Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/1be853b6-dcdb-3177-ba52-55246ea46ab8.roa
File:                     1be853b6-dcdb-3177-ba52-55246ea46ab8.roa (raw, json)
Hash identifier:          vJsZi8YzRSp2f8erQ8UHAFC4xTgOJg0GQO/p+wv8moE=
Subject key identifier:   E5:94:2E:A3:7A:48:7B:8A:0E:F6:E7:96:C2:A8:A2:09:14:B0:55:FB
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584761718D280CAC5F5246822000
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/1be853b6-dcdb-3177-ba52-55246ea46ab8.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     400626
IP address blocks:        206.227.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8d:28:0c:ac:5f:52:46:82:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=aab2bf48-cf91-479b-88c9-dc74cb6bb23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:c6:99:8b:ce:81:ff:a0:61:70:f3:92:a0:
                    3d:39:85:7b:6d:5a:2d:f3:2c:1c:a0:74:5e:0a:db:
                    3e:e1:aa:00:2b:61:9c:e9:56:37:fb:cb:5f:00:04:
                    eb:1a:f2:a6:04:80:0d:3d:50:95:fe:8b:09:92:b4:
                    e6:a3:6a:c3:20:20:14:2f:8b:ec:1e:aa:67:6b:19:
                    72:bd:85:c7:53:d6:d5:ba:2f:51:80:05:c0:4a:fd:
                    c2:6b:fa:dc:73:2d:df:43:ff:d8:ed:24:07:b5:32:
                    0c:75:f1:bc:f2:b8:c6:04:eb:ba:7f:d0:55:2f:bd:
                    ea:f6:af:91:48:a1:1f:7e:89:f7:15:4f:71:be:6c:
                    e1:b5:42:a8:ca:8d:70:87:87:b0:e0:fc:4f:75:aa:
                    9e:4b:90:6f:d8:ef:17:75:f2:be:28:7a:e5:89:87:
                    72:c6:aa:2d:2b:b5:03:1c:71:17:26:f3:f7:a5:93:
                    01:1f:e5:99:9d:6e:5e:94:83:7b:7d:54:1b:df:99:
                    d7:9d:21:1c:c1:10:06:84:24:64:8c:d0:56:12:9a:
                    02:f6:4f:b4:84:e0:a4:f5:6e:49:06:ff:b8:0b:17:
                    44:ee:4c:df:45:51:92:a0:4c:09:e7:52:e2:56:eb:
                    e4:50:cf:bc:ef:0c:77:6c:1f:c6:74:0f:c2:1e:69:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:2E:A3:7A:48:7B:8A:0E:F6:E7:96:C2:A8:A2:09:14:B0:55:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/1be853b6-dcdb-3177-ba52-55246ea46ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:5f:d5:ca:bc:51:0e:b2:8c:24:b0:e1:b1:37:49:09:71:
         0f:2e:0e:c1:50:c0:ac:47:58:af:e0:79:f8:94:f7:02:a7:6e:
         43:15:b3:97:6e:aa:86:08:00:c9:20:87:b5:a9:2f:59:b0:e8:
         ce:b4:35:20:9b:40:7e:ad:04:8d:76:58:6b:ce:ea:d7:4c:ec:
         d3:7d:c5:32:dd:d3:aa:ac:c9:8e:d3:88:a2:f1:8e:fa:5e:55:
         e1:09:4e:cd:e7:c3:5e:27:d2:0e:81:c8:f5:b6:2c:a4:a8:ec:
         f7:f6:29:a4:6f:10:32:37:c5:cf:5b:71:8d:5d:9f:92:ca:13:
         89:46:65:22:88:c3:9b:de:fd:d0:4b:66:3c:6d:7a:06:f1:1b:
         e5:51:7d:45:41:a6:73:08:af:d0:92:9a:ee:ad:b8:3e:c7:b7:
         51:04:2a:74:3b:7f:5a:80:30:3a:85:bc:d9:21:24:6a:c2:05:
         a5:54:16:7d:14:9c:f2:be:15:e2:8b:96:83:ba:f4:bf:82:ee:
         3b:00:67:79:24:83:09:0a:aa:0e:93:6e:8f:4f:b1:0b:27:b7:
         a1:a3:32:4e:a4:20:fe:1f:0f:71:fe:09:33:fe:85:c4:97:86:
         08:0e:25:c9:ac:8f:a8:03:7f:06:be:d7:ef:3c:4d:42:d3:8d:
         9e:79:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:37 2024 by rpki-client on console-fra.rpki-client.org