Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
File:                     936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa (raw, json)
Hash identifier:          vKNjrAuWgEx/vkahftwh8vbOpvQSzUEj4cnwtC7l80E=
Subject key identifier:   D6:3C:3B:DD:74:A8:4E:7B:19:BF:74:38:AE:59:67:3C:95:2F:A5:4C
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285844D01A758F4F938C7636C0BB8E
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
Signing time:             Wed 07 Feb 2024 14:00:29 +0000
ROA not before:           Wed 07 Feb 2024 14:00:29 +0000
ROA not after:            Tue 07 May 2024 13:00:29 +0000
asID:                     398071
IP address blocks:        206.227.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d0:1a:75:8f:4f:93:8c:76:36:c0:bb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Feb  7 14:00:29 2024 GMT
            Not After : May  7 13:00:29 2024 GMT
        Subject: CN=6b59aba8-22f5-43f4-b027-9cb98e4d96e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:6d:60:9c:c8:0d:52:4d:69:65:27:18:82:
                    0d:52:b6:ef:d0:51:e8:5d:c6:c0:f4:be:ab:17:04:
                    ce:11:1f:b2:79:ec:93:ac:45:38:8f:91:b7:47:c9:
                    75:ef:15:69:97:89:43:fc:41:54:19:b2:13:d4:72:
                    8e:3a:0f:e9:c6:d0:93:21:33:cc:38:1a:dd:d3:8d:
                    23:fd:60:5d:7d:20:ac:f5:f8:d8:f3:f5:51:79:0c:
                    bc:8e:09:d3:7e:f6:8e:06:06:fa:22:59:95:03:e4:
                    43:84:a4:aa:2e:8a:81:b2:bc:da:3d:39:9f:1e:b7:
                    0a:e2:29:9d:12:58:ea:0c:6f:c1:e8:45:4a:bc:c9:
                    51:f1:2c:ba:4d:5b:02:0c:93:2b:ca:34:e7:05:25:
                    95:37:7d:ba:96:24:42:82:c5:61:72:45:9c:a4:93:
                    8c:06:9d:06:2b:0f:2b:10:46:59:de:d0:e0:58:d1:
                    ab:82:a5:9f:01:4a:77:cf:a9:9e:d0:5d:a7:e7:87:
                    3d:00:6b:71:2e:16:87:6d:1a:fa:2a:ec:4e:ca:d2:
                    32:6b:2b:1b:86:b8:98:5f:06:da:34:94:31:08:aa:
                    f0:82:33:45:8f:df:ca:d1:79:a7:10:ef:bc:69:52:
                    17:04:5d:0f:a1:c9:d5:50:3e:18:8d:6d:2d:ed:bf:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3C:3B:DD:74:A8:4E:7B:19:BF:74:38:AE:59:67:3C:95:2F:A5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:89:28:0c:a0:56:31:42:5c:87:09:6e:77:b4:73:33:ce:bb:
         34:10:19:b8:e3:d7:b8:c0:6a:76:7c:f0:e9:0b:e1:03:e2:42:
         f7:99:18:4a:ad:70:17:6d:b1:62:ab:e5:ab:65:7b:62:bb:b9:
         50:56:79:b3:30:ca:cd:37:e4:37:96:0c:18:5c:f7:4f:48:fb:
         11:bd:ce:10:b4:11:68:9a:35:16:df:01:d2:47:31:a7:54:41:
         f2:99:17:7b:93:80:8e:5e:05:2c:bf:a1:d6:d2:76:1c:d6:1e:
         67:78:a7:ec:74:1b:34:87:3d:46:17:0d:e3:ab:7b:b9:c6:50:
         e1:2d:1d:a5:39:02:e7:d5:84:4e:90:49:65:a0:0c:29:cf:f5:
         c8:0d:3e:c5:17:b6:96:ab:42:57:df:80:46:e6:2e:ef:4a:5f:
         48:60:b1:2c:40:82:34:80:08:4a:fb:78:92:ad:c2:15:6f:76:
         75:9f:ad:be:09:85:a7:7e:9f:2b:ea:7b:8e:b9:f5:57:93:67:
         00:fb:25:99:d6:3d:e5:69:cf:d2:46:ca:fc:6b:9c:6b:83:e3:
         d9:d0:2f:74:05:c6:fb:ed:41:89:ca:b1:bd:cf:1a:b2:b6:f8:
         bb:17:0d:80:94:35:fc:54:3f:4c:ca:ce:d8:16:d7:e8:60:34:
         7c:1e:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:11 2024 by rpki-client on console-fra.rpki-client.org