Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2a78fe4f-75aa-3d8a-9550-5a65deb818f0.roa
File:                     2a78fe4f-75aa-3d8a-9550-5a65deb818f0.roa (raw, json)
Hash identifier:          DNTTbeoWNwlkjRd8fcTcTjvnOlZZ1o7WCsn50ccjnWU=
Subject key identifier:   54:78:47:E8:6A:53:6B:EE:D6:FF:97:8F:D7:18:13:AE:D1:36:AE:2D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845DEC9480FB9BE91632E7FA680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2a78fe4f-75aa-3d8a-9550-5a65deb818f0.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     393249
IP address blocks:        206.12.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:48:0f:b9:be:91:63:2e:7f:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=6ecf20ee-7880-45b4-b0d6-4d4d6bb77340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:8b:55:e4:66:c5:7e:86:6c:a1:53:66:0b:
                    4b:b4:3c:d9:75:ea:fa:53:cb:1e:67:c2:54:04:c5:
                    c8:6e:64:06:dd:00:13:ec:17:79:d1:b5:1f:60:02:
                    04:80:bb:1c:81:1a:65:8d:0b:50:33:4b:4b:44:2f:
                    78:89:df:8b:a9:e1:fb:5d:83:13:16:0e:0c:c0:dc:
                    39:f5:a8:94:c3:d8:08:75:83:e2:e5:b4:92:25:b7:
                    da:b2:31:2f:bf:64:68:06:00:19:3e:6f:1e:58:c6:
                    f5:81:43:98:52:98:74:1b:5b:d1:8e:50:98:d2:9a:
                    08:d7:63:08:4b:c6:80:76:c8:49:bf:66:62:77:33:
                    15:65:eb:6e:9d:79:8e:fc:1f:6b:af:d9:69:10:93:
                    f8:cd:ea:02:42:c4:be:47:20:09:d5:20:4a:ee:87:
                    c8:ab:19:d6:95:9e:5e:33:c3:5c:99:5f:ef:45:fd:
                    5e:a6:82:66:d6:24:fc:bc:47:b4:a6:11:7e:af:f6:
                    d7:7a:4a:a9:24:72:c5:80:01:2e:3c:f7:bf:b9:aa:
                    f9:5a:eb:c6:84:28:c7:49:66:0c:8b:5e:c1:86:94:
                    13:78:02:9b:0a:c8:8c:ae:b1:92:b3:15:5f:58:63:
                    37:e1:f3:f0:e2:cb:4c:e2:ae:83:82:24:d2:89:1d:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:47:E8:6A:53:6B:EE:D6:FF:97:8F:D7:18:13:AE:D1:36:AE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2a78fe4f-75aa-3d8a-9550-5a65deb818f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:f5:cc:98:38:d0:5e:d5:15:57:f3:0d:22:0e:7c:71:f3:
         c8:5b:bd:f6:78:61:bf:18:b5:49:16:87:96:05:25:a0:df:3e:
         9d:e0:aa:fb:6c:8d:80:2c:ca:25:5d:75:e2:69:7f:15:ad:5b:
         99:5c:aa:9e:00:ec:2d:11:09:b9:3a:c9:97:bd:60:5d:aa:92:
         ab:da:43:fb:d1:c6:26:1d:1f:20:aa:20:6c:65:62:85:67:c8:
         31:47:9d:4c:64:a2:ce:dc:26:0e:7b:53:d6:8b:89:4c:f9:86:
         df:24:7f:2a:3d:39:fe:5e:13:f7:22:9d:1e:76:e3:a1:65:5a:
         0c:21:76:6a:e0:8c:b9:2b:e1:4c:98:c1:c5:0b:80:5d:b8:bb:
         3b:5e:cb:43:af:95:70:e6:39:ab:be:ec:ac:8f:15:f7:41:c1:
         32:4e:70:dd:f0:e3:c7:9c:09:da:82:91:ec:88:50:3f:91:76:
         8d:ca:06:7e:cc:ec:90:aa:05:66:66:9b:a7:64:e4:85:58:df:
         2a:36:75:58:db:d6:f6:84:b6:a5:2b:c5:93:d8:81:27:e2:d1:
         06:03:4b:1d:c4:80:32:ee:17:01:e7:1b:36:e5:71:ea:1c:5a:
         bb:e2:b0:69:1e:60:d1:cb:3a:63:ad:5e:57:63:d6:4b:d1:35:
         b2:79:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:46:59 2024 by rpki-client on console-fra.rpki-client.org