Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa
File:                     6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa (raw, json)
Hash identifier:          pVQfdO/u/Vkh5ht10nCmz+qYVcNOElj59yIvi4ufELw=
Subject key identifier:   FA:2B:EE:EA:E1:AE:0B:DB:BA:F3:B3:A7:EA:B6:89:13:27:EA:A2:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847F84F877C8E55CB84241B6700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     211192
IP address blocks:        206.206.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:87:7c:8e:55:cb:84:24:1b:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=58e2a208-fb7c-47a7-8bbb-8689fdef7a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:4b:c1:83:cc:fc:c6:bb:b4:ea:70:fa:43:
                    25:29:fe:77:c4:cf:38:f6:30:5b:c6:70:37:3e:fb:
                    21:8b:20:12:f3:96:32:d8:eb:6c:4c:bb:7b:89:fa:
                    b2:a1:cc:22:55:de:1c:3b:53:ef:75:cc:17:d1:ff:
                    09:8d:9e:7d:3d:81:dc:78:03:3b:e7:7d:84:68:a4:
                    92:f2:0e:b6:1e:09:eb:48:f5:63:15:08:ef:46:e5:
                    23:44:74:a7:80:57:f6:e3:f9:5b:5a:c5:fe:ef:89:
                    aa:26:c7:33:e2:43:bd:7f:18:cf:96:e4:5c:65:23:
                    24:90:1f:9b:e0:30:5d:0c:af:43:12:0b:75:e3:47:
                    71:5c:ad:d6:bc:02:d8:13:99:cf:39:76:e0:ba:c9:
                    2c:c7:08:c3:20:3c:be:2e:6f:22:a4:59:b5:b4:d9:
                    73:8c:53:1e:a5:86:d8:89:41:87:1f:6b:62:e5:07:
                    dc:a2:cf:ed:c9:f5:e5:fa:a8:7e:f1:ae:23:3b:f1:
                    51:6b:ec:fd:ee:11:6c:02:b2:8b:0f:86:31:22:e4:
                    a8:13:75:f7:e2:5d:f7:48:08:fc:f4:5c:b8:ef:13:
                    51:2a:4d:88:d0:b4:06:a8:d6:16:e0:9a:80:be:12:
                    54:e9:4c:28:21:d7:2c:84:03:e5:87:4e:37:81:de:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:EE:EA:E1:AE:0B:DB:BA:F3:B3:A7:EA:B6:89:13:27:EA:A2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6724d251-08d5-3d2b-8fd6-5cbbf3de6ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:d0:1e:36:54:09:7b:e0:8a:51:44:89:0e:90:7b:3b:90:
         2a:64:35:45:10:d9:16:e2:e9:22:cf:f0:eb:a8:ac:e9:74:4c:
         05:0d:1e:51:6d:66:45:fd:55:98:c2:b2:84:35:e1:c9:67:9f:
         80:8e:15:df:87:3c:2a:75:ab:33:54:7f:f6:25:25:88:cc:30:
         e7:6d:b1:bb:ca:a6:12:ab:9d:c9:6f:06:1e:7e:fa:61:f1:83:
         b3:ae:3d:43:9b:3e:4c:c1:ce:04:82:6f:e1:96:90:55:4e:53:
         af:ae:5a:62:7f:67:26:c9:84:65:03:65:73:fa:47:ea:b1:c5:
         50:c1:c8:97:31:a5:97:e8:4a:14:f4:95:ef:1b:53:28:c3:6c:
         f3:04:17:c5:e6:8e:89:a0:67:9e:1d:3c:cd:2e:8f:21:d0:68:
         35:d6:a0:3d:97:f1:82:b9:e3:b7:80:02:d7:58:0d:61:e9:78:
         1d:89:4b:47:bd:37:e0:80:91:f3:86:d9:65:0b:7f:dc:ec:fc:
         48:0a:30:0f:85:7a:d8:53:eb:29:eb:86:38:b7:30:4b:3f:a1:
         c4:f2:ca:28:63:f3:65:b8:e1:01:b7:92:f2:6b:ab:29:d5:9d:
         54:91:59:bd:c0:45:0c:9e:8a:1e:da:b5:64:0f:7d:d7:c4:47:
         df:4e:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 19:22:38 2025 by rpki-client