Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa
File:                     6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa (raw, json)
Hash identifier:          sPedmNykaLOQJA462SBktoEOlbipQIdmzwt8lAh0uMM=
Subject key identifier:   EF:71:C6:68:25:DC:9B:C9:C6:7B:FB:36:74:55:37:7E:3D:03:97:46
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285845118ED2222DA5F7AB2BB4F200
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa
Signing time:             Sat 02 Mar 2024 00:42:35 +0000
ROA not before:           Sat 02 Mar 2024 00:42:35 +0000
ROA not after:            Thu 30 May 2024 23:42:35 +0000
asID:                     398324
IP address blocks:        206.168.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:8e:d2:22:2d:a5:f7:ab:2b:b4:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Mar  2 00:42:35 2024 GMT
            Not After : May 30 23:42:35 2024 GMT
        Subject: CN=4cf82471-17d2-44c6-821f-bacfffe21661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:ea:88:b6:6d:77:ac:08:1e:d1:42:78:eb:
                    dd:4c:34:27:88:cb:c7:66:18:b6:87:44:b2:02:3f:
                    6e:e0:ef:44:ab:ce:59:d4:f9:88:31:46:24:8c:b2:
                    87:50:86:27:82:f4:bc:81:7d:8b:4a:b3:7d:da:b2:
                    25:2d:c8:f4:fc:91:ab:72:c6:77:b1:64:3e:2b:f2:
                    be:73:16:a8:01:c8:b4:3d:05:f8:0f:05:96:ab:ae:
                    c7:65:81:16:c9:1a:6b:30:34:0f:3a:11:39:35:b8:
                    cd:f8:74:5a:80:1e:d3:dc:2c:49:cb:94:92:f8:83:
                    b4:02:d2:09:92:93:0e:ed:32:3f:c5:ec:7f:5b:3f:
                    b2:56:e1:fe:13:e0:a5:03:26:30:ce:63:6e:97:3e:
                    cc:ad:63:21:5d:26:f9:d5:76:2b:ef:af:69:83:ad:
                    62:39:d5:d4:aa:ec:b4:33:f1:4c:9c:69:88:bd:d7:
                    b0:b4:b6:4d:a3:e1:0a:2f:f7:31:69:63:ab:43:92:
                    66:72:da:b0:2c:74:19:f9:08:39:e7:90:0c:90:24:
                    b5:98:f1:ce:97:ca:29:e6:46:50:08:55:19:d6:d2:
                    94:aa:e8:ea:94:1c:19:42:fd:90:47:e2:6f:5d:0e:
                    f1:f1:29:81:94:90:da:b2:d9:37:97:3e:cc:d0:1f:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:C6:68:25:DC:9B:C9:C6:7B:FB:36:74:55:37:7E:3D:03:97:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:99:ee:c1:d8:eb:b2:fd:1b:d7:07:58:e3:39:46:5e:a4:86:
         48:15:e5:36:42:d5:16:3a:d4:b4:76:6f:ca:61:2f:02:34:23:
         0f:11:9c:a3:7f:da:8e:ad:50:27:a5:f2:6e:98:92:49:93:57:
         89:60:4e:28:94:fe:ad:6d:7c:e9:70:62:c9:e5:53:a6:3c:f8:
         80:97:6e:93:52:93:72:75:45:e4:06:06:98:a2:88:ef:db:07:
         47:85:48:42:9c:b3:61:b0:46:5b:d2:b0:95:7a:21:bb:79:c7:
         72:7b:a5:96:21:41:7f:e0:70:b1:15:64:56:7a:5e:5d:c6:da:
         53:1f:03:81:d9:2f:f9:21:00:35:52:19:c3:b8:95:ac:02:d1:
         f5:09:e6:45:37:ed:c6:93:c4:fa:b0:95:d5:90:a4:e6:3f:5c:
         49:a6:c0:9c:d7:3b:d8:24:f2:91:97:fb:95:8f:a0:98:6c:a5:
         5f:63:72:d0:26:ed:cf:76:9c:61:9c:a4:9b:eb:89:79:73:6e:
         97:55:c0:0e:4b:f2:1c:f5:1b:2d:a9:8d:0b:89:a3:5d:a0:ba:
         5f:42:b0:34:f6:90:86:52:47:c9:d8:e2:16:57:d9:d5:69:d1:
         b0:9b:2f:51:09:6b:f8:ef:62:9b:19:79:86:c4:28:1a:f4:7b:
         b2:ad:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:19 2024 by rpki-client on console-ams.rpki-client.org