Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f858d5b5-6f43-35ac-a073-d5d6074445c3.roa
File:                     f858d5b5-6f43-35ac-a073-d5d6074445c3.roa (raw, json)
Hash identifier:          rsxBxHM7G2Fo6nnO6n2jUOlYkn0YaKHZM/W7Fkq92pU=
Subject key identifier:   A4:F9:8F:E5:96:4C:FE:43:10:66:28:09:E0:96:63:B3:1B:90:29:FD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845A428D433D5C438355E5DA800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f858d5b5-6f43-35ac-a073-d5d6074445c3.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     7018
IP address blocks:        206.206.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d4:33:d5:c4:38:35:5e:5d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=4315195a-9ef0-4f44-a332-3147c8853327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:80:82:de:fa:8f:65:f6:b8:1d:fa:13:0c:
                    50:63:62:3b:47:34:f9:53:c4:2d:1a:e6:d0:bd:ba:
                    ac:d6:7a:ef:48:da:6f:b0:ca:37:25:96:28:81:01:
                    5d:ed:cc:c3:cb:1e:bb:f4:52:40:1f:e9:82:60:31:
                    d1:1b:9c:de:99:d4:e1:98:ea:7e:9e:f6:ce:76:58:
                    63:70:47:5e:cc:e5:bc:55:75:9f:74:be:b0:50:8d:
                    9e:b0:cb:09:c9:52:8e:92:12:65:95:8e:26:b6:5b:
                    44:85:3c:d2:cc:62:d0:3c:f5:b8:7c:9c:5b:4a:f9:
                    87:fb:6b:51:4d:91:93:36:89:59:b0:c8:e8:0b:0b:
                    8c:07:3a:27:66:49:12:36:52:d2:8f:ff:62:f6:f5:
                    57:83:41:32:d5:81:35:d0:98:6b:54:15:36:66:ef:
                    a2:b5:0b:ad:77:37:4b:2f:f2:97:8d:7e:f9:46:79:
                    e7:f2:8f:3f:98:27:2b:3d:15:6b:ea:d5:f5:ee:6f:
                    66:68:d6:01:81:05:e2:0b:06:84:3b:9a:ba:61:d2:
                    71:70:f6:f8:8b:c7:cd:9b:c0:fd:1f:93:87:f9:b6:
                    06:fd:21:4f:35:3b:e6:6c:4d:4d:76:49:ed:1b:3e:
                    f9:c3:33:8b:9b:fd:28:45:93:12:2a:57:55:af:0f:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:8F:E5:96:4C:FE:43:10:66:28:09:E0:96:63:B3:1B:90:29:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f858d5b5-6f43-35ac-a073-d5d6074445c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:41:30:13:59:30:d6:c1:6d:d4:8f:74:e7:c7:13:67:c8:81:
         05:8f:4a:60:1d:65:eb:80:aa:ca:27:da:35:3c:81:a2:f4:f9:
         c8:fc:f7:6a:2b:77:54:d2:52:13:f0:6d:95:b9:46:c6:fa:bd:
         13:02:21:f7:f8:02:a7:35:ac:15:89:64:49:88:e0:f5:2d:ef:
         59:26:55:a2:c4:63:dd:a0:4b:eb:d5:f3:de:bc:d8:a2:5a:d8:
         08:e7:9d:75:e6:fd:cc:a9:0b:d8:46:74:98:05:da:82:26:94:
         ae:ba:3f:df:27:3c:10:54:d8:b9:6a:d2:cc:3b:fd:19:cd:ed:
         1c:f7:23:40:0f:48:25:25:97:95:10:b7:11:03:5f:14:a3:a5:
         41:82:f3:53:c0:d2:20:0d:2b:cb:91:44:d1:6c:25:2d:47:2a:
         38:5f:b6:15:e7:4d:1f:db:90:dc:5c:f3:00:eb:de:80:00:7b:
         00:02:d6:d2:37:03:00:40:b5:2f:48:1f:52:e3:45:61:d6:86:
         5f:c0:4b:5c:0f:bb:ac:2f:19:ff:78:1c:31:ac:f9:74:1f:b8:
         19:c9:a5:8d:c1:6d:ed:43:ad:99:e2:b1:09:9e:32:5d:e0:d2:
         79:63:2b:a1:70:9d:f3:cc:d3:0b:a7:96:95:08:95:6e:69:16:
         cf:56:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:44 2024 by rpki-client on console-fra.rpki-client.org