Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa
File:                     7285b1a1-ccbc-3639-a962-652ca4939af8.roa (raw, json)
Hash identifier:          HL6+hOwDRzDKjyWp5T1i4s556FS+pA3/BE0H+ZPtnJg=
Subject key identifier:   D5:9A:29:58:E9:14:1E:0C:D8:8C:6E:2E:4B:AD:A2:C4:C0:7D:95:F4
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845B21E29574FBC627E316B06D0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     46261
IP address blocks:        206.127.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:29:57:4f:bc:62:7e:31:6b:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=88205076-16a7-4b33-9cd6-4f29f9f88c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:5b:73:cd:dd:c1:ec:1d:e9:67:4b:35:4e:
                    39:f4:a3:d1:f7:c3:83:70:e5:2a:cc:df:5c:e5:be:
                    12:7b:a3:b2:9b:71:92:63:e8:52:39:f2:5f:fa:2a:
                    a1:5e:2c:8f:49:25:70:53:b6:c3:07:1b:a6:b6:ce:
                    d7:69:93:7d:db:ae:4e:3b:d1:e4:52:f6:3c:bb:9d:
                    f3:50:0e:56:67:4e:9e:bb:b1:ee:a9:ff:79:ca:c3:
                    31:eb:c1:e0:c8:31:f7:c5:fa:92:55:59:cb:ee:e2:
                    3e:63:21:b3:b9:18:4c:f0:9c:cb:4f:b9:f3:16:e0:
                    13:6c:bc:59:6a:f6:6d:49:22:d2:a0:ea:f6:cf:6d:
                    09:ca:62:f4:7f:4e:d3:9b:47:5d:b4:26:b6:95:48:
                    79:14:01:e5:e1:dd:da:39:91:90:56:7c:b6:d2:38:
                    bd:d1:34:d7:7c:7a:68:de:e8:3c:59:d6:da:94:2c:
                    fe:cd:d8:a0:78:f3:39:23:4f:02:d4:bd:ab:5b:16:
                    2b:c4:cd:98:29:c3:db:03:74:7d:6a:24:fc:e7:a8:
                    05:fc:c6:36:48:8e:57:14:8b:21:de:19:0f:cb:db:
                    1b:e2:03:28:08:61:ea:31:5a:af:8b:81:68:90:fc:
                    87:8b:3b:44:24:43:92:63:59:39:62:10:e8:c6:33:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9A:29:58:E9:14:1E:0C:D8:8C:6E:2E:4B:AD:A2:C4:C0:7D:95:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:ef:cf:b8:0a:82:19:cb:2b:fc:9b:5f:91:29:76:73:6c:
         b6:28:57:56:77:51:fd:67:8a:b8:35:5e:c4:94:d5:bc:7a:67:
         40:ff:09:0c:ef:a6:0e:36:f9:89:e4:b7:d1:70:11:9e:39:0b:
         46:29:43:f0:b1:83:c9:46:80:d3:0f:7c:86:e7:cc:4f:0a:b8:
         9a:bd:55:13:cf:ab:b5:d3:e7:a6:cd:23:25:90:9a:ab:e1:aa:
         1f:9c:86:bd:ed:13:71:19:55:bc:05:8c:c1:59:e5:fb:f1:eb:
         f2:03:1c:49:d0:01:55:dd:df:15:45:f9:85:b1:3f:6a:7d:f5:
         c8:e7:75:c5:01:38:c7:7e:42:8c:87:c1:70:0c:bc:09:01:0b:
         7f:25:ce:45:da:6a:33:b1:5f:0e:69:8e:9c:5a:70:a3:50:bc:
         23:90:bf:16:54:2c:65:13:a5:e0:5c:32:5c:ea:49:a6:4f:e8:
         42:ee:c2:7a:ee:9b:89:0e:d6:e2:b5:af:e6:0b:6a:8e:43:74:
         c3:ac:5b:30:0b:55:81:b9:84:8d:80:e4:96:9d:e7:17:a5:07:
         79:73:44:8b:e9:41:a8:15:ea:ef:8d:58:3b:9f:53:6b:a7:1a:
         e9:3b:9e:f9:e1:bf:4d:f1:a9:5c:f8:66:d5:8c:64:b8:8f:ef:
         a4:d9:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:00 2024 by rpki-client on console-fra.rpki-client.org