Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0e288c22-3e4c-329d-ae73-5caede1e6895.roa
File:                     0e288c22-3e4c-329d-ae73-5caede1e6895.roa (raw, json)
Hash identifier:          RF4ap5hAJw6kN4Yj7wmewULvWHCkbgj2iUEz70KcPu4=
Subject key identifier:   36:CC:DF:C6:FD:94:DA:62:5F:09:26:69:30:DE:81:79:A0:C2:D3:2B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844E6C36AD4031904E557E87400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0e288c22-3e4c-329d-ae73-5caede1e6895.roa
Signing time:             Thu 15 Feb 2024 16:48:48 +0000
ROA not before:           Thu 15 Feb 2024 16:48:48 +0000
ROA not after:            Wed 15 May 2024 15:48:48 +0000
asID:                     834
IP address blocks:        206.206.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:c3:6a:d4:03:19:04:e5:57:e8:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 15 16:48:48 2024 GMT
            Not After : May 15 15:48:48 2024 GMT
        Subject: CN=8712d048-1c00-4506-bc4f-f688c1ef46c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:bd:cf:9f:da:73:5b:4b:fa:4d:f0:bb:3a:
                    d3:58:45:b6:e1:e6:85:73:be:92:83:1a:97:46:3e:
                    49:61:69:bf:79:37:02:fc:4b:3e:75:b7:3e:ad:64:
                    91:d0:c8:61:0b:43:f6:92:e0:1a:31:0a:54:74:bf:
                    40:03:31:be:b4:e7:2b:7a:e5:ba:19:cf:9d:48:e8:
                    e1:dd:f9:78:07:67:17:e2:64:2a:65:a4:9f:e5:69:
                    34:b3:42:58:8b:ad:0c:38:4c:22:49:03:0f:a7:c1:
                    c2:eb:58:24:4e:7c:d7:ea:69:cb:dc:ea:28:1d:ee:
                    07:58:66:68:69:a1:18:ab:e7:4a:75:97:5e:f0:64:
                    b3:ce:f4:0b:77:60:f1:51:43:67:f3:33:9c:4b:8d:
                    74:b2:fd:e3:90:df:35:9e:3e:96:0d:57:d4:69:b5:
                    e0:63:a9:bf:11:65:35:37:1c:6f:7c:29:39:76:35:
                    47:e3:1f:7f:1b:53:36:9c:66:74:ec:ce:d9:df:da:
                    23:4c:bc:61:b9:27:a1:5a:0f:50:0d:7e:30:d2:5f:
                    7f:2a:ed:d6:ea:96:51:f0:83:a6:3f:92:44:9f:ae:
                    30:e5:b6:df:d9:d9:e4:94:56:03:ba:95:8c:87:08:
                    30:67:5f:4f:ca:29:4e:91:bd:98:6b:44:7b:12:29:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:DF:C6:FD:94:DA:62:5F:09:26:69:30:DE:81:79:A0:C2:D3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0e288c22-3e4c-329d-ae73-5caede1e6895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:b4:b4:bb:a0:25:86:0d:ed:2f:5e:20:48:48:cd:3e:a2:83:
         e6:34:35:e7:6d:92:fa:f8:67:8f:ae:ec:d8:66:76:6c:87:3f:
         93:55:33:60:7e:7e:f9:34:52:69:dc:e1:9b:69:d6:51:b8:c7:
         9d:51:9c:89:bb:7e:3a:7a:a9:87:ec:c2:04:3a:ff:f5:8e:97:
         c3:aa:42:e8:3b:5f:4d:07:63:15:e2:6a:94:40:fa:5c:13:ef:
         aa:c4:76:fc:33:02:dd:e2:fb:82:8b:b0:9e:7a:b2:bb:b6:2e:
         72:40:25:37:4c:3f:14:b0:b7:64:6a:3a:83:f6:0a:c9:67:fa:
         85:c5:47:5d:98:d9:ac:a1:05:38:84:6f:91:9f:74:4b:cc:29:
         79:8a:30:37:34:ac:c0:2b:10:ae:ec:e3:c4:0b:4e:2e:34:3b:
         df:89:96:a9:06:27:0f:11:b2:9e:11:23:da:69:ea:5d:3f:02:
         f8:c5:2c:d4:65:2d:9d:21:84:de:e8:c4:d5:84:d4:e8:91:f4:
         59:27:19:3a:3e:39:cd:2d:c5:aa:39:31:5b:0e:62:1e:3b:9c:
         9d:b8:e9:23:00:2d:3a:e9:10:17:cc:50:0d:c7:28:58:2f:39:
         90:79:83:e2:b5:d4:d7:2e:42:35:97:c2:17:d7:df:b7:e8:d4:
         84:0f:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:16 2024 by rpki-client on console-fra.rpki-client.org