Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/36866bcb-5746-3fa2-b820-1bcfed75a161.roa
File:                     36866bcb-5746-3fa2-b820-1bcfed75a161.roa (raw, json)
Hash identifier:          DtzPPkMyW4M+umCtlVBKJl49LdEQHXFdrLRw1LMkpd0=
Subject key identifier:   E7:C1:21:D4:26:F7:F1:72:47:72:F2:35:AA:E6:A3:71:99:70:95:63
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858479D76C1F5EF7856FC17472C20
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/36866bcb-5746-3fa2-b820-1bcfed75a161.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        206.12.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c1:f5:ef:78:56:fc:17:47:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3cc1e47f-f987-4fbd-909d-fab6b8d5e64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:5e:53:da:25:19:6b:0f:52:c5:5b:82:37:
                    75:46:0c:cc:f3:27:8f:b0:b4:70:f1:6e:a3:22:97:
                    b7:ac:98:a3:0d:59:6d:9f:06:0d:85:7c:0d:5c:eb:
                    bf:a6:7b:e8:40:3e:f7:a9:b2:a9:32:a2:74:80:45:
                    fa:20:15:6f:26:70:e9:5d:80:a5:c8:33:f2:36:ff:
                    3b:0f:4c:e7:c7:47:3e:08:b7:03:37:25:0e:a4:2c:
                    a5:d7:de:ca:73:e3:99:d2:62:82:e4:ff:e5:43:e2:
                    e0:a5:3b:52:91:87:68:f7:58:38:f2:86:1f:a3:60:
                    03:14:9c:01:03:f2:00:af:74:5e:77:22:b3:f2:70:
                    f0:57:a7:33:b9:5c:7c:34:c2:f3:9b:0b:b8:6a:6b:
                    24:c6:e2:42:c5:39:87:88:dd:50:3f:47:d8:71:cc:
                    9c:8e:56:33:bc:07:6e:3a:81:70:23:43:d6:ce:39:
                    a7:b3:a3:6f:25:f4:56:d6:95:ad:ba:16:b9:a9:97:
                    e1:f0:2f:07:f2:90:3f:a4:45:16:72:be:21:e2:12:
                    53:5d:c6:5c:7e:f7:b6:93:85:c5:80:f4:c3:7f:ec:
                    88:49:4a:dc:32:73:01:38:9a:fe:5f:f8:85:f2:52:
                    83:86:2f:a0:23:3d:65:e2:fe:37:2c:58:d6:b0:cd:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:21:D4:26:F7:F1:72:47:72:F2:35:AA:E6:A3:71:99:70:95:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/36866bcb-5746-3fa2-b820-1bcfed75a161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:aa:7e:73:bb:f5:91:0a:d2:41:3f:6a:12:36:23:6e:74:
         3d:c2:a5:8b:27:48:f6:ff:80:41:60:46:34:80:dd:7c:35:86:
         aa:28:8b:ba:2a:d5:02:21:7b:cb:76:18:c7:b3:4b:9e:bd:08:
         62:ce:ba:5a:02:72:45:b8:51:df:a6:d5:ba:2d:a1:bd:5b:e3:
         04:dc:9e:71:45:5c:be:fe:43:bb:dc:78:63:47:84:c2:ed:1c:
         c5:4b:07:e8:64:3d:12:ca:ca:62:8d:9e:70:33:26:18:17:1b:
         a1:1e:f6:76:8f:1b:7d:80:68:e3:48:b9:3f:80:00:40:28:97:
         e1:d4:4f:26:1e:48:f2:9f:bc:bf:2f:8f:fc:c4:bf:44:7a:92:
         f7:a0:b3:1c:59:f5:d9:f3:6f:87:e4:1c:73:20:e1:11:f6:dc:
         27:d0:5d:c2:be:a0:6b:57:81:81:a2:0a:16:fc:b7:3e:82:93:
         63:85:f8:a1:d2:b4:d6:a9:f9:68:a9:4e:20:be:54:2a:18:74:
         79:1c:9b:79:7b:e3:f6:11:3a:ea:75:c1:84:20:d5:6b:15:bd:
         bb:dd:72:09:ba:ae:05:b7:e4:00:c4:a0:12:66:17:20:8f:ea:
         9c:84:21:ce:3b:15:89:46:bf:c3:25:04:bd:f8:4d:2f:d4:c3:
         88:69:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org