Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa
File:                     26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa (raw, json)
Hash identifier:          XEchWW4E3w0CK7B4WiNphVrkg+AYPqfR4NkZIbXQeqU=
Subject key identifier:   61:9E:D9:7F:F4:A7:C5:AF:5A:54:14:FB:A1:65:56:23:3E:6F:41:77
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584769D0D04E80A195049B4C4300
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     14297
IP address blocks:        206.201.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d0:4e:80:a1:95:04:9b:4c:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=65b32e38-0575-4fb8-bec2-642d05343ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:a1:cb:d7:21:e1:da:32:a5:92:2f:d1:69:
                    6a:ec:bf:a3:37:04:94:b9:c4:f1:89:02:b9:1e:9d:
                    56:02:77:e2:9a:19:db:e5:4f:ea:65:fa:63:e1:6f:
                    8b:80:d0:4c:24:9c:91:de:cc:66:1c:e5:d9:c5:7f:
                    29:35:f0:ae:35:e4:40:e6:22:84:74:d9:3c:99:76:
                    85:a3:46:3f:fa:97:6f:ec:2b:0b:91:60:3c:67:74:
                    e5:27:79:0e:20:a3:53:20:c7:b1:03:72:20:b8:13:
                    21:a1:c6:6b:c2:3d:13:60:a5:81:73:08:87:6c:73:
                    3e:11:a0:f2:c8:71:fa:27:37:47:46:9c:16:fc:9f:
                    a1:65:e1:2d:7e:72:c3:73:62:30:d4:0b:d9:88:1f:
                    db:4c:9c:9b:1f:c2:20:31:90:7b:69:20:8b:fc:bd:
                    f5:da:77:17:22:9c:72:9e:a4:3b:4c:83:78:35:27:
                    ef:59:c7:b3:e6:aa:40:15:f4:d0:99:37:c6:75:fe:
                    1b:bc:51:40:41:c5:9e:75:42:2e:a8:2f:56:11:74:
                    09:f1:d4:41:7b:5f:96:ed:cf:36:8c:7b:ed:38:c7:
                    eb:66:92:04:9c:e1:83:c7:9d:15:b6:b1:ff:9a:e4:
                    d9:a5:64:ab:65:8b:41:dc:6d:33:a8:1b:fd:82:d6:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9E:D9:7F:F4:A7:C5:AF:5A:54:14:FB:A1:65:56:23:3E:6F:41:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:16:99:c6:2a:a6:ca:a8:42:f6:ce:24:c3:09:3f:3e:e8:9a:
         dc:bc:be:e6:e8:98:6e:c1:1d:f2:5a:43:cd:16:6e:fd:f5:76:
         8a:1a:c7:57:56:36:d4:f1:91:65:a5:c0:f7:6d:47:1a:91:22:
         6a:bf:f5:e3:05:0d:9c:52:b4:70:dd:2f:63:df:aa:5f:c6:2d:
         c6:3f:fc:77:8c:82:6d:d2:4e:3a:b5:df:7f:1c:69:88:42:bc:
         29:81:ba:35:ed:84:08:3f:f6:85:05:63:0b:4d:26:33:97:49:
         1b:46:69:6c:7f:ed:90:ee:98:61:e8:96:4d:33:94:59:85:24:
         46:2d:df:72:ec:8b:d0:d4:a5:3e:79:0d:28:bf:68:33:ab:d8:
         b1:1d:76:85:10:98:0d:41:da:6e:b7:28:7c:45:22:a6:df:e9:
         2a:60:43:9a:1a:f2:5e:22:dc:6e:41:db:4c:00:0d:59:69:63:
         db:0a:87:28:fc:ee:d1:fd:27:9e:51:08:51:67:6c:32:61:2e:
         ed:b3:09:eb:a0:e8:0c:21:59:7d:58:38:39:aa:7e:39:f3:d3:
         94:5e:04:8a:dc:93:4a:e1:8f:70:89:66:f0:66:00:77:f5:d2:
         cf:96:34:e5:a3:93:60:a4:8e:f1:36:2a:02:f4:d1:3b:4d:d4:
         35:11:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:52 2024 by rpki-client on console-fra.rpki-client.org