Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa
File:                     6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa (raw, json)
Hash identifier:          8J8CSkRttGMkbtX7mNy0fInvFeS8p0hjB2NM2j2rTdI=
Subject key identifier:   CB:01:0E:98:6C:DB:C8:46:89:CF:7E:1C:C7:42:CD:2D:C9:14:2B:61
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285847362B4967816AA190E3C05B80
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     398068
IP address blocks:        206.227.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:49:67:81:6a:a1:90:e3:c0:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=bbf0c8a4-8d05-402f-8bf5-9d997e68de35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:b3:be:58:e3:35:9a:82:db:24:77:8f:f4:
                    c6:db:bf:92:db:46:bb:28:ac:5f:a6:18:af:a1:d0:
                    fc:9c:2c:a8:43:d7:58:98:8e:d5:ff:b6:35:82:85:
                    48:2f:18:70:f2:55:a6:03:19:36:7f:9b:22:4a:f4:
                    b9:d3:44:26:80:ce:c3:b3:3e:1b:d6:69:9f:5a:7e:
                    a3:f5:2e:f2:91:fb:c6:4f:42:37:37:91:e5:10:98:
                    7a:a4:63:5e:4b:67:10:35:4e:25:34:f1:cc:50:c4:
                    13:6a:be:6c:92:1e:44:28:ac:13:ba:88:2b:a9:82:
                    4f:b2:c0:b0:5d:b7:9d:00:e3:a4:2e:5a:be:83:b1:
                    65:c5:81:37:fa:87:46:39:1f:29:10:0e:27:bf:78:
                    14:7e:13:2f:9b:9f:66:78:10:af:e7:51:3a:1d:b6:
                    30:d3:2d:8e:f4:ed:f9:8a:69:ff:9b:e6:ba:e9:65:
                    f4:23:0e:6e:be:24:90:08:61:55:76:95:db:fa:e9:
                    a1:9b:16:1f:9d:b9:dd:09:05:e3:f0:69:a4:dc:ef:
                    4b:2f:53:68:d6:e0:63:f7:0e:03:73:c7:40:06:57:
                    b4:7c:a7:77:17:12:8b:44:9b:76:57:d9:91:bb:cc:
                    dc:30:ae:8f:0e:8e:b9:f5:60:3c:91:92:fe:8c:f2:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:01:0E:98:6C:DB:C8:46:89:CF:7E:1C:C7:42:CD:2D:C9:14:2B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:0a:14:8b:3c:a4:a8:34:a8:e4:7d:22:2e:36:dd:37:42:
         ec:45:9a:66:99:6b:74:00:af:64:0f:40:98:2e:48:a9:cb:1c:
         d3:6b:ea:57:0f:6c:82:04:6e:4c:0f:07:72:3a:e2:8c:51:45:
         25:52:77:34:24:62:69:24:47:48:a0:b7:12:bf:fb:25:f6:53:
         ea:47:6a:81:25:79:34:f1:e4:16:dc:b6:2c:de:e5:46:ae:7b:
         bd:38:76:e0:3b:92:61:76:17:58:19:a5:aa:c0:5d:e8:e9:9f:
         33:76:c7:52:7d:90:0b:9f:05:be:d3:6b:2f:4c:c4:9f:c4:2a:
         f2:a8:6d:c2:17:97:8b:3e:b4:97:72:07:5d:dc:11:20:27:e5:
         36:76:13:0d:e2:6c:ff:fc:dc:42:d4:f9:84:a2:9a:55:2e:e3:
         20:23:e4:21:0c:65:ab:71:a9:e8:10:c0:30:c7:1e:16:89:29:
         8f:06:1f:67:80:4c:ff:be:87:63:bb:3e:bd:fe:89:de:15:9c:
         79:4f:87:a6:8c:40:da:42:e3:47:d3:d6:7f:20:1f:29:bc:a6:
         c6:96:78:2c:a5:4b:4a:2d:9c:74:a9:69:86:20:a3:8f:84:99:
         94:a7:62:f9:33:cd:f4:8e:e2:32:8d:04:25:f0:42:20:63:3f:
         9b:aa:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:37 2024 by rpki-client on console-fra.rpki-client.org