Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/0ec5215b-202e-34d7-b2e3-746fd02f8d7a.roa
File:                     0ec5215b-202e-34d7-b2e3-746fd02f8d7a.roa (raw, json)
Hash identifier:          fwEbp8fKZeUStHfIbu+qPLW82UdMPAyXTrg3oOWG408=
Subject key identifier:   44:A8:FA:8A:58:47:1E:08:47:94:50:E8:69:F4:33:03:77:4E:07:D3
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F432858472405BA09B54E5FF4A91F8EA0
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/0ec5215b-202e-34d7-b2e3-746fd02f8d7a.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     21859
IP address blocks:        206.162.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:ba:09:b5:4e:5f:f4:a9:1f:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=c6998cf5-d158-4bf0-85d4-5d2e702e6f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:17:a7:49:aa:74:d6:0e:1f:3c:20:f0:6b:
                    53:c1:23:b2:12:0a:03:a6:97:80:b5:a3:41:79:79:
                    26:c8:99:5b:cd:e3:ab:9f:55:b2:08:4d:78:1c:90:
                    2f:f2:2b:64:17:94:52:dc:0e:81:36:e4:86:26:15:
                    89:58:78:41:2a:97:e4:0b:cd:d3:1b:e9:12:b7:98:
                    62:e9:1f:76:d8:8e:81:52:00:48:df:ed:e3:31:25:
                    fe:f6:34:b9:97:f5:7f:34:0b:a2:eb:33:2d:e2:ce:
                    a6:63:2d:cf:32:e4:77:9c:2f:d5:0b:84:78:53:25:
                    35:12:45:e1:8d:d0:fb:d2:b7:0d:43:4d:89:c3:ae:
                    18:03:d5:44:04:97:5e:01:d0:67:9e:9b:13:1b:31:
                    17:28:e4:a7:ea:26:5f:50:31:81:6d:f9:90:46:da:
                    fd:49:09:4f:55:18:61:52:1e:be:71:06:ea:07:94:
                    61:ef:aa:40:3d:e5:c7:e8:5e:50:7a:a6:e1:54:ff:
                    5a:d0:5e:15:c7:f0:10:89:71:60:39:d9:ba:30:c0:
                    3a:b4:fe:cf:f2:92:26:54:40:e7:e9:d9:9b:c1:a0:
                    f7:c3:50:09:75:93:66:1b:80:7a:c2:96:73:18:8c:
                    56:68:7e:a6:4f:ac:ca:68:2d:b5:41:68:7a:af:83:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:FA:8A:58:47:1E:08:47:94:50:E8:69:F4:33:03:77:4E:07:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/0ec5215b-202e-34d7-b2e3-746fd02f8d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:ea:c6:70:9f:95:c2:e2:e9:44:ab:85:aa:10:6e:04:c2:
         26:1b:ad:3f:bb:41:aa:e9:01:cf:48:a8:56:99:df:23:b1:1f:
         85:7f:5e:39:64:aa:18:92:6d:72:ff:9a:d6:b4:6f:41:0a:19:
         71:43:c2:fd:36:42:a8:1d:0e:7b:cf:a2:4b:56:92:51:39:1e:
         62:6b:cb:30:25:dd:36:2e:d5:3c:3c:2b:19:a0:7a:bf:5a:c5:
         b1:fe:a8:63:84:63:5b:1b:bd:cd:90:0a:d0:e5:ef:49:61:93:
         d0:03:af:33:8a:5e:0a:13:58:88:95:f9:73:dd:6f:8c:e6:b6:
         bb:2c:86:02:f7:18:51:87:0a:b4:57:a4:2f:35:79:d2:e9:6a:
         0d:18:43:67:d1:72:10:54:49:cd:e0:bf:04:9f:2b:ed:f7:36:
         2b:4a:f8:50:bf:88:df:b3:39:0e:32:79:57:47:35:4c:c9:96:
         b2:a5:70:a5:82:e8:ff:aa:88:4f:63:c3:73:dc:61:a8:c6:cc:
         b4:92:e1:a4:10:03:fd:89:2d:d7:cd:2c:3e:14:bd:af:6c:63:
         29:1c:16:36:01:8c:24:b7:8e:75:71:4a:c1:7f:ad:b2:9a:d7:
         1d:5c:d9:0d:9c:2f:fe:57:2d:8c:b7:84:b9:d5:84:58:81:5f:
         65:f3:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:36 2024 by rpki-client on console-fra.rpki-client.org