Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa
File:                     67dc5438-0a89-3344-b83b-3be5abdb835d.roa (raw, json)
Hash identifier:          jpPlfSpFBaKQ5rInmt+5oKHRnHYaT8tyHFcmJ6ln6lQ=
Subject key identifier:   03:EC:17:92:C0:9A:56:57:06:11:9C:88:67:E5:1B:60:8C:BB:5D:58
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584733608CEB5331A5BD7DBEA1FC
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     6453
IP address blocks:        206.82.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8c:eb:53:31:a5:bd:7d:be:a1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=2fd4060a-030e-41f7-8dfe-debb0d594e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:3c:af:85:83:7e:24:eb:88:19:19:e5:c7:
                    b6:6e:ea:ae:02:3a:79:fe:60:70:d7:74:66:02:06:
                    5b:02:9d:80:f1:7e:b4:97:bb:99:5f:0d:ef:58:b9:
                    11:52:9a:8d:a0:2c:28:e7:32:5f:ff:5e:5e:3d:d7:
                    81:13:7d:af:ee:3b:fc:b6:71:ab:6d:9b:7e:54:76:
                    40:c7:aa:4d:87:8c:d8:ee:91:0f:e8:e1:2c:d6:04:
                    19:65:a2:9c:6d:b6:fa:17:f1:34:39:06:0c:6a:db:
                    11:96:02:ad:41:96:93:df:8d:83:35:73:ca:df:e6:
                    c3:ea:a0:bb:92:54:13:ce:bc:a7:fc:17:c3:5c:cb:
                    ff:13:00:7f:e7:ed:65:82:b5:d4:e4:52:84:ee:ef:
                    fe:d3:f9:ca:1c:c9:c7:4c:9c:88:9c:94:ee:06:01:
                    0d:66:17:a4:6f:ee:e5:85:ea:0b:12:34:4e:3b:20:
                    63:7b:4a:50:4f:79:b7:c0:c2:33:65:09:e0:48:15:
                    5b:91:66:49:c8:75:af:0e:e7:22:bf:7a:eb:b9:dc:
                    71:57:0d:30:6f:ff:c0:75:eb:01:82:27:b8:ba:c8:
                    0b:bf:f2:2c:cc:de:d4:8f:bc:14:a0:62:d3:88:ef:
                    8a:3e:fc:77:24:4b:02:b3:8f:b7:29:32:e4:c7:d0:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EC:17:92:C0:9A:56:57:06:11:9C:88:67:E5:1B:60:8C:BB:5D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:14:c2:f1:5e:4e:f2:e1:d9:74:e8:f2:0f:ff:b1:c3:73:bd:
         86:f6:be:fc:41:f0:5a:6a:77:81:05:9f:cb:f0:16:4a:d8:16:
         21:f4:58:8d:bb:d1:5e:85:73:a4:0c:6a:8c:0d:fd:24:29:27:
         a7:8c:79:20:7c:8d:71:e2:3b:b3:1a:67:29:19:1d:e1:bd:e3:
         8d:52:6a:08:ca:17:c8:7f:ae:ba:dc:42:7d:e0:45:13:a5:8d:
         87:f5:05:3b:73:b9:a3:02:2f:92:07:f4:12:41:39:53:d1:e6:
         f6:f8:7b:f1:ba:78:75:59:87:19:9f:79:e7:fe:07:07:10:27:
         3a:c7:bf:79:a7:29:1a:07:d1:18:88:d6:38:62:1e:bb:28:3b:
         5a:d7:5b:15:c8:dd:bb:f0:0d:27:73:08:9f:2e:49:a3:3c:ad:
         06:ca:3d:6f:97:e8:68:a4:7a:2c:91:ab:00:f8:54:81:a4:ab:
         ff:45:c5:dc:dc:0c:1e:a6:b2:3f:4f:35:33:c6:bd:c6:05:d9:
         7a:7e:b4:78:52:0d:dc:57:94:25:8d:3e:3b:a2:69:01:4b:cd:
         a4:24:02:a2:18:11:89:b5:aa:9e:4b:71:be:6e:fa:4a:ad:f3:
         d5:94:63:99:db:20:a1:41:31:2b:3a:d2:ac:0d:d2:50:02:a8:
         42:57:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:16 2024 by rpki-client on console-ams.rpki-client.org