Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2bb00c34-0435-3722-b647-544ad735c1e4.roa
File:                     2bb00c34-0435-3722-b647-544ad735c1e4.roa (raw, json)
Hash identifier:          mntL0G+yE5M3OA9FkDRSR63In00buSWwS8n3LqByRUQ=
Subject key identifier:   B0:5A:36:12:B0:71:28:23:6A:25:C8:A3:0B:6A:10:23:C2:C4:F4:E8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845B21E296E20C916D7FE715D80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2bb00c34-0435-3722-b647-544ad735c1e4.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     35758
IP address blocks:        206.127.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:29:6e:20:c9:16:d7:fe:71:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=6f1f5388-bd54-4dd9-b961-580b6d76a614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:83:17:db:51:dd:cf:b8:d9:7d:e6:dd:2d:
                    8b:9e:04:19:d3:05:9d:11:71:d2:a9:a6:a9:5d:87:
                    65:96:19:2f:8d:16:30:01:26:2c:26:09:e4:78:c8:
                    a9:dd:7f:f8:de:f1:ba:81:4b:2c:08:31:49:6e:6b:
                    d7:4f:36:e3:b1:3d:ff:9f:ac:f3:b3:12:01:ef:1e:
                    e8:d9:d2:d6:75:10:2f:2a:d3:7f:e1:25:c5:7f:7d:
                    1f:19:de:38:08:4d:b4:0c:a8:c5:c3:e6:40:43:f1:
                    fb:9f:aa:56:2f:23:e8:ac:72:93:6e:c0:40:e9:3e:
                    01:2d:15:26:0e:8f:b1:e5:ac:0b:24:26:f4:dc:11:
                    3f:7e:fb:58:a7:97:eb:08:77:a6:09:7b:e6:f1:e0:
                    59:cb:1c:4e:a1:8d:a9:c9:a9:c7:9a:19:60:67:31:
                    5f:c0:d8:27:e2:9a:f7:42:87:95:bd:22:a9:94:15:
                    6f:ec:03:a0:8e:1d:61:21:b6:9c:dc:e2:53:f1:11:
                    6d:18:44:7e:b4:27:4f:28:c2:5f:17:d2:7a:92:d1:
                    72:96:c9:06:8c:a7:59:7c:19:d7:d5:a2:0c:e2:85:
                    c0:fb:b8:81:25:11:98:25:0c:e2:98:1f:e5:f6:97:
                    b8:e5:b5:07:c8:dc:9b:72:32:d5:bc:d1:42:7d:ec:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5A:36:12:B0:71:28:23:6A:25:C8:A3:0B:6A:10:23:C2:C4:F4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2bb00c34-0435-3722-b647-544ad735c1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:60:cd:2b:c8:78:4c:a0:5b:c9:e3:96:4f:20:d2:26:10:
         95:c3:6a:d5:08:6b:7e:00:c7:0a:5a:e0:f5:a6:22:19:1a:8f:
         2c:1e:c0:cd:85:a9:10:45:a5:77:a1:80:10:65:39:b5:04:85:
         ac:bf:43:1e:d2:5a:65:40:04:87:98:7d:8e:e0:61:b5:6a:6f:
         35:72:5f:a2:d0:4d:41:cb:8e:03:8d:f5:df:f9:09:67:08:bf:
         56:3d:60:d9:53:12:8c:87:eb:20:e8:c1:24:cb:89:dc:54:47:
         3b:60:ef:88:44:c5:bf:28:f3:1e:fe:d3:85:1b:b5:37:dc:02:
         0e:e7:12:54:50:01:c5:7c:27:15:4e:ee:ee:9e:7c:93:7e:66:
         8a:b7:a0:d9:96:e5:8a:ea:e3:26:dc:03:e7:bc:21:a3:db:c1:
         f9:c8:6d:af:9f:0f:29:9f:0b:40:11:26:cc:8f:b6:51:43:71:
         34:32:e8:83:7b:9f:72:f2:e4:8a:d6:78:3c:d4:4a:32:46:de:
         0d:7e:bd:0b:91:8c:35:14:37:66:ec:d0:5e:86:81:2b:5e:0d:
         06:8e:10:34:46:b3:30:e0:d5:18:37:7c:b1:22:7c:a1:a9:03:
         83:6a:68:7c:37:91:22:91:9a:00:c6:7e:4b:64:9b:55:19:68:
         50:2b:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:36:56 2024 by rpki-client on console-ams.rpki-client.org