Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8/bc73cc78-b694-3d23-9957-0f748e7b5747.roa
File:                     bc73cc78-b694-3d23-9957-0f748e7b5747.roa (raw, json)
Hash identifier:          FJN3So8LH6CgoP+ponsQlS7S7nFtSOgVLGn5I5z3A6c=
Subject key identifier:   F9:7D:91:34:F6:45:4B:8B:A7:E1:89:07:5C:E4:A9:EE:2A:C8:5C:25
Certificate issuer:       /CN=3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8
Certificate serial:       010D0C9F432858477EC1024AAB8C08512FBBBA00
Authority key identifier: 18:D2:02:F3:AC:C9:40:7C:0A:51:2B:C5:43:81:A4:05:54:8A:94:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8/bc73cc78-b694-3d23-9957-0f748e7b5747.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     46994
IP address blocks:        206.225.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:02:4a:ab:8c:08:51:2f:bb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=284211a6-58a6-4038-98f7-85081dda3d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:1e:13:bb:af:82:e6:38:7c:b0:4c:57:7b:
                    82:c4:54:9a:bc:37:5b:d8:e1:96:82:01:06:17:c7:
                    7d:f8:22:10:67:43:d8:ca:51:9b:0a:75:a1:85:4c:
                    64:03:84:88:4b:75:5a:2e:56:80:e6:3b:0c:d6:27:
                    6d:ba:77:47:d8:2e:16:88:f3:f2:72:69:ec:db:61:
                    bd:ba:f6:a7:2d:3a:36:a7:83:6b:07:df:9e:e2:c0:
                    39:c8:df:57:0f:28:e4:63:2c:11:ad:d7:4d:5f:6e:
                    3f:1c:bf:95:29:ff:fc:85:15:5b:31:d1:66:8d:0f:
                    9c:39:14:14:e9:a8:0b:fd:9f:4a:7f:93:ad:29:3c:
                    ad:70:aa:3d:ce:bb:0d:60:d9:67:56:4b:ef:f7:07:
                    b0:60:d0:40:d1:a0:4f:61:cd:3c:b0:5c:e7:8d:78:
                    9d:aa:d1:91:03:0c:cb:fe:0d:58:74:8f:bc:3a:45:
                    8a:16:e5:ba:5d:4b:9c:f9:74:a3:04:6a:97:bb:c1:
                    27:92:77:64:44:47:43:8a:20:00:4e:b3:d0:03:0c:
                    00:a1:c8:68:39:b2:dd:c6:f1:55:f4:9d:bd:a1:48:
                    13:59:03:a3:9a:9a:a1:8e:dc:ab:01:1b:a4:3f:a7:
                    49:f6:14:d4:cc:7e:4f:e5:1c:de:8c:c6:27:12:96:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7D:91:34:F6:45:4B:8B:A7:E1:89:07:5C:E4:A9:EE:2A:C8:5C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8/bc73cc78-b694-3d23-9957-0f748e7b5747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8.crl

            X509v3 Authority Key Identifier:
                keyid:18:D2:02:F3:AC:C9:40:7C:0A:51:2B:C5:43:81:A4:05:54:8A:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3adec2dc-f0e6-4820-ae3e-33eb8eabc9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:65:84:0f:ea:86:f8:f6:34:79:e9:b1:2f:27:1b:d9:89:0e:
         4f:e8:3d:d8:03:d7:b6:1f:21:9b:40:25:f8:a6:b3:de:e7:94:
         01:93:0b:23:54:a5:11:9e:30:c0:65:48:3b:90:24:6c:65:ee:
         ee:9d:36:52:64:14:98:92:ac:32:30:1a:5c:63:cf:17:8a:5b:
         61:a3:07:25:39:a5:b8:ca:d6:f2:65:f6:0e:67:21:0c:52:f4:
         96:a3:c7:c0:04:04:ca:43:b4:59:36:0b:2a:27:31:81:25:d0:
         6a:cb:b3:dc:1e:98:8b:19:af:d8:9f:17:d4:90:f3:e7:67:02:
         89:35:52:c3:fc:a1:b7:67:1b:e1:7a:69:34:85:52:1e:79:b5:
         36:dc:a4:77:9a:a5:0e:33:75:67:ee:46:69:59:1c:1d:de:3e:
         96:dc:4d:8a:8e:58:80:39:14:f4:f3:54:4d:5a:af:29:56:9f:
         87:0f:c6:9e:60:8d:4f:3a:55:a8:dc:f5:85:7f:f9:c5:1c:f5:
         08:33:86:03:02:70:cb:bc:fd:85:f0:80:2c:63:ac:06:f3:a1:
         7c:6f:aa:7f:78:36:ab:b4:98:17:13:f7:22:66:74:2b:bc:87:
         f0:f0:4d:46:c5:74:4f:c0:74:e9:2e:17:c4:07:95:d2:08:2d:
         25:79:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org