Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa
File:                     37ae591a-6de6-3583-890e-cdf5a88acce1.roa (raw, json)
Hash identifier:          qWIEG2zoym603dk+yRyDCy2RR4JUcS8FJhhvhEfMblM=
Subject key identifier:   60:C2:E4:79:E8:5D:6F:B1:3D:AC:59:3F:58:A1:D8:47:AA:1D:64:34
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F43285846CE3488A6E40F9359C9B85A20
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa
Signing time:             Thu 08 Aug 2024 07:15:23 +0000
ROA not before:           Thu 08 Aug 2024 07:15:23 +0000
ROA not after:            Wed 06 Nov 2024 08:15:23 +0000
asID:                     14618
IP address blocks:        206.41.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ce:34:88:a6:e4:0f:93:59:c9:b8:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Aug  8 07:15:23 2024 GMT
            Not After : Nov  6 08:15:23 2024 GMT
        Subject: CN=090cc88d-4ecb-4f0b-add7-7fcf0373d9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:03:f7:f8:18:32:93:57:dd:78:f9:48:97:
                    80:92:cb:79:94:a9:a8:e9:9f:71:ab:b4:ec:b2:51:
                    7d:92:ca:26:ed:cb:15:17:ae:45:e3:16:a7:a0:6c:
                    5c:8f:ba:0e:f3:7b:75:84:92:72:2f:24:24:db:b2:
                    fd:ac:0d:41:e3:20:6a:f4:af:c8:40:74:cd:79:28:
                    80:34:62:7e:2a:9a:4d:ab:50:78:5d:3c:d6:ea:75:
                    d7:9e:63:23:a2:28:f8:90:0a:6f:90:ee:a9:d9:46:
                    31:7e:f8:29:44:e0:6d:23:a9:eb:22:1a:c4:a0:db:
                    9d:1b:6d:70:35:6a:78:19:95:d1:e5:b0:e2:d4:d2:
                    52:5e:b9:c9:49:bc:7b:6a:a9:58:1d:85:16:6d:a3:
                    3e:7a:85:ea:8e:55:73:ba:b1:0d:06:f7:8a:1b:69:
                    76:2c:81:4d:ed:0a:0a:fc:4a:9e:a8:75:d7:8d:5d:
                    1f:91:b8:d5:f9:c3:db:fa:bd:0b:77:39:2f:1c:0e:
                    5b:dc:89:f8:e0:29:63:78:61:db:17:76:32:6c:20:
                    e6:2c:b1:45:01:52:39:c0:12:ee:80:ab:24:91:e7:
                    82:11:d6:aa:27:b4:4b:aa:93:84:ab:0c:8d:91:eb:
                    9b:e6:2e:12:4f:75:e8:35:c4:61:3d:c2:7d:a2:e8:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:E4:79:E8:5D:6F:B1:3D:AC:59:3F:58:A1:D8:47:AA:1D:64:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:88:e7:7b:c1:51:8b:f0:ba:dc:3b:ac:97:e2:c9:d0:24:
         46:3b:05:55:48:1a:9c:b8:63:d1:06:f0:7c:88:24:1d:86:36:
         1b:e7:7d:e4:4f:03:20:2e:21:c9:1c:af:b1:aa:2b:f0:0e:79:
         c5:12:96:0c:e0:b2:59:ae:5b:85:81:12:0f:bd:1a:29:84:c0:
         3d:b5:4d:f6:b7:09:ce:f4:3a:a2:2e:55:f9:14:dd:2a:22:ef:
         4f:02:c4:16:38:94:1d:58:ca:08:7b:d0:06:57:49:6b:46:b1:
         03:63:05:4c:bb:3a:a6:85:bd:45:92:dd:d2:c4:22:aa:f8:31:
         bc:d7:f9:bf:8c:72:a8:7c:85:49:36:30:5b:25:b0:f9:77:11:
         82:97:60:06:53:5e:84:65:58:10:91:1a:b0:25:bd:76:81:55:
         dd:aa:59:2d:dc:a7:da:25:95:cd:77:85:10:c3:3a:d5:55:9b:
         97:b1:b2:1f:1c:d1:5a:a3:2b:94:2c:da:12:9c:6e:ee:e2:66:
         11:48:fb:9f:e4:7b:d0:b0:6c:95:ba:ab:5d:0b:27:41:1f:2f:
         36:85:fa:69:92:72:28:1d:d1:c3:c7:88:f2:e7:8b:58:48:65:
         49:51:08:ad:3f:23:58:cc:6c:f9:6b:d2:c5:6f:e6:53:8a:a6:
         ab:07:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:20:57 2024 by rpki-client on console-fra.rpki-client.org