Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
File:                     2d9c836c-81d9-346a-9556-aada3f6910e7.roa (raw, json)
Hash identifier:          NGbkNlTR8lSzGa5jP/8wo8xzUAcWSkyf8BQtHxbTwe4=
Subject key identifier:   0E:79:D8:32:11:94:87:2A:00:9A:1E:26:F9:84:9F:F8:AA:48:12:37
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584742BB578BD8EE148099D81260
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     64267
IP address blocks:        206.206.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:57:8b:d8:ee:14:80:99:d8:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=ef22282a-23dd-4ccb-a68c-6447ab499396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:40:35:a4:75:50:02:f1:5c:cb:24:51:12:
                    e7:40:b2:47:24:13:ff:15:ca:ea:7f:88:b5:9a:96:
                    99:4e:29:d2:05:fa:25:96:4e:48:c3:2f:c2:9c:85:
                    5d:03:f1:8d:e9:4d:72:40:a0:da:07:c8:e8:a3:22:
                    16:a2:7d:5d:c0:60:26:66:69:5b:56:bf:2f:15:14:
                    e7:52:59:7c:d0:69:46:41:ce:26:3f:09:4f:9b:7e:
                    07:6e:8d:a1:c7:dd:f9:0b:c2:d3:0d:1d:32:37:2c:
                    40:f6:eb:f4:54:30:23:b5:f7:bf:68:35:d0:14:7b:
                    aa:6b:8a:71:08:6f:24:d9:ff:ec:39:b2:2b:af:a1:
                    40:fd:20:52:b5:8a:1a:a3:83:dc:71:58:21:57:4f:
                    1b:8b:86:4b:96:d5:55:03:8a:a5:7f:63:f3:d2:65:
                    2a:65:3c:81:ae:5e:5e:e2:ee:16:04:82:d6:86:16:
                    fe:46:a0:5b:11:21:3f:11:87:5e:e2:b8:8a:bd:7a:
                    df:85:85:c2:c8:3f:f8:40:6f:d9:a7:68:5c:5f:6b:
                    2e:97:1b:a9:cb:3e:da:e5:01:23:b9:c4:54:47:da:
                    48:f3:f6:d8:7b:e6:8d:96:c3:3e:1d:f7:26:95:ae:
                    13:96:34:5f:97:b7:43:9e:d1:42:a2:26:6b:0b:d8:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:D8:32:11:94:87:2A:00:9A:1E:26:F9:84:9F:F8:AA:48:12:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:bc:c8:2d:41:d4:95:60:15:b2:ea:b7:0c:7a:0b:56:e1:
         75:46:14:f2:52:87:59:e4:2a:52:4f:c6:ba:53:d0:42:dd:36:
         be:05:b4:86:58:70:71:b3:c1:75:2d:fa:38:df:6b:96:26:b0:
         e4:7c:8b:22:a1:5c:da:02:9c:98:fd:95:4a:88:fe:19:91:5a:
         15:a8:5b:1f:d0:a4:3d:d8:ce:3f:cd:ab:bf:89:7f:a1:55:24:
         94:61:0a:79:98:fe:bc:dd:af:39:22:71:ba:df:e3:cd:fa:7a:
         44:a6:17:ea:06:36:73:ce:4e:a5:6b:b8:ba:1f:8b:97:75:ab:
         ce:16:aa:e9:4c:72:20:6b:c8:34:8d:a2:9d:50:a7:58:51:a4:
         a4:36:fe:ef:72:11:7d:35:09:d1:a3:68:27:ce:06:ba:00:c9:
         fb:99:0c:2e:1a:50:20:49:a3:64:f9:38:68:2c:b8:b9:19:9a:
         46:6b:4b:67:04:5e:9f:77:31:8a:f7:f3:12:81:f5:a7:eb:1e:
         ee:2c:5d:ae:64:b9:5f:56:1b:d6:be:64:59:68:71:e3:89:80:
         6f:9e:72:c6:94:07:a6:8a:87:0c:20:51:92:4e:cd:2a:dc:5f:
         cf:36:c8:94:77:ef:20:d2:90:e7:67:67:ab:33:23:11:e1:41:
         ab:a1:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:17 2024 by rpki-client on console-ams.rpki-client.org