Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa
File:                     d3abd280-e5f9-3db9-b782-12d227437886.roa (raw, json)
Hash identifier:          Yp09StVZmG37eLPa371Kjyk02jyNPHtVPTSQ3BOPW5Q=
Subject key identifier:   91:3A:19:5F:7D:F8:8D:0D:EA:AF:CC:A1:91:CE:05:21:0A:48:DC:86
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F43285847E78F64B442DA8A040EE68E80
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     0
IP address blocks:        206.41.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:b4:42:da:8a:04:0e:e6:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=dddbe202-5cea-4aa3-a5e6-a935c3afab36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:cb:86:fb:df:a7:c8:7c:e3:bf:21:7d:e6:
                    1e:2e:71:a2:6b:26:e0:99:13:e7:e6:42:a4:a4:8c:
                    d8:27:9f:26:ff:07:f3:f8:84:ff:72:9b:88:1f:62:
                    86:6c:39:7c:85:83:5b:46:55:58:e4:d5:22:8d:af:
                    96:30:b4:dc:fc:cb:bb:0e:c9:9c:b9:cd:0b:55:9a:
                    51:41:de:22:ad:2d:09:23:0c:1f:59:00:ae:b3:40:
                    69:7b:ab:a0:fa:e4:b6:6a:38:4d:e5:91:7d:e0:94:
                    ff:2e:ef:1f:d4:93:de:c2:8a:ae:7d:8d:01:81:73:
                    d9:e6:bc:1a:5b:5e:e1:a0:41:3b:5f:cd:fa:86:32:
                    49:dc:08:92:24:45:2f:fc:b7:9e:fe:d6:0e:8b:97:
                    2f:6f:12:b2:5d:87:39:91:05:41:ec:15:34:aa:6f:
                    bc:06:14:e6:b6:bf:de:34:bf:ce:ac:f5:4c:a8:6a:
                    a8:7a:04:79:c8:68:1c:fc:db:e5:78:4c:e2:2e:f7:
                    19:cb:fd:e2:4e:a6:8b:50:5f:a4:d9:f9:3d:84:40:
                    0b:6a:a1:72:36:1f:82:5b:48:fd:8b:9f:66:97:9a:
                    23:8d:ea:4c:10:d5:b8:88:bb:17:74:d4:74:4b:d4:
                    a6:9c:19:d2:b5:dc:c5:1f:e1:61:70:eb:3b:86:56:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3A:19:5F:7D:F8:8D:0D:EA:AF:CC:A1:91:CE:05:21:0A:48:DC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:c4:99:6b:80:9c:de:8c:84:d8:bc:7e:5f:f2:aa:88:d5:
         1d:e3:b4:df:71:dc:2d:0a:21:18:92:5d:33:95:34:74:27:06:
         4e:75:bd:90:5a:e6:ac:23:ce:fa:88:80:d6:4c:4e:98:69:85:
         ee:10:32:85:0e:73:b2:b1:e8:3a:d5:3b:ee:93:fd:46:dc:49:
         d4:58:44:ab:7d:48:13:4a:a1:15:e4:00:73:3a:59:ee:26:0c:
         71:2a:81:66:7b:5e:d9:32:c4:ab:4e:a9:21:da:d0:38:68:08:
         e5:7d:ea:84:18:56:8d:20:d3:32:06:36:e0:a2:60:0f:2c:24:
         36:b2:77:fa:64:55:8a:a1:47:76:5d:f6:2b:ee:41:fd:c7:76:
         22:ed:dc:5c:ed:e1:d2:56:c3:83:ab:43:c3:56:37:de:1f:22:
         34:16:92:6e:64:1b:c4:c0:2e:ea:cf:7d:76:a7:dd:dd:b3:88:
         e3:b8:2d:46:54:a4:65:dd:5d:e2:14:bf:b2:76:d5:5e:46:45:
         10:9b:a0:3c:7d:6e:e7:08:f6:2b:1a:73:f0:5f:85:21:44:d9:
         e0:7d:22:b6:78:d4:37:29:c3:ba:8e:0d:58:be:61:7d:b1:3f:
         d8:9d:84:b2:3b:e8:94:76:cf:65:61:25:d1:5f:2b:00:36:9d:
         20:af:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org