Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa
File:                     37ae591a-6de6-3583-890e-cdf5a88acce1.roa (raw, json)
Hash identifier:          9K7ZtKbyR1wrDC3xJWLfs9fkU8o48uyOGvSv9oHTO6g=
Subject key identifier:   89:53:14:E4:70:EA:3B:B5:A6:BC:42:2F:38:05:3B:D1:C7:5F:0D:47
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F43285847AE36A5806BFACFB131F8E100
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        206.41.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:a5:80:6b:fa:cf:b1:31:f8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=752ed420-c97e-45b4-809c-f8c250301aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:95:47:cc:a5:e6:36:d0:4d:84:fa:d8:e1:
                    63:e7:6c:0b:19:05:76:96:bf:d3:28:98:70:48:fa:
                    27:31:dc:c0:ae:30:ca:6a:e9:89:39:d8:95:8b:69:
                    da:22:eb:3a:f6:8c:78:0b:8b:85:3c:e7:9c:06:19:
                    5c:3f:33:36:c9:4f:0d:13:8f:81:f0:88:ed:41:18:
                    88:c4:b8:97:9c:e5:a8:38:4f:8f:bd:de:27:d4:2c:
                    42:51:06:3a:b5:35:e3:7b:e6:07:25:be:bd:3a:94:
                    63:ef:14:4b:a2:31:3d:0e:84:20:d9:44:e9:45:0c:
                    c5:de:ba:51:4e:d7:ac:7d:0e:87:44:5c:06:f2:11:
                    1f:5a:8c:23:7a:1e:12:6e:a9:6a:df:f9:0c:07:3d:
                    2e:15:91:f4:ef:40:5e:79:91:13:96:77:88:ac:ee:
                    ad:67:d7:fd:98:fa:b4:7b:21:9f:65:e4:3e:ab:ad:
                    38:36:77:d2:ae:09:2b:7c:03:ae:ed:2b:98:8f:12:
                    2e:6a:d7:9a:95:2b:24:fe:02:16:a0:32:98:b7:4e:
                    b0:23:a6:8a:14:77:97:93:1e:c5:78:2e:61:88:0a:
                    ac:98:ff:36:4f:d9:3d:40:70:5b:43:69:38:a7:8a:
                    81:1c:0e:7b:7f:ee:3d:b0:1f:0d:9a:49:dd:0a:44:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:53:14:E4:70:EA:3B:B5:A6:BC:42:2F:38:05:3B:D1:C7:5F:0D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b9:09:f4:61:95:e7:c0:5f:2c:9e:5e:31:45:50:90:4c:91:
         c1:c7:69:18:c4:39:da:12:fe:9d:c3:1c:8e:b1:f3:00:f9:5d:
         2d:09:d7:9d:8a:87:50:76:e1:75:1a:68:72:28:11:d3:d1:d5:
         f7:a1:f6:00:38:89:60:5e:bb:b5:59:f5:b6:c1:6b:e9:6b:53:
         da:de:b0:fd:8d:74:ba:c6:4d:43:4d:e1:97:88:c8:e9:bf:2c:
         05:03:61:d9:25:05:df:f1:d1:e4:cf:13:c4:f6:a0:77:f2:cd:
         65:94:21:89:3c:a3:67:98:37:12:79:c6:52:53:9e:b0:c0:34:
         b9:e8:a1:6c:a8:1b:a9:b9:46:ca:0c:2f:8e:a8:b0:5e:ff:14:
         be:47:54:aa:cc:66:db:4d:bf:b1:4d:ce:18:5c:75:c5:45:0b:
         3a:6f:9b:83:63:a9:41:05:b6:34:57:95:85:da:0e:7d:b7:ff:
         ca:0b:46:e8:82:fa:8c:6e:70:04:ec:e3:11:d0:78:4e:c4:ef:
         f9:59:b4:8c:5e:ef:79:41:53:20:a1:08:99:f9:19:0d:43:85:
         73:77:6e:d5:38:be:48:7a:9f:be:44:94:84:4b:6f:86:b5:a7:
         50:62:51:73:a7:4a:6a:09:41:89:0c:05:2a:26:ff:28:58:23:
         b5:fe:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org