Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa
File:                     6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa (raw, json)
Hash identifier:          IZgXDiWIT9pU2yOLWIHF0n7kdd0e1C/51gKiLxfRRvg=
Subject key identifier:   BA:AD:DB:59:19:BC:07:3E:01:BE:FB:A4:97:A1:7A:AC:DD:32:E3:EC
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285845777DBEFBD248D6FE138C4A00
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     398068
IP address blocks:        206.227.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:be:fb:d2:48:d6:fe:13:8c:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=1942b6ce-5c40-4a9a-94be-008e8cd258f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:57:86:09:68:ed:bf:a7:a9:2b:71:66:4e:
                    fa:9a:3c:cc:fc:ba:32:4d:63:b5:e5:25:fa:e5:72:
                    d3:f5:6b:3e:2c:27:b8:14:4f:32:02:10:62:93:96:
                    dd:01:d7:35:0d:b0:60:57:a7:ee:13:38:93:5f:77:
                    98:d9:d2:89:a2:cd:ec:8c:42:e9:e1:c9:61:ea:65:
                    0b:c0:0c:48:eb:43:ea:d1:9e:48:25:7a:f1:86:5c:
                    88:21:3f:b4:70:a3:22:3f:ff:ae:20:c1:e3:ab:f0:
                    3f:51:6e:24:9a:7c:9a:e9:db:68:cc:23:f2:0e:4d:
                    08:4f:c1:e4:03:f7:24:6d:50:74:f7:9c:ce:6a:32:
                    04:f9:de:cf:b2:ff:3a:11:bc:f0:21:f7:f6:31:82:
                    7a:03:54:e0:73:19:85:13:35:10:43:ac:08:7e:1a:
                    0e:22:77:c1:6b:a9:cc:09:3d:f2:9a:a7:67:97:38:
                    b9:61:af:f1:44:b8:e4:38:2e:36:78:3b:75:a0:4f:
                    0b:e7:26:08:67:64:95:3d:00:f8:5b:ea:04:88:00:
                    ca:7d:11:d5:03:cc:bc:36:b4:0b:dd:cd:a3:ea:62:
                    8f:dc:cd:40:c6:bb:bc:e2:d2:02:c3:ac:d4:46:ef:
                    2e:de:e1:37:24:c3:b8:76:66:25:31:70:79:ab:df:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:DB:59:19:BC:07:3E:01:BE:FB:A4:97:A1:7A:AC:DD:32:E3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6ecc47f2-bdfb-39b3-8ab0-b74c2c2388c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:d2:77:ad:5c:8a:d2:f9:b3:1f:92:88:07:a5:2d:68:fd:
         81:c9:68:0d:20:33:46:85:ca:8d:4c:b6:dd:d0:26:23:72:8c:
         10:0b:33:21:a9:e6:a0:e5:61:b5:86:fe:d3:02:65:50:95:e0:
         ea:c3:8e:ea:d0:02:e8:0d:75:50:9f:0c:74:55:f8:da:a5:43:
         81:db:f0:94:ed:a4:83:f2:77:b6:aa:d7:8e:43:93:21:0d:68:
         5d:68:21:af:da:79:82:d2:ca:9e:17:35:0d:fb:e9:65:d8:b9:
         f9:67:ad:73:9f:6b:e5:a4:e2:13:0b:b6:dd:d9:50:0c:87:e8:
         97:e1:2c:b6:26:50:c0:ec:7d:e9:35:e0:16:e9:0d:12:33:c5:
         a1:7c:13:8c:50:fb:7e:fd:42:84:88:d9:e0:7d:dc:3e:42:7e:
         78:c2:1a:d9:a3:a0:ca:89:65:7d:7d:c8:17:28:94:a2:7e:0c:
         3d:2d:ac:a7:fd:9e:65:60:0a:c2:72:c5:65:30:21:14:4f:22:
         f0:69:29:12:10:ea:c0:9c:dc:27:25:e6:9b:20:1c:5e:58:07:
         a7:b4:c8:d5:6f:8a:6b:12:56:fd:f5:ea:2e:42:59:c7:4c:fb:
         10:4d:46:b5:a7:62:cf:fc:9f:4c:89:09:b1:ac:a8:a8:24:a6:
         a0:3d:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:19:19 2024 by rpki-client on console-ams.rpki-client.org