Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5faa00f8-41ee-3d63-ab7b-914d87a8b40e.roa
File:                     5faa00f8-41ee-3d63-ab7b-914d87a8b40e.roa (raw, json)
Hash identifier:          hD81g6sJyuPXFjANHeHjj1lnCkfMW7oUkDIMPNtVsGU=
Subject key identifier:   04:EA:49:C6:25:64:D5:4D:04:B1:1D:8D:96:F6:B0:17:1D:75:86:B6
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858451E459DC464D23B39E00762A0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5faa00f8-41ee-3d63-ab7b-914d87a8b40e.roa
Signing time:             Wed 06 Mar 2024 14:00:31 +0000
ROA not before:           Wed 06 Mar 2024 14:00:31 +0000
ROA not after:            Tue 04 Jun 2024 13:00:31 +0000
asID:                     63386
IP address blocks:        206.192.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:45:9d:c4:64:d2:3b:39:e0:07:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar  6 14:00:31 2024 GMT
            Not After : Jun  4 13:00:31 2024 GMT
        Subject: CN=1afbead5-1316-49e6-81d0-294b83a63b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:a8:3c:f4:44:78:19:89:9c:21:ca:fc:03:
                    7b:14:cb:96:87:ae:84:42:af:97:15:f8:39:33:56:
                    d4:4f:c0:59:f9:c7:db:06:5c:88:86:62:6b:48:a6:
                    d7:78:35:80:c9:ba:31:d4:89:15:96:62:9f:d0:8a:
                    9b:3a:de:35:48:ed:e0:fa:ba:aa:cf:8e:15:80:83:
                    23:15:eb:65:9c:f2:9a:9a:93:11:cc:27:23:fd:21:
                    d6:37:c8:90:66:1c:06:86:58:22:31:21:c7:96:c9:
                    67:2c:4e:b9:9a:1c:e9:d5:3b:bf:1f:08:6b:a0:6b:
                    8a:89:be:80:9b:81:91:8d:0b:91:18:95:d3:ec:67:
                    33:23:f5:6c:85:1c:40:4e:d0:4c:f4:2b:f2:76:d5:
                    8b:40:3e:30:af:3a:d6:b5:30:8c:dc:da:2d:7b:c7:
                    6f:ac:90:2d:91:3a:36:94:ee:ee:21:b4:3e:43:74:
                    3e:1a:44:54:00:69:38:11:cc:01:5d:5d:c4:0a:73:
                    8c:cc:78:98:1f:45:43:37:2c:bf:f3:2a:25:98:ea:
                    d8:39:70:7d:f4:51:fc:13:e0:4c:e8:3b:29:cf:e3:
                    c5:79:d5:97:df:ad:dc:79:4f:09:54:07:cf:ca:ae:
                    ab:dd:ea:ef:0f:54:2b:a1:7d:b4:a8:cc:9a:13:3c:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EA:49:C6:25:64:D5:4D:04:B1:1D:8D:96:F6:B0:17:1D:75:86:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5faa00f8-41ee-3d63-ab7b-914d87a8b40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:04:a4:76:7d:a0:bc:00:76:4c:48:7c:18:0a:c2:61:e9:
         4b:ec:50:d2:21:af:9b:38:fb:57:d8:95:9a:c7:bf:b0:b5:94:
         b2:cb:7b:93:af:39:8f:15:1c:fd:db:0d:ff:93:c3:05:5e:f3:
         30:76:fd:c1:e1:b8:e2:51:b1:24:dc:89:00:04:68:33:9a:40:
         3c:98:f8:0a:34:c8:c8:c5:9b:33:3d:6e:47:8e:ea:7f:3c:00:
         bc:33:5b:09:a3:e5:c3:7d:ed:cb:52:43:1e:0a:5b:e6:39:b1:
         de:c2:8f:c6:b0:d8:79:0b:12:19:da:7c:b3:52:39:62:ce:63:
         59:a9:50:01:d8:1d:0a:ed:eb:e1:91:8c:71:ed:f4:d4:7d:13:
         b8:74:3b:80:55:dd:a9:44:83:90:54:3b:0c:d2:1d:14:d2:16:
         31:41:a1:17:35:38:f2:8f:fc:46:65:78:5b:a2:d2:a0:c5:ea:
         44:8c:29:f8:b0:a4:7c:de:dc:63:0d:0b:25:9c:b2:f7:32:42:
         79:7e:55:aa:a8:b8:ac:58:05:e4:e9:dd:d2:e2:2c:09:6f:5f:
         c3:a6:c1:2f:d0:b3:eb:84:c4:3d:f1:e3:e5:a3:22:49:6c:c5:
         fa:26:6b:23:89:ca:e3:09:03:c9:17:37:c2:d6:51:b1:8c:8c:
         63:fc:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:49 2024 by rpki-client on console-fra.rpki-client.org