Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
File:                     1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa (raw, json)
Hash identifier:          wwl0GdFSgjQv5C/zdauYbuCKFFAGR08JYanTif9rptQ=
Subject key identifier:   C4:B4:FF:3B:53:82:C9:38:BE:D1:0C:99:95:22:3D:BB:50:63:9B:F5
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858475A763F554251977BD31F4800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     11105
IP address blocks:        206.12.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3f:55:42:51:97:7b:d3:1f:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=21986bda-b4be-4ac4-9dff-3d444ab03430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:36:57:86:e0:7b:65:77:13:e3:05:b1:d2:
                    e5:52:a5:5c:9f:78:20:3e:4c:f0:3f:e7:46:08:39:
                    7c:e7:f7:cf:57:07:6c:0c:3e:d1:7b:62:fa:62:9e:
                    6d:96:3e:f3:2f:8b:5a:13:c1:74:b7:02:0e:f9:d4:
                    a9:e5:22:c8:9c:37:9f:df:70:29:67:a2:51:0e:f3:
                    39:98:5d:92:81:59:26:7e:d0:4f:d9:1e:46:52:9c:
                    19:5d:55:42:b4:f7:7a:5f:9a:a4:f9:1e:42:ef:a8:
                    b4:99:f2:b5:5f:8c:08:f0:fa:26:38:af:fa:45:54:
                    3a:9e:e6:52:1e:ed:03:05:85:8b:a0:a6:eb:3b:0f:
                    2c:94:9b:a0:25:99:41:2d:d1:f5:d7:80:8c:ca:fe:
                    d7:51:62:5c:54:09:dd:32:f7:95:4e:8f:3b:a2:90:
                    a7:b6:6d:99:78:19:fa:e2:ad:67:ee:94:32:7e:6f:
                    38:f6:1d:2c:f4:f7:2a:bd:fb:54:ef:bc:57:17:00:
                    f3:dd:b2:ff:e3:52:85:b4:54:82:da:72:2e:19:a8:
                    58:34:39:74:cf:f5:c7:c3:93:0a:40:5a:55:79:50:
                    c4:c6:ac:4e:37:37:23:5c:a5:99:7a:de:26:a1:3d:
                    14:d2:48:0b:eb:f9:43:55:4e:0b:b0:1d:b0:39:cd:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B4:FF:3B:53:82:C9:38:BE:D1:0C:99:95:22:3D:BB:50:63:9B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:49:86:62:63:49:50:ea:82:cc:34:c3:ab:19:2c:0c:2d:
         ce:af:32:e0:9a:fe:d6:8e:55:5e:86:c4:ac:f4:b1:b3:ed:2a:
         77:48:01:68:e5:1e:4f:6e:c2:92:e6:c0:6f:e7:51:eb:e5:0e:
         76:92:16:a5:77:bf:7a:16:c6:75:5b:0f:9e:a5:90:af:d9:fd:
         fa:f4:7f:6c:9c:f4:78:7a:f3:f6:e2:eb:83:62:d9:2e:44:bd:
         c5:59:b3:0d:ea:b6:f3:04:23:3e:10:7e:a4:86:6d:c7:6d:b8:
         87:97:ec:b6:da:28:f5:aa:0e:71:ff:f8:00:31:a7:dd:44:33:
         9f:f4:66:b0:be:77:d2:af:00:b9:47:9a:5b:d6:85:15:c7:9c:
         21:af:9b:35:5a:4f:1b:7a:d0:58:23:68:9c:a0:49:74:1e:a9:
         58:a1:a8:7f:42:b4:e3:4f:c1:ee:14:4c:ea:18:a8:bd:52:38:
         24:d4:89:ff:40:e3:23:2e:86:a2:a7:14:a5:a2:c9:a9:04:94:
         f7:5d:93:c1:84:3a:69:57:4d:81:48:75:cc:f9:97:77:e6:cc:
         f8:e3:a8:d0:3a:bc:4b:ba:6a:ea:35:1e:bb:7a:68:b9:1c:a8:
         a9:c4:ff:c2:5c:29:ba:6c:1d:f4:21:74:56:af:ff:fa:c1:a5:
         f1:33:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org