Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/b340bfd7-0af8-3e78-8463-41e35c209b78.roa
File:                     b340bfd7-0af8-3e78-8463-41e35c209b78.roa (raw, json)
Hash identifier:          TYzQymJ/4u46ZhuJS/K8jVwN0p8BxWADnlQi+6O+DxM=
Subject key identifier:   6A:94:45:0D:39:10:67:E8:65:0A:1D:59:60:4D:B0:34:25:10:B6:06
Certificate issuer:       /CN=060abe91-ae00-46c9-a9b7-b46f0b295194
Certificate serial:       010D0C9F43285847A0414E4E836CCB289BC8FD80
Authority key identifier: D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/b340bfd7-0af8-3e78-8463-41e35c209b78.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     32250
IP address blocks:        205.189.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4e:4e:83:6c:cb:28:9b:c8:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060abe91-ae00-46c9-a9b7-b46f0b295194
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=cc9bfd56-1a65-4b34-80f4-6aa42a463115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:4f:dd:64:f1:4c:d8:9d:9b:3f:bb:bc:8a:
                    9e:c8:ee:56:de:21:0e:f7:47:b9:52:73:88:37:56:
                    c9:41:22:f0:12:e3:6a:c7:1a:cd:cb:fd:73:a3:97:
                    92:db:06:b6:54:82:38:bb:d3:16:88:d2:2f:dc:26:
                    7d:99:35:a7:d0:ad:65:07:ea:3a:a7:3b:83:dd:bb:
                    55:3c:5e:a7:f1:5e:f2:3e:dd:2d:44:cd:27:ce:cc:
                    5f:a0:8c:64:3d:73:b3:c2:a6:29:66:df:51:cd:f1:
                    5b:85:bc:b0:ce:94:91:a9:8c:ff:d0:6d:71:65:43:
                    85:54:0c:fc:46:52:00:35:82:86:28:69:45:a6:40:
                    24:1b:33:d2:40:e8:6a:3e:63:19:ee:d7:50:f6:b8:
                    eb:a9:60:1d:48:f5:3d:48:f1:76:e1:26:67:80:37:
                    02:6c:c5:db:a6:79:be:a6:02:7d:a9:10:3a:06:dd:
                    e1:51:a7:19:3d:4d:a4:67:80:d6:ff:f4:4d:c2:65:
                    c5:c6:66:d0:ea:4f:3a:39:f4:59:52:83:ae:2c:4c:
                    bd:f5:8c:48:e3:a6:bf:39:7b:d8:b6:65:c8:2a:63:
                    c4:fa:89:e7:85:de:51:3b:c9:e6:aa:ce:92:a6:3d:
                    ef:43:44:c5:00:64:21:53:dc:6f:d3:1f:1b:16:73:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:94:45:0D:39:10:67:E8:65:0A:1D:59:60:4D:B0:34:25:10:B6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/b340bfd7-0af8-3e78-8463-41e35c209b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.crl

            X509v3 Authority Key Identifier:
                keyid:D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.189.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:55:d1:88:c2:56:c2:27:83:69:02:df:66:22:9d:e9:8c:
         92:0d:6b:10:9d:43:c2:e0:8d:e4:d4:74:5b:81:11:95:98:26:
         f1:a7:4d:d0:cc:c5:35:07:1f:94:35:32:ec:99:f4:fd:47:5d:
         b7:60:75:e1:d0:2b:bc:9d:f9:c9:7f:a1:e3:8a:67:4d:d9:f3:
         a3:03:bb:9d:25:1e:4c:1e:2b:7c:13:b3:85:56:78:19:43:c0:
         c1:47:91:69:b1:94:eb:d8:6e:b1:98:52:38:37:49:75:a8:20:
         78:97:1d:a4:02:8e:de:f2:f7:fb:05:60:9f:70:7c:5c:2b:33:
         ec:16:64:22:56:6f:7d:be:3a:59:9f:f6:7d:c5:8f:ea:d5:54:
         b8:ac:36:0a:40:bd:15:95:10:77:b4:d2:fd:23:c0:60:53:5e:
         bd:d2:2b:4e:55:59:4e:a9:2c:18:73:c7:4d:2a:2a:c5:4b:6c:
         e3:e2:dc:3d:eb:fa:18:7a:78:38:49:07:0c:6b:37:f9:74:61:
         49:5d:61:65:f9:3c:f4:00:a1:b7:2c:86:87:56:9a:d0:cd:a0:
         0d:6e:ae:3a:bc:99:11:78:da:ea:e9:35:e6:a0:ee:d9:c7:da:
         db:ce:88:4e:71:d8:4c:1a:21:e5:c2:a7:a8:38:1f:32:1e:ab:
         e5:3e:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:38 2024 by rpki-client on console-fra.rpki-client.org