Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa
File:                     df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa (raw, json)
Hash identifier:          xEVfTG8G1kW8SRvX/HLwCtCSobJYrQCDdIi/0I2ShWM=
Subject key identifier:   6D:15:29:05:1F:62:B1:6D:CD:D7:A8:A8:57:81:6F:D0:F4:A0:FE:E0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584582A88D8D17FA6DB468170700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     7018
IP address blocks:        206.206.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8d:8d:17:fa:6d:b4:68:17:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=5af82ab1-dff2-4252-866e-5c90229ced12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:7b:5c:81:e6:7f:01:b0:a1:ee:32:c4:ae:
                    5b:fb:9c:c1:ac:1c:2b:2a:b7:c5:02:51:51:07:25:
                    1a:c7:21:64:f1:8c:5c:56:e6:88:d1:ed:a2:19:cf:
                    5b:54:c8:dd:a4:7b:e8:7e:b2:a0:6f:ca:06:50:8b:
                    e1:15:20:48:0f:a1:ab:5e:44:ad:26:46:6e:bd:3e:
                    34:11:c4:14:fa:40:54:a9:89:61:05:a9:14:3f:7a:
                    e9:53:0d:2c:5f:e3:f0:e4:43:9a:9e:7e:b1:59:25:
                    01:50:f7:fb:38:d4:38:8e:02:d6:29:19:d4:3f:33:
                    8f:bd:1d:19:b0:49:9c:45:ac:af:15:94:0a:41:ea:
                    b2:e1:96:58:6a:1e:4c:1e:fb:e0:8b:1d:47:a1:41:
                    45:9c:53:34:14:8e:d6:c4:38:cd:b9:7f:41:e4:5c:
                    02:69:50:1f:67:25:d9:85:77:01:64:20:6f:2c:0e:
                    07:4b:b8:e8:0b:20:a2:61:76:b8:be:8f:06:6d:5b:
                    06:75:b4:d2:c2:d0:a3:10:fb:df:af:15:65:2e:b7:
                    d5:dd:1c:4d:1f:f9:1f:8c:c4:e3:8d:ce:17:78:aa:
                    18:86:7e:29:9d:db:71:dc:c7:7c:bc:8d:72:44:6b:
                    28:94:17:c3:72:2f:c7:09:75:b6:b9:f5:27:bc:90:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:29:05:1F:62:B1:6D:CD:D7:A8:A8:57:81:6F:D0:F4:A0:FE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:2e:e6:8d:54:5f:4d:64:49:d3:df:3b:4b:84:05:16:cf:
         95:2b:bd:d3:a1:f5:21:87:23:41:ae:d0:3b:99:f1:bf:4d:7f:
         ed:a9:99:7b:fb:ad:29:39:16:1b:96:3f:50:00:97:27:77:65:
         43:32:3c:7f:01:14:d2:8d:70:97:52:05:1b:73:28:17:80:ac:
         52:5f:30:f4:43:79:cd:c2:69:03:cf:9d:ed:50:a0:1d:0d:0f:
         59:c5:0f:56:90:6d:15:98:49:f2:81:71:98:d4:6e:c6:7d:e8:
         1d:25:a5:9d:9d:2a:56:d0:e6:c0:25:9d:62:f5:f3:09:74:07:
         b0:85:e1:27:f5:90:5b:de:52:3d:78:b7:6f:71:4f:84:b4:4b:
         99:28:68:e7:54:79:5a:08:41:57:c9:3c:b2:d2:40:af:23:28:
         49:ba:fa:33:9f:5f:5c:97:7d:0d:de:4d:47:49:a6:8b:84:92:
         75:d2:08:38:ea:33:4a:18:76:af:85:0f:64:f8:53:6c:a2:80:
         b5:93:a5:40:34:2d:19:72:5e:53:06:a5:67:73:20:e2:45:5b:
         54:56:72:0a:a6:0e:ca:59:d8:c8:6f:60:ee:f7:9b:27:1a:bd:
         48:e0:6b:5e:cc:71:ea:a5:02:4e:30:f0:69:56:0a:07:15:4e:
         9c:f2:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:47 2024 by rpki-client on console-fra.rpki-client.org