Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527e0cd3-65f3-331d-93d6-de36381ff6c7.roa
File:                     527e0cd3-65f3-331d-93d6-de36381ff6c7.roa (raw, json)
Hash identifier:          RjrfQWkDE4NfiqN6hJL8lc4A6abc3jcu/0ADtwEQwI0=
Subject key identifier:   14:56:BF:FF:66:44:D2:1D:EF:4D:74:E2:C4:CD:8F:DF:A3:77:33:6F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CB29500AE259F1903B2E9400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527e0cd3-65f3-331d-93d6-de36381ff6c7.roa
Signing time:             Wed 06 Nov 2024 21:52:17 +0000
ROA not before:           Wed 06 Nov 2024 21:52:17 +0000
ROA not after:            Tue 04 Feb 2025 21:52:17 +0000
asID:                     5714
IP address blocks:        206.164.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cb:29:50:0a:e2:59:f1:90:3b:2e:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  6 21:52:17 2024 GMT
            Not After : Feb  4 21:52:17 2025 GMT
        Subject: CN=5203c8d0-f876-41eb-a5d6-f7af68c23a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:a6:a1:a9:36:50:4a:43:94:3e:ef:23:88:
                    f0:e0:aa:23:be:60:c8:26:f8:f3:2d:3f:a4:33:dd:
                    54:3d:50:ff:7d:d8:18:6c:62:1a:31:41:7f:9c:45:
                    fe:d4:fa:0e:7e:8b:26:db:db:a4:5e:f1:50:61:66:
                    0a:7b:6c:ed:ca:ce:bf:44:67:81:32:f3:bd:b1:43:
                    d9:1f:b2:ca:47:5e:32:64:d8:39:3d:0c:28:7b:84:
                    f0:05:8c:d1:80:7a:98:ca:5d:ac:e1:24:cf:c5:00:
                    e2:91:78:1c:47:cf:d0:b2:06:3a:f2:54:3a:f7:96:
                    59:83:cf:5d:c7:1b:bb:d5:e0:6c:7f:cb:28:6a:ba:
                    73:28:24:a2:8b:e4:1d:a1:38:6c:ce:60:ac:8b:04:
                    12:3e:ff:39:f6:7a:76:0f:58:c9:67:ab:f3:97:bd:
                    a7:08:cf:85:f9:63:90:57:7d:db:bd:1f:00:b7:02:
                    ce:02:a5:36:2b:54:36:fe:8a:49:e5:6b:a5:d5:66:
                    e0:1d:a7:79:72:ec:c6:71:83:d7:48:57:8a:d1:a5:
                    a5:50:86:51:f5:1a:c1:37:b7:4d:ff:c8:7f:fc:16:
                    60:49:da:f8:c7:5c:4f:94:e2:4d:fe:a6:c3:af:48:
                    28:26:60:5c:83:6d:f7:b6:ed:09:f6:29:28:a5:af:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:56:BF:FF:66:44:D2:1D:EF:4D:74:E2:C4:CD:8F:DF:A3:77:33:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527e0cd3-65f3-331d-93d6-de36381ff6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fc:b1:04:96:31:a0:de:06:db:a5:82:59:93:e2:02:58:27:
         24:36:fd:54:59:56:36:17:c2:b3:ae:b8:36:8d:0f:58:7c:b0:
         18:8b:25:c9:0e:4b:1f:b4:61:58:b2:72:41:de:24:0b:63:d9:
         a8:af:50:a4:7a:7d:9a:57:42:9d:4e:9b:c7:3b:0f:b6:ec:76:
         d3:4f:f7:43:41:c5:5e:77:90:c5:39:99:85:67:a8:ce:42:94:
         aa:48:ad:e0:11:9b:f4:c2:d8:d5:6e:20:b8:48:ba:14:e8:23:
         f1:4d:47:48:40:2d:60:7b:45:3f:4e:af:9d:81:2f:26:40:84:
         1f:c1:76:60:39:50:58:ae:1f:a1:eb:ea:14:fa:7d:45:e5:1f:
         dc:3f:32:43:63:a0:48:8a:d8:d9:82:02:39:77:9b:51:12:4d:
         ed:e8:3a:c1:28:40:eb:1c:c2:ab:f0:ec:ed:ca:bd:49:37:b1:
         20:f6:b0:ab:d1:51:32:ad:51:54:3b:cf:9a:43:e1:83:f9:4c:
         70:9f:bb:c7:0f:ca:bc:25:e5:dc:11:9e:ce:6c:5e:8e:55:88:
         dc:73:a5:00:17:84:b5:e3:8d:9b:05:1d:4b:3c:5d:46:ac:47:
         e9:18:02:9d:2c:d2:43:b5:05:ee:b6:78:47:55:0d:ae:2c:e9:
         32:13:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:39 2024 by rpki-client on console-fra.rpki-client.org