d:50:46:42:e9:0d:
                    1b:e0:dc:43:48:18:59:11:e2:a2:90:77:66:79:10:
                    c7:83:f1:f1:6f:cd:55:bb:66:b6:84:ed:59:76:cc:
                    34:08:22:09:2e:5b:7e:6e:be:26:08:27:2f:b8:80:
                    77:ad:ef:48:a6:99:1c:5a:46:a1:00:5d:5b:35:2b:
                    28:79:2a:ae:e3:0f:b7:2c:d2:02:43:2c:0f:c4:38:
                    9e:4f:3c:be:5f:93:33:c1:a8:ab:66:3c:e7:9d:de:
                    a7:72:52:56:c3:da:e7:4f:1b:28:13:ce:eb:c3:54:
                    4c:65:69:05:06:97:95:be:4c:68:96:5f:8a:7d:85:
                    fd:b2:32:f8:52:12:35:e2:8d:5d:d2:6f:2a:91:5c:
                    b5:66:47:aa:0a:82:33:56:ba:f0:d2:45:b3:5f:f2:
                    c8:61:64:4e:b0:78:d8:0c:55:0b:97:cb:60:ac:8d:
                    0f:44:fa:bc:5e:54:c0:e9:17:1a:2c:e6:2a:ec:ce:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:67:F5:98:38:85:AB:57:E9:5C:98:C8:2F:32:83:37:8F:C5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4afccf21-00bc-3fcd-8eea-012951aaef3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:fb:90:e8:8b:f5:bb:f9:72:8e:c2:30:a5:a2:12:7d:0a:
         e5:d5:46:9d:4f:bb:13:bf:4a:35:dd:9c:df:aa:92:94:63:33:
         ac:ff:40:db:33:98:13:12:af:b7:95:0e:ab:e8:70:17:39:e2:
         12:86:73:d8:f2:0a:fb:35:d6:8c:e2:ac:03:fe:6f:70:42:ba:
         a5:0f:02:60:ae:16:03:e7:cb:b7:5a:d7:53:8f:22:b6:cf:ec:
         45:ea:0f:fe:cb:13:d0:b4:d9:0e:68:b9:4f:ca:d1:6c:c9:29:
         69:42:26:52:4d:8c:fd:c2:ab:06:e4:38:94:95:f1:6f:67:17:
         be:5f:43:bd:16:70:e4:0c:83:08:b8:76:27:f9:58:db:46:33:
         99:c5:30:91:29:1b:68:0c:4b:53:51:92:2b:69:c0:5c:eb:79:
         cd:36:e3:b1:e1:a6:e1:ac:e3:81:bd:e0:46:a2:2d:3a:dc:de:
         db:c6:2d:a5:9f:38:81:81:ba:55:20:8a:89:b8:7c:69:c7:19:
         39:10:49:ea:a0:07:9d:5f:27:a4:7e:fc:27:ae:5b:68:35:69:
         5f:e2:a2:95:b9:5c:5a:e9:63:bf:b2:f3:44:c8:e6:6a:2e:8c:
         0b:49:31:5d:7e:a3:13:75:b3:bc:56:bf:b0:91:60:50:81:94:
         40:7a:de:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:30:51 2024 by rpki-client on console-ams.rpki-client.org