Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
File:                     04bcb534-109e-3dec-a653-5e03796d1436.roa (raw, json)
Hash identifier:          kGLYXEbBIDI3A9nYlmXFTqb1D9+TndCMLxMy3d63zSA=
Subject key identifier:   61:F5:47:A4:8A:FE:89:15:47:F5:60:38:70:92:2F:E7:68:74:DD:08
Certificate issuer:       /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
Certificate serial:       010D0C9F4328584784567BCB80B325005951B920
Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     400764
IP address blocks:        206.223.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7b:cb:80:b3:25:00:59:51:b9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=c750872c-6822-4bca-aec5-025d3b26e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:c4:c6:ff:f8:c3:e8:82:2e:2d:85:a2:a8:
                    32:4e:bc:2b:e5:4b:2f:07:fe:17:26:ac:5d:5b:1f:
                    25:9a:f5:24:76:ba:16:1b:0a:89:02:57:cd:cf:dc:
                    69:45:6a:6d:0f:24:5b:8e:77:33:9b:1c:c0:68:2d:
                    40:12:68:8d:80:fa:58:d9:a3:39:86:e6:31:59:51:
                    f9:6d:c4:58:ef:2e:85:21:98:f1:bc:bf:0f:b5:7a:
                    d4:8a:2c:0c:11:92:31:ca:bc:eb:b8:5f:8b:17:dd:
                    24:1e:65:53:bd:2b:75:6c:a7:41:0e:77:2c:ac:42:
                    66:c1:40:3e:9a:d9:13:65:6e:f7:f6:e4:c0:b1:72:
                    af:2e:bd:3a:1b:ab:53:78:9d:f8:f6:29:99:ad:df:
                    b3:42:80:11:34:85:e2:06:e5:99:02:56:e1:16:fc:
                    96:b4:ba:5f:7d:ce:30:cd:07:5d:50:a4:a6:8f:fd:
                    5e:86:52:a5:16:84:b6:a5:b4:86:c1:19:39:24:33:
                    2d:e1:84:ea:d5:12:a0:bf:c4:c8:e3:d6:48:a5:87:
                    6e:f2:10:6f:45:c4:99:4e:a4:2c:5c:63:c8:b9:71:
                    1a:32:c2:89:20:c7:9f:78:6f:d0:0f:45:84:30:eb:
                    91:61:f7:b1:8e:81:6f:cc:d5:f8:07:fa:21:36:93:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F5:47:A4:8A:FE:89:15:47:F5:60:38:70:92:2F:E7:68:74:DD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl

            X509v3 Authority Key Identifier:
                keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:78:df:03:39:74:64:34:c0:8b:36:83:da:ec:7d:ca:cb:ad:
         1b:c4:2b:02:bb:cf:2f:79:b2:77:40:09:4c:52:07:f2:58:0e:
         50:79:f2:f9:29:0e:06:90:7d:0a:21:b6:4a:79:1a:c5:58:3d:
         a1:8c:68:8a:4c:8e:cd:0f:63:45:85:d3:47:2f:85:44:68:1c:
         70:0f:5d:9f:b5:33:b3:d1:3f:a5:37:8a:70:98:c2:69:5d:df:
         48:35:36:72:66:6b:10:ac:5d:75:87:a9:2e:f0:a4:3c:f3:33:
         a5:97:bc:1a:f2:6b:48:ab:3a:a3:48:db:7c:c2:5c:7f:bc:71:
         b8:f0:09:1d:d7:13:cf:da:25:50:94:f3:1c:06:d8:35:56:c2:
         75:ca:85:87:aa:71:eb:0e:f8:ec:a7:c1:d9:b5:92:86:81:6f:
         a1:de:15:39:84:cd:7a:68:82:6b:36:30:ae:2b:8e:a6:34:03:
         9a:a2:bd:0f:19:85:a8:f3:3f:ba:46:92:16:04:1e:bf:0e:5d:
         0c:6f:64:48:ee:e1:5c:80:a6:15:a9:92:f2:07:19:b9:79:78:
         f2:59:ba:18:fd:2f:d5:fd:e7:34:a5:ad:92:87:c2:a8:af:74:
         a6:ce:17:6a:f0:be:95:14:1b:b2:97:ff:42:4f:10:4a:2c:de:
         84:e1:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:06 2024 by rpki-client on console-ams.rpki-client.org