Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/641e164e-8773-327a-bab7-d5897c169df2.roa
File:                     641e164e-8773-327a-bab7-d5897c169df2.roa (raw, json)
Hash identifier:          mu+c0lnxEtWEmR6JhQ7WjnPDFRxrMHiGoAh/U/eXqO4=
Subject key identifier:   36:9E:64:83:95:3F:25:FC:C5:6A:F5:EF:FF:73:84:73:E6:20:D8:4B
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F43285845052575F0B011C7DAF0AD7280
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/641e164e-8773-327a-bab7-d5897c169df2.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        192.206.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:75:f0:b0:11:c7:da:f0:ad:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=c60858d5-65a2-4c04-9886-612447d42f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c5:0c:d0:6e:8b:47:78:8c:5a:f3:6c:8e:ef:
                    0b:0a:77:85:d2:b8:78:c7:2f:f3:0e:c2:dc:5f:be:
                    2d:cc:1f:79:19:6a:ec:4a:d2:b2:6b:28:4d:b0:0e:
                    01:40:4a:7a:0a:db:10:56:4f:31:76:6b:fe:89:6c:
                    71:22:d9:bc:c4:bc:79:f0:b5:f7:5b:f2:35:98:d2:
                    87:9d:3c:99:55:a9:95:ff:fc:77:c5:ae:c3:b9:3f:
                    f4:9b:ed:fc:1c:f4:b3:6a:7f:9f:22:f7:5e:02:b8:
                    09:dc:04:e2:c1:93:8f:6a:6c:da:dd:f8:08:d7:13:
                    40:6b:67:0e:16:1c:ad:15:c1:49:3b:12:d3:d0:1a:
                    4b:fc:ae:b8:23:a2:12:58:09:bb:29:57:97:ab:93:
                    d1:7c:71:59:86:03:1e:70:c7:58:f1:e4:45:13:c4:
                    1a:61:04:7d:87:ab:f3:f2:64:cf:18:37:62:de:27:
                    8a:b7:9a:86:61:63:bb:67:04:e2:31:f2:f2:01:e8:
                    ca:64:97:f2:34:4c:24:a8:60:c9:5c:38:fe:a8:2a:
                    3f:99:8c:77:30:95:56:85:4a:ab:db:5b:ca:c3:71:
                    17:76:2e:0e:aa:39:af:64:76:d4:2c:84:02:17:49:
                    6b:8b:54:7a:84:f1:46:b6:a9:ed:83:25:48:fe:93:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:64:83:95:3F:25:FC:C5:6A:F5:EF:FF:73:84:73:E6:20:D8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/641e164e-8773-327a-bab7-d5897c169df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:38:f8:04:d5:cc:fc:0f:ba:16:d9:19:c9:d4:33:50:61:c1:
         ab:3b:5c:76:c8:2b:9f:26:43:d9:04:d7:b2:97:46:6e:c0:29:
         81:64:2d:d8:1b:65:c0:1e:c7:51:d3:45:64:c8:94:3f:53:44:
         b8:e2:6b:90:de:7b:25:af:fe:76:ee:d3:c2:2b:f7:5a:7c:8c:
         bc:30:b5:e6:d6:93:ed:e0:b6:0c:9b:aa:59:6d:fe:6b:53:cd:
         1c:f5:70:ac:bc:86:22:43:20:48:dc:44:c4:13:a0:63:39:b4:
         fe:b8:76:86:ae:27:b2:66:61:c4:ea:55:59:b3:2c:49:a4:d1:
         85:3c:07:b6:9a:a9:a2:5a:1e:8d:73:49:b2:c1:23:60:1f:2f:
         5f:9a:07:2b:e1:5d:f3:fc:61:05:3e:02:25:7e:4d:f0:b6:0b:
         4f:1d:67:44:3b:8d:61:72:6d:20:79:02:a6:c9:ac:4b:96:f0:
         84:5b:50:d2:7b:72:ae:57:8d:8f:16:7e:53:fc:51:99:75:f5:
         a3:14:2f:82:ec:0a:2e:37:27:2d:1e:9f:a1:f1:28:a9:cd:06:
         1d:33:50:43:d7:71:4f:6d:25:fe:45:b8:97:e4:26:99:77:24:
         fc:81:89:9d:ec:59:74:36:97:58:69:09:eb:83:77:1d:a4:20:
         35:7c:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:32:33 2024 by rpki-client on console-fra.rpki-client.org