Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
File:                     38911b59-4da5-3259-be8a-e5ae2c28a66b.roa (raw, json)
Hash identifier:          So++YzbxjxkUJvpguPDJmNdkzYTvnu4ifG6wJ71HUS4=
Subject key identifier:   5B:9A:DF:0D:3E:B1:6B:8B:8E:A9:08:BE:3A:35:75:BC:A0:8D:18:84
Certificate issuer:       /CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf
Certificate serial:       010D0C9F43285847A5D6AFFE592936447FE04380
Authority key identifier: 13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     400510
IP address blocks:        206.202.0.0/18 maxlen: 24
                          2602:fe17::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:af:fe:59:29:36:44:7f:e0:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=c77a307a-2739-4cb8-93e5-0bd62756e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:7e:1d:cd:9f:58:90:2d:5e:c1:a5:96:6a:
                    13:68:56:ef:de:ac:ef:78:c8:5d:e7:2f:27:ef:e1:
                    fa:d1:8b:c3:ac:51:53:0b:0c:b1:92:ca:fe:e7:c1:
                    8d:a2:17:90:2b:a8:8e:5e:a3:3e:ed:9c:37:51:4e:
                    db:51:a5:a9:67:0b:13:a3:42:1f:78:9e:78:6a:a9:
                    8b:38:b0:bf:29:90:4c:72:f0:fc:4d:c0:9e:06:bb:
                    29:48:61:d2:b5:fb:5a:25:84:81:3b:48:b2:72:b0:
                    3b:89:16:13:ba:ab:2e:bb:be:1c:5f:6e:4b:64:a4:
                    df:03:56:e6:e1:be:2c:bb:5f:82:9d:98:32:b5:84:
                    f1:1b:37:71:7f:64:dd:e7:f0:fa:53:68:21:c8:4b:
                    b7:67:04:f9:d4:6d:34:2a:02:75:77:c0:9e:84:9b:
                    67:c4:64:06:df:e7:fd:3e:45:03:73:db:90:d2:c6:
                    40:ba:8a:fe:aa:73:74:52:2b:63:7e:c9:e9:7a:44:
                    a0:70:96:dc:a0:82:3b:71:3f:7b:a6:ea:98:cf:65:
                    20:49:06:c1:35:07:c9:0c:ba:ab:9e:5d:72:ad:a7:
                    5e:bc:72:a7:4c:c6:7a:05:04:52:31:9c:e1:1f:5b:
                    cd:61:84:f8:58:53:03:3a:a6:fd:b8:cc:66:c7:05:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:DF:0D:3E:B1:6B:8B:8E:A9:08:BE:3A:35:75:BC:A0:8D:18:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl

            X509v3 Authority Key Identifier:
                keyid:13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.202.0.0/18
                IPv6:
                  2602:fe17::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:8b:fa:dd:45:59:c0:ab:ab:87:db:ef:f3:1f:48:72:10:
         89:8b:60:19:11:51:9f:e7:86:49:2a:c0:39:09:f6:ca:2e:3d:
         5c:13:d6:2c:3c:3f:33:f1:63:53:08:d2:6c:0e:bb:79:0c:33:
         06:35:10:f1:e7:f5:d0:61:96:97:cc:50:c6:f2:47:b9:7b:05:
         58:4a:ff:a1:4a:26:ff:68:91:0a:81:0e:cf:08:43:ff:55:a7:
         e4:2f:9b:d5:b7:f4:fe:68:52:9e:f0:03:cc:5e:b0:7d:16:77:
         d6:17:8e:0e:92:5e:a7:4f:5d:f1:e2:b9:b7:73:db:ca:87:82:
         d6:33:88:d0:21:40:7d:91:89:2f:d5:f1:83:c5:24:da:99:c1:
         37:61:48:a6:88:7b:eb:96:9c:19:ea:70:4a:74:3f:f5:57:fd:
         07:91:fc:d7:05:80:fa:6c:35:bc:c3:19:10:78:c2:e3:c1:45:
         a0:1c:4d:d3:d5:26:2b:71:35:b3:5a:50:76:7a:5f:3f:24:7a:
         8d:1b:bb:61:10:e0:9c:db:38:fb:b6:c8:23:cd:b5:b3:a3:3e:
         de:3d:b1:ac:7b:f2:25:0b:64:54:20:19:ec:b3:78:a8:a8:a9:
         df:32:fb:e8:d9:b7:90:23:55:58:60:61:03:6b:b1:64:3b:5c:
         8f:ca:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:17 2024 by rpki-client on console-ams.rpki-client.org