Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
File:                     90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa (raw, json)
Hash identifier:          frBl6506KYZBlIzM4rNeIzj+MnN3fPchoAPzp89z26I=
Subject key identifier:   29:8B:1B:71:3F:78:90:DF:62:8B:4A:1A:E2:EC:88:98:54:6F:96:B3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649F3D776A7D1C77D2AF00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        205.206.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9f:3d:77:6a:7d:1c:77:d2:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=6336116f-c1a9-4fb3-93d8-adc035ec182b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:0f:8a:3e:34:bb:5a:b7:4c:84:bc:59:fc:
                    33:53:e3:b1:01:73:43:cb:7d:0c:57:a3:9d:c1:97:
                    38:f7:c5:59:4f:69:d2:da:ac:0b:43:88:27:f0:18:
                    d2:ec:34:90:17:c4:9f:7f:b5:39:d8:41:a2:0e:63:
                    a5:4d:4c:83:a6:7c:4f:37:29:d9:0e:b0:27:f3:ba:
                    b1:65:df:27:29:cb:78:fd:e7:9c:84:52:f7:43:de:
                    a6:ce:b5:1d:d6:16:86:d9:28:29:bf:32:93:90:f3:
                    3e:5a:27:a8:a6:10:7e:2a:2f:04:79:4f:de:92:74:
                    db:d6:ec:0e:a8:c9:77:fc:9b:61:be:31:ec:9c:fd:
                    ab:14:49:7b:2c:8b:fe:41:2e:c0:ea:ef:5d:16:71:
                    32:1d:7d:64:a0:26:99:a3:a0:88:63:b5:4a:db:8f:
                    00:de:fb:b8:1d:35:06:b8:ce:f9:f2:32:0a:ff:86:
                    63:4c:4e:de:ec:98:00:9b:6e:2f:c6:dc:c8:61:01:
                    df:a0:41:b4:92:26:41:b2:07:3c:0a:5a:ee:e8:75:
                    8d:aa:ce:22:88:e0:ea:0d:de:c4:ae:83:61:b4:6b:
                    72:2d:75:c2:8e:fa:4a:76:1c:63:e9:f4:c0:6c:51:
                    82:b2:9a:2f:84:67:32:8f:1d:76:e7:45:ea:64:e0:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:1B:71:3F:78:90:DF:62:8B:4A:1A:E2:EC:88:98:54:6F:96:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:66:5a:2d:47:c1:5e:8c:bc:df:78:28:e4:15:b7:6a:7d:c5:
         d6:d9:46:ba:7a:94:e2:ff:6c:c3:b7:f6:b2:2a:64:70:16:48:
         0e:20:c3:2f:41:3a:c7:ab:8d:b5:f2:a2:47:5e:c0:ff:2b:36:
         94:05:b2:c1:39:9b:f1:f4:41:8a:66:11:1d:89:87:27:93:72:
         f0:c2:b9:e4:b4:14:9d:09:9c:17:2d:23:4f:16:25:f2:d7:5f:
         b4:36:46:7a:66:ed:08:eb:6a:bf:cd:66:67:d2:20:07:57:3e:
         65:0d:d5:6c:8e:49:e3:f1:70:66:12:43:eb:f2:cf:06:2d:34:
         ca:21:8d:89:1a:73:5c:58:65:bf:05:55:b2:64:93:7e:af:fb:
         46:03:f3:5c:a9:6a:a4:e0:e0:b2:1d:ee:16:d9:39:2c:9d:c8:
         84:73:63:76:7d:34:b2:cb:13:5e:5e:33:2c:18:5c:60:c8:be:
         ff:2b:29:c1:e4:a1:57:3a:bc:91:03:c7:f3:96:09:08:db:33:
         dc:48:2c:33:d2:f1:5d:b3:b1:b2:00:10:ac:d0:79:33:7e:05:
         31:89:ec:d7:bf:4b:33:a4:54:cb:28:a0:d1:a4:7c:c1:87:fa:
         2b:e2:1c:5a:a4:d5:13:b8:2a:20:a9:77:b6:b0:60:d3:cf:d4:
         d5:44:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org