Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78f7e062-617f-3fbe-bb17-a0920fae9f84.roa
File:                     78f7e062-617f-3fbe-bb17-a0920fae9f84.roa (raw, json)
Hash identifier:          lLLSfNH97SI9jqsyKREZndbnpswadOQR8ZhrEQJa3n8=
Subject key identifier:   61:E0:7E:0A:E6:B1:C9:B0:DF:C7:EA:51:B4:29:E7:CB:64:24:91:3B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847B7FBFA1D6A4D9A5CC484EC80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78f7e062-617f-3fbe-bb17-a0920fae9f84.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     834
IP address blocks:        206.206.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:fa:1d:6a:4d:9a:5c:c4:84:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=d2a9e38f-f1fb-43c0-b5e3-33aa06f4e0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:5f:b1:64:5f:1f:4e:2a:d7:68:e1:f0:43:
                    b2:1a:5d:21:0c:08:38:9a:02:e9:e0:07:d5:e8:4d:
                    0f:3b:5f:e0:3d:a9:75:a8:35:fa:bc:e1:46:f6:54:
                    0b:ed:c9:76:3d:50:50:82:b3:92:73:66:22:ef:b9:
                    96:fa:5f:2e:37:ba:7a:a4:b0:1f:70:21:60:da:37:
                    42:88:41:6d:7d:b1:60:d0:93:11:74:bf:ed:88:7b:
                    8c:e7:d9:ae:df:56:1c:d8:9d:39:54:bc:49:6a:59:
                    aa:b7:44:5e:bf:a7:0b:7b:66:2a:04:54:03:f7:4d:
                    aa:4d:1b:3b:71:44:fd:44:37:b2:fa:5b:72:10:ff:
                    35:f1:c5:c7:c0:e3:3d:76:96:c8:e4:00:d4:9e:4e:
                    37:75:d9:b6:98:8a:15:c1:48:73:b4:aa:6a:de:06:
                    77:af:23:f4:71:19:fa:14:70:9e:e6:f2:71:d9:5b:
                    7c:ab:4f:0e:c6:f1:f4:f2:16:d5:ea:95:24:f6:25:
                    7f:c1:cc:ee:72:e5:cc:a6:f8:6a:68:06:f8:21:8f:
                    01:ab:d2:85:b9:bc:d5:60:fc:f9:0f:c7:19:29:b3:
                    40:6e:b4:ab:28:93:ca:ed:d0:b7:fe:bb:dc:b0:0a:
                    12:e6:b3:33:bf:37:d8:e3:34:d9:55:11:fd:42:6d:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E0:7E:0A:E6:B1:C9:B0:DF:C7:EA:51:B4:29:E7:CB:64:24:91:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78f7e062-617f-3fbe-bb17-a0920fae9f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:3d:ba:a8:1d:1d:d2:81:41:1a:97:e9:20:e0:9a:94:47:
         c3:5b:73:04:9c:74:e1:82:81:b0:2b:fd:5a:05:43:c5:35:e6:
         46:9f:25:5d:0f:fa:f8:a2:2a:9c:49:98:f3:44:be:0c:4e:ea:
         4f:7b:c0:76:79:97:49:b6:68:3c:b8:e0:d8:10:d7:43:1b:d4:
         33:47:f2:d5:b0:f5:2b:f7:de:dc:53:94:da:f1:9f:23:a5:0f:
         ef:87:db:16:74:85:e7:09:c5:84:98:e7:b1:dc:4f:cc:35:28:
         92:a8:3d:97:fe:d6:20:a2:31:77:e2:ac:d3:b4:a3:59:b6:ce:
         72:b2:fa:3d:0f:d0:4f:17:f3:d9:5d:68:cc:ee:f3:84:3d:cb:
         d9:06:0f:83:2e:d4:d6:03:3d:95:e5:64:28:e4:b1:34:b9:89:
         d4:fe:21:d6:67:98:9d:df:56:08:ac:56:e2:31:f9:fe:a9:27:
         2c:4a:21:42:95:3e:81:2a:66:fe:b6:8f:f4:fa:cb:c6:62:4d:
         2e:66:48:63:39:7f:34:f5:da:4c:a3:77:bd:4e:3c:01:8e:31:
         eb:15:55:6a:3b:97:4a:4e:8a:a0:ee:6e:a1:bc:2a:0b:5f:1f:
         34:66:d6:9f:cd:4b:01:e3:ab:0e:59:41:ba:43:3e:8a:be:c3:
         8b:4f:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:12 2024 by rpki-client on console-ams.rpki-client.org