Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/c75c4d6f-6b39-3ee6-90f2-9a2af202aeef.roa
File:                     c75c4d6f-6b39-3ee6-90f2-9a2af202aeef.roa (raw, json)
Hash identifier:          mhrOoDECB+/1JpUqWhCKwqvNKjIhyKLiGJ/6X7zbcN4=
Subject key identifier:   61:C5:F1:66:88:05:90:F6:94:AB:52:2D:79:E5:2C:43:D8:BF:6D:5A
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584589A31F46AC272AE533930A80
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/c75c4d6f-6b39-3ee6-90f2-9a2af202aeef.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     0
IP address blocks:        206.53.171.0/24 maxlen: 24
                          2606:a980:0:4::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1f:46:ac:27:2a:e5:33:93:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=86999cd6-711b-4bdf-966f-ac027f32e08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:26:a9:a8:a4:28:c4:22:9f:2a:83:b3:d0:
                    60:32:30:5a:56:af:30:2e:f7:98:81:b7:38:68:0d:
                    a5:f1:52:00:da:bb:15:b0:a8:0c:e2:99:14:7a:d8:
                    d9:06:6c:c2:74:4f:ca:fa:aa:12:d4:d8:ce:d1:cb:
                    c2:81:44:92:63:6c:d2:d3:4a:09:8b:2e:5d:f3:59:
                    16:2a:32:24:3c:f7:68:d4:6d:31:a6:06:19:b9:f8:
                    e1:47:4f:b6:28:43:7c:d8:c0:ae:38:98:86:9e:3f:
                    18:59:49:08:b6:b9:d1:4c:4a:cd:d6:9f:86:57:ff:
                    ae:44:75:5e:b1:f9:bd:75:61:82:af:38:e5:38:d6:
                    7b:ab:e8:28:28:32:fb:5b:37:37:5e:4c:4e:77:10:
                    1a:03:c6:76:06:b4:21:19:0e:c1:f0:21:0a:fc:3a:
                    96:5a:05:f3:3e:73:8e:6d:d2:82:05:27:75:22:89:
                    fa:45:2b:ba:e5:47:1d:ba:9d:fe:99:b8:fa:8f:ce:
                    9d:b1:0d:b9:28:e4:78:5f:08:7a:e1:d3:bd:b8:bd:
                    2f:43:f0:c8:7e:4e:e7:5a:20:1a:57:62:8c:fc:71:
                    3c:76:c0:78:d3:79:72:e0:c3:fb:bb:41:cf:88:54:
                    3e:7e:38:15:48:22:85:f3:5c:92:7c:a7:47:1c:1d:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C5:F1:66:88:05:90:F6:94:AB:52:2D:79:E5:2C:43:D8:BF:6D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/c75c4d6f-6b39-3ee6-90f2-9a2af202aeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.171.0/24
                IPv6:
                  2606:a980:0:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:17:d6:fa:e9:48:ca:9a:49:e6:45:e6:47:c1:75:ad:43:40:
         cb:3d:3b:9b:17:14:27:a2:cb:f1:36:63:37:8d:c3:e9:6c:f2:
         79:0b:a2:7f:d1:75:ef:59:4b:92:e4:72:bf:1a:f2:d9:53:33:
         66:57:f1:47:2c:62:47:06:00:ed:d6:de:6b:b3:4d:12:1a:72:
         ab:4e:fe:9b:20:29:2a:17:fb:ff:cd:90:13:4b:b5:c4:6c:6e:
         08:6c:96:f9:f0:b4:1b:92:4c:47:12:48:ef:56:b2:8f:88:e7:
         6b:33:a0:fa:1d:81:3b:33:55:95:b9:7f:5b:08:cb:a1:21:78:
         dc:30:63:28:3d:e0:28:f2:bb:22:8e:b5:c3:37:13:91:05:09:
         e8:f7:6e:50:08:15:c3:00:18:97:86:16:35:ec:94:5a:71:36:
         ba:97:d6:0d:2a:86:fc:2c:8e:8b:44:ea:c6:53:15:c2:5d:58:
         70:fc:3a:60:35:5c:fd:74:de:cf:5d:86:45:ac:5a:17:27:2e:
         23:3f:d5:89:05:12:50:e4:01:a3:68:fb:85:55:55:3a:81:8d:
         00:ee:7f:96:31:21:7c:54:db:62:bf:20:da:c4:e8:c9:a7:70:
         2b:56:f9:1e:11:43:44:c8:00:6b:9f:a2:e1:6b:0b:0d:99:60:
         ef:7b:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 20:37:28 2024 by rpki-client on console-fra.rpki-client.org