Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
File:                     0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa (raw, json)
Hash identifier:          01AKskGliu5f0/F20Fyay8TjlZNWkYkbwWPL2Wd6b4Y=
Subject key identifier:   55:5B:B1:CF:D2:73:E8:6C:0B:03:B0:E4:99:E0:65:76:CB:CC:2C:D4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845BD48DEA6FFA650462017F600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     13332
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:de:a6:ff:a6:50:46:20:17:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=ab942da6-ac37-4618-ac8a-9b7ebcc71275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:d2:cc:e2:57:ac:62:16:da:23:42:be:dd:
                    4d:58:c2:4c:eb:9f:9b:38:1e:9e:29:2e:f2:dc:0b:
                    56:02:49:e4:9a:0c:c4:6d:09:80:50:4c:18:c0:78:
                    88:00:0d:48:bd:b0:b4:c9:cf:db:7b:a7:b0:ee:06:
                    98:37:ec:6e:d6:61:d7:45:85:98:91:9e:87:7e:df:
                    90:2d:47:5a:c4:a1:80:ea:f8:ec:1f:4c:e1:76:7b:
                    97:2e:9d:74:4c:3f:e4:16:a7:9a:d7:a9:46:bc:6a:
                    69:e0:60:09:9a:d6:60:c2:55:94:31:a4:15:64:23:
                    b4:b1:68:77:a5:cf:10:44:34:e5:72:34:8a:2d:8e:
                    e3:0c:7a:07:43:a3:03:2d:f2:3a:20:e0:7e:f1:70:
                    37:ba:cd:45:b5:f7:2a:55:2b:38:2f:10:9b:9b:84:
                    cf:53:7a:97:29:89:a0:fb:52:b9:8e:d7:b9:2e:8d:
                    e4:9e:5c:6f:bd:39:03:a2:7c:0a:b8:15:be:54:31:
                    7b:a0:5b:15:3f:74:5d:52:a2:65:93:35:31:77:b7:
                    ff:a8:f7:71:eb:19:f6:48:46:79:7d:79:0e:57:35:
                    19:3c:74:ef:50:96:c5:31:b9:dd:9d:49:04:d2:84:
                    b2:c8:2e:a9:f7:ee:89:67:10:19:47:b1:bf:50:21:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:B1:CF:D2:73:E8:6C:0B:03:B0:E4:99:E0:65:76:CB:CC:2C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0fa3b079-1e61-346d-abbf-fe26bccd7f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:e4:7d:0c:b9:84:7f:18:44:d5:dc:a5:cc:db:96:05:75:
         cc:de:48:bd:0c:77:ab:92:52:9e:39:3e:99:b7:4b:13:50:ec:
         ca:9a:bf:02:cb:04:55:4d:33:ed:42:c6:bc:a4:1d:c6:f3:0d:
         45:d1:6b:5d:3a:4a:2c:9a:ae:a2:58:65:28:9f:aa:7d:99:29:
         88:64:b4:cb:af:1b:f1:83:c3:cb:7c:b0:d8:0e:2e:bc:33:93:
         ee:99:6b:a5:d4:4b:17:a0:a2:76:3e:64:38:fd:b2:d8:74:50:
         db:af:a5:12:4c:3f:d4:90:5a:63:e1:33:76:b0:d0:17:00:8e:
         c5:65:10:33:92:db:93:57:ed:8f:d3:5d:e3:2b:51:49:23:ac:
         7c:09:7a:d8:00:d1:0f:d5:a0:9c:94:25:a1:74:78:b3:ad:99:
         bf:3f:cf:e1:9e:1a:74:fd:47:0e:f9:83:bf:79:83:f8:93:25:
         6d:c5:22:49:c3:9f:6b:b6:15:f6:fa:5b:28:e4:c8:c2:11:f2:
         7d:6c:41:0a:70:39:a3:86:88:a3:af:7d:ee:e2:80:b0:ac:1f:
         3e:7d:d7:8a:ff:3f:33:f8:1c:7b:7e:47:b1:ce:56:b2:9f:68:
         3e:c9:74:95:71:f0:27:c8:d1:d7:09:98:46:4d:16:3c:64:dc:
         9d:55:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:46 2024 by rpki-client on console-fra.rpki-client.org