Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/09bea4ed-b4db-3ace-b535-a9af6edc3779.roa
File:                     09bea4ed-b4db-3ace-b535-a9af6edc3779.roa (raw, json)
Hash identifier:          2WgU0yXfbiUEt144FOCF7v1TetvJ7PcxmfumjhljW5g=
Subject key identifier:   87:0D:75:ED:70:CB:C4:F8:AC:63:DB:25:FD:45:FF:ED:B8:41:FB:5A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584521104F07F7C8C3DAE39BDB00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/09bea4ed-b4db-3ace-b535-a9af6edc3779.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     834
IP address blocks:        206.206.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:4f:07:f7:c8:c3:da:e3:9b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=72e2e861-3370-4eb8-89a5-a96cbc9de021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:94:c5:e3:2e:e3:ad:84:cb:ba:b9:2c:07:
                    f7:2b:10:b6:21:ef:6c:81:b9:62:b0:e9:7b:a3:47:
                    3f:b4:42:3a:5e:b8:cc:4a:41:f1:bf:19:47:51:af:
                    37:49:ff:45:24:aa:bc:36:87:87:64:3c:6c:70:7a:
                    2c:09:47:24:2a:56:34:85:14:31:10:00:f1:61:1f:
                    13:15:4c:5f:c5:72:45:4c:ec:ad:bf:a6:60:1b:26:
                    6b:cb:4b:6d:7a:ec:c2:cc:ae:13:f0:d1:8d:90:68:
                    e8:36:50:ea:99:7f:ec:6b:50:82:42:8b:10:e1:ed:
                    77:97:bb:92:1a:21:e5:88:4f:e0:ca:ad:90:b9:d3:
                    67:5f:7a:9f:7b:43:4b:cc:47:f0:38:19:b1:41:9e:
                    7d:a8:60:86:a6:69:89:2f:52:ee:f7:88:62:51:25:
                    33:31:70:93:46:03:23:94:bf:79:aa:eb:71:03:73:
                    b2:c1:a7:0e:26:4a:23:c9:90:cb:92:b6:b5:85:23:
                    1f:5e:d6:dd:08:26:e4:1c:f1:87:b0:09:19:ca:cf:
                    ac:6b:70:38:6f:96:4e:bf:13:5f:38:01:f1:76:25:
                    2b:ba:ab:0f:b6:c9:82:7b:f6:65:41:d7:87:b8:5f:
                    bc:4a:95:52:85:04:2e:4d:f9:2c:cb:ab:59:0a:f3:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0D:75:ED:70:CB:C4:F8:AC:63:DB:25:FD:45:FF:ED:B8:41:FB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/09bea4ed-b4db-3ace-b535-a9af6edc3779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:13:60:e6:da:2f:9e:03:cb:3a:f9:de:5d:48:6b:ab:a9:23:
         9e:01:3d:cb:bc:65:78:68:14:a7:3d:4d:fc:3d:63:07:1f:3f:
         d3:0f:fb:44:25:a8:4b:aa:f1:5d:f8:11:73:96:93:3a:ff:89:
         52:0b:e8:01:e7:a6:1b:9e:58:7a:be:50:2d:a7:44:ae:b7:1f:
         31:d7:46:b2:05:16:6d:2e:8c:89:c2:18:3e:9a:d3:c4:9c:e1:
         0b:06:b1:87:b7:de:2b:4d:66:ee:84:e3:32:10:2b:0c:b1:80:
         09:d6:1f:eb:49:85:15:ce:ea:40:63:b8:c6:18:ad:62:87:f9:
         bd:b6:f6:ca:8a:30:40:d5:82:6d:96:07:10:fb:d2:89:e7:a5:
         d2:d2:09:77:34:29:43:7d:ed:dc:4a:58:3b:93:63:37:7a:0b:
         d8:c4:6e:40:e2:33:29:77:d9:5a:00:cd:60:82:b9:1e:5b:0d:
         d4:07:a3:f5:5d:a6:5c:69:ec:6d:32:76:d7:f0:b2:4b:97:2e:
         fc:55:5c:2a:62:27:23:c1:62:3b:c7:1f:9f:cc:51:0f:1f:ef:
         f9:76:26:c8:2f:49:fb:21:5c:58:97:6f:f2:62:32:f8:ec:e0:
         5c:3e:6c:a9:25:89:71:5c:6a:86:cf:22:f0:21:67:22:82:a8:
         eb:18:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:36 2024 by rpki-client on console-fra.rpki-client.org