Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa
File:                     5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa (raw, json)
Hash identifier:          jV53kRpKscC3kEarjv6Nq3inDeuUTYoh2V3JXXTm3GQ=
Subject key identifier:   95:B9:C7:D0:1F:DE:9E:E4:A3:8A:52:DE:EF:91:81:C5:12:38:50:41
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844D2E52BECD1B0E53C581E5D00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa
Signing time:             Thu 08 Feb 2024 14:00:33 +0000
ROA not before:           Thu 08 Feb 2024 14:00:33 +0000
ROA not after:            Wed 08 May 2024 13:00:33 +0000
asID:                     40676
IP address blocks:        206.127.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d2:e5:2b:ec:d1:b0:e5:3c:58:1e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb  8 14:00:33 2024 GMT
            Not After : May  8 13:00:33 2024 GMT
        Subject: CN=87e12fe9-383c-4711-9ea3-223d19d3df1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:97:9a:88:e0:cd:fa:27:31:7d:4e:94:b4:
                    d0:6a:84:a6:e1:92:90:bb:a2:39:69:9d:50:14:88:
                    d7:b0:23:08:b3:9c:f3:c8:bd:9f:57:d9:f6:77:6d:
                    f9:b0:50:c8:6e:ca:ec:5e:da:87:1d:a7:c0:30:0a:
                    9f:48:b5:9d:d7:7f:17:f7:f2:b4:7c:b0:68:88:c7:
                    c9:07:1d:56:c2:a1:91:48:00:32:ef:2c:e8:2b:6d:
                    bf:de:99:4d:6d:ca:c5:74:f8:9d:c9:f0:00:e4:9f:
                    98:39:6c:87:3d:14:d4:46:0d:98:ca:2d:0e:a0:83:
                    d0:1c:7e:eb:ac:2e:fb:ad:33:bd:54:23:26:d5:70:
                    a6:91:be:42:2e:7a:a9:f1:ab:40:e0:e4:cb:c1:ee:
                    47:a4:03:1e:1f:49:f0:ec:76:1e:e9:f6:8a:52:97:
                    7b:17:b5:d7:b3:c2:e1:f4:69:21:89:cc:95:43:ce:
                    a8:06:9b:c6:fb:48:f5:ad:d4:cb:a7:05:9c:a9:0d:
                    5c:34:4b:87:98:5f:cf:37:8d:10:a7:9f:a7:76:a4:
                    81:ab:b9:2b:9e:9f:55:34:54:b7:92:b9:aa:9a:3f:
                    78:e5:fa:07:25:77:24:53:d1:ad:9e:a2:00:04:99:
                    06:74:d5:2a:9f:17:6e:22:ca:68:b2:15:e2:cc:4c:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:C7:D0:1F:DE:9E:E4:A3:8A:52:DE:EF:91:81:C5:12:38:50:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:45:b5:0e:c8:c2:20:01:e6:57:a3:79:72:87:b6:31:50:
         af:43:e2:11:87:e3:42:ce:57:c1:eb:50:62:d7:cf:59:f7:ca:
         55:75:8d:d2:39:8c:fc:e5:d7:49:68:b7:1f:d5:29:82:ff:6f:
         fb:28:be:9a:05:5c:0a:2e:cb:6f:46:4c:43:3f:f4:3f:16:3c:
         8a:07:ec:dc:0a:69:dc:73:51:56:db:56:a6:a8:ac:4f:d0:c5:
         32:3a:64:8f:dd:12:32:39:06:1e:df:01:7f:5c:08:0b:61:cf:
         2f:30:c9:1f:64:f4:16:61:06:60:29:ee:3c:09:c1:03:05:d4:
         7c:8c:90:98:87:a7:1a:ee:95:8d:11:8f:5e:71:d5:e2:11:a1:
         9d:d9:f0:da:7b:5a:e0:6f:90:69:5c:a5:e2:e1:48:96:21:d0:
         55:2e:17:34:04:56:e7:5b:56:d0:c8:ff:4f:8f:76:53:40:4c:
         ba:9a:c9:44:00:64:c8:ad:18:b1:da:f2:2b:f4:64:9d:e6:b0:
         01:57:69:0c:83:f4:3f:b5:53:01:20:e4:35:fe:7f:ca:87:f3:
         e1:26:bb:ae:ba:ce:5d:c8:d5:fb:3d:c3:8e:ac:c5:60:86:e4:
         39:7f:39:e5:f9:c0:21:8c:1b:2d:d5:6d:a4:46:c5:46:06:a9:
         b0:e4:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:29:08 2024 by rpki-client on console-fra.rpki-client.org