Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa
File:                     eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa (raw, json)
Hash identifier:          pzFnSvUHu8HdgcUVSQMfW2Ug1PF/g699emQ2ikeJD/0=
Subject key identifier:   19:71:37:3C:67:10:38:E9:8E:67:A2:F1:02:18:F4:CC:34:A7:88:91
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F432858473095F83354466A660844B3C0
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     30224
IP address blocks:        206.15.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f8:33:54:46:6a:66:08:44:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=819f3372-985b-4d61-841f-22470627d968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:4a:81:1f:5b:59:64:51:51:7c:e7:7e:9e:
                    90:47:05:bd:8f:5b:1f:4e:4c:4f:7c:e3:bb:88:3c:
                    aa:95:ea:ca:cb:04:ad:76:4b:29:22:cc:c4:ce:71:
                    28:7b:a1:11:1a:74:8e:e8:ec:fd:36:85:c4:a2:09:
                    e0:26:f5:5a:66:5b:33:54:cc:a6:5b:4d:53:03:d4:
                    03:23:7a:02:8b:0d:af:d2:45:a6:8c:ae:e8:4f:20:
                    ea:d9:23:48:3e:25:23:b3:66:88:69:05:6b:32:57:
                    13:b9:7a:88:bd:ed:ec:a0:18:44:4a:f6:93:6c:c9:
                    72:60:98:db:e8:3a:d0:11:0d:18:f1:6e:fd:7d:9a:
                    79:61:0c:9d:c8:f1:4e:bd:aa:be:62:b6:28:59:2a:
                    fa:ed:a9:be:29:9f:0f:53:70:6f:d7:67:72:80:3b:
                    0b:6b:53:f4:49:0c:91:fb:ef:22:5f:22:75:25:81:
                    70:6d:52:00:23:1e:21:19:c3:8d:ff:dc:2c:ce:d3:
                    7d:04:90:e7:a5:e1:05:44:97:90:17:a9:63:b0:f1:
                    28:b6:93:f5:17:e8:20:fb:d2:ee:b8:db:2d:52:a7:
                    6f:47:5a:d3:9d:ad:08:08:45:c1:a0:15:9d:ed:26:
                    ee:7c:57:5b:8b:84:e7:51:57:3c:42:da:6a:12:a1:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:71:37:3C:67:10:38:E9:8E:67:A2:F1:02:18:F4:CC:34:A7:88:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:1f:73:7f:97:77:ee:6d:c3:8f:65:2f:fa:76:b1:b3:13:
         9f:d7:fc:65:d6:12:74:12:02:a3:17:ce:b6:a8:7d:bd:fe:6f:
         c6:8f:3e:a9:02:c0:b5:ef:4f:6f:4d:27:da:97:aa:5d:5c:45:
         4c:c5:d0:45:86:3c:d1:38:03:47:db:a8:84:b7:b5:7b:39:2f:
         39:88:07:e3:0f:f7:ca:66:90:65:52:a3:52:f2:66:bb:ee:4e:
         7c:86:7b:06:43:42:a5:45:20:96:c1:b8:aa:3a:b1:e3:72:b0:
         09:ba:6e:54:b1:4b:64:59:1e:8c:b1:fd:10:95:e4:04:cd:46:
         05:d7:d1:c1:56:70:46:8c:68:35:95:35:45:36:a5:25:6d:34:
         54:22:80:da:05:1b:1b:18:90:e0:42:6a:0b:05:f9:52:c8:f9:
         93:a3:5f:6b:4f:2d:65:73:28:54:81:d1:33:c8:9c:52:86:93:
         88:3a:a7:21:c3:37:45:5b:ef:b3:cd:db:9c:e7:61:ca:38:76:
         a0:b7:e7:5d:0f:0a:47:ec:70:5a:2d:43:45:d8:5c:c1:70:9f:
         d9:a4:de:52:50:a5:de:3b:67:2a:ea:07:f4:fc:ba:3e:d4:af:
         6d:87:49:42:e8:fb:b2:2f:d6:dc:87:d3:a8:56:fe:94:a7:9e:
         6e:8d:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:33 2024 by rpki-client on console-fra.rpki-client.org