Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa
File:                     2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa (raw, json)
Hash identifier:          ZPPioXq9XDIUnOVwKyoiaSNQBAA0ADl2+Fl0tymLK8M=
Subject key identifier:   20:3A:A9:F1:5E:6B:80:0B:74:3B:38:9E:65:63:24:91:00:75:E0:8A
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F432858472B007F9851B982CBCE3B1B00
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     398143
IP address blocks:        206.204.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:7f:98:51:b9:82:cb:ce:3b:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=e8088d0d-4fe7-45ba-aa19-be21cb0d4618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:1e:3e:8b:00:2c:e0:76:fa:d6:02:7f:46:
                    16:3b:b8:2e:43:de:25:eb:3a:53:ad:9a:16:57:1f:
                    ec:19:c8:5e:10:b5:1d:cd:e8:47:d5:b4:0f:a1:83:
                    bc:b7:00:3f:e5:77:65:83:bd:94:cd:20:fc:8c:2b:
                    8b:8b:38:f0:9b:e4:50:1b:c1:28:19:ba:c6:ca:76:
                    22:fe:53:20:c0:04:74:2d:d5:98:33:47:50:68:d1:
                    c5:53:81:39:10:6a:ef:2d:be:e2:a6:2a:d2:7c:93:
                    da:c0:61:1c:6a:75:9d:02:80:95:ba:e4:d1:0e:a1:
                    86:0f:1d:bc:57:9f:fe:d0:46:1c:30:c2:03:3d:2c:
                    27:9d:14:48:f9:1f:a0:1f:a9:ea:6c:ac:bc:60:5c:
                    ae:bb:2c:cd:f8:23:6e:9e:f7:f4:41:08:aa:9d:13:
                    35:b0:9d:a9:06:45:a8:06:58:a7:ee:37:e7:49:61:
                    41:9b:4e:ec:c3:9f:0d:d6:a1:c8:c3:09:b1:05:49:
                    b0:63:07:90:dc:51:fb:59:db:b1:dd:13:69:27:fa:
                    10:ad:61:9e:0d:c6:1b:92:ee:80:dc:fd:0a:e8:1e:
                    0f:2d:d9:af:da:65:99:b9:1a:02:f8:f3:d9:e6:38:
                    c5:6a:00:6e:83:b6:eb:36:e7:7e:e3:eb:7a:d0:3f:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3A:A9:F1:5E:6B:80:0B:74:3B:38:9E:65:63:24:91:00:75:E0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4c:7e:25:9f:a8:53:d1:d9:19:af:2d:e9:9a:e5:59:86:4c:
         37:f0:b8:9b:ff:c0:9d:9f:e8:eb:b8:a6:18:4e:10:a3:e2:22:
         87:db:a8:75:28:cf:2c:a9:a4:18:70:b9:ec:43:03:8f:87:1a:
         47:b5:ff:2b:97:24:21:0f:72:fa:3e:7f:f8:01:95:55:85:e1:
         d1:57:56:82:ba:64:2d:d1:d4:df:f4:c4:ed:8b:04:08:f3:9f:
         9a:b4:ed:ed:bc:bc:72:22:2a:b8:3a:9b:9c:90:0a:76:be:50:
         2b:36:97:04:74:29:32:e5:60:8b:d0:a7:d8:c1:f4:1a:55:d7:
         13:2c:39:45:a0:31:56:8e:06:47:bd:99:75:bb:07:13:65:be:
         49:58:66:40:15:b4:d5:b3:9d:ab:a1:77:70:51:b3:c2:cc:a9:
         eb:a5:7d:90:d7:f9:94:3d:86:2a:06:3d:e2:fd:99:c9:62:d1:
         ac:48:d1:f7:c5:2b:4c:27:d9:41:09:35:61:57:0c:3e:e2:56:
         c6:08:f4:da:25:56:8d:67:23:88:03:f9:25:7c:e1:f5:4e:16:
         54:fb:4a:d4:15:6f:69:d7:55:d0:20:75:93:67:10:82:53:28:
         b5:b9:3f:cd:d4:29:87:73:e2:12:1e:c0:8b:bf:1b:33:a6:29:
         5a:e5:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:52 2024 by rpki-client on console-fra.rpki-client.org