Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa
File:                     402d1434-f06e-3831-9fd6-20002d1cb7ab.roa (raw, json)
Hash identifier:          kjBLOIQCqzj8d8vS9p/uWkmRZMokHBEEMwBGvC9sg4k=
Subject key identifier:   C8:AB:32:D6:75:7C:1D:FA:1A:59:2D:30:F3:7A:A1:AE:7C:DE:CF:73
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858479D76C29F134348C47D549800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        206.87.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c2:9f:13:43:48:c4:7d:54:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3e45c061-1430-4057-b6b0-1cfea9334c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:c9:0b:de:84:ae:f6:ed:2c:2a:95:cc:5c:
                    ce:0d:86:3f:9f:66:70:09:26:cc:83:b4:d0:ba:9b:
                    f2:8f:55:f0:a2:3d:35:98:89:c6:ba:f9:6b:23:99:
                    cd:f7:43:fe:5a:43:48:63:7c:58:5c:3c:9a:3b:05:
                    a4:cf:e0:e1:ba:bc:a9:d3:a9:97:c1:ce:df:4e:c6:
                    31:03:76:01:6a:59:b5:53:a2:98:f4:62:55:8a:2c:
                    ad:9f:63:a2:0f:ae:c5:5c:77:9c:0c:ea:85:b9:b8:
                    0c:06:02:b4:92:c7:f2:10:ad:a8:de:f9:63:d5:81:
                    fc:bc:9d:ab:09:3e:20:db:51:5a:35:c9:8a:6d:59:
                    ed:02:d8:d1:bc:85:de:e5:3a:a5:a0:14:17:2a:20:
                    43:04:45:41:80:cd:62:63:88:96:59:9f:5b:c6:5c:
                    22:d9:8b:0d:fd:4b:b9:01:a2:0d:91:02:2a:ef:29:
                    18:c6:7d:24:47:bc:4a:48:54:7a:cd:19:89:19:79:
                    a7:d1:c1:be:03:19:8a:82:87:d9:f0:bd:38:c0:b8:
                    b0:57:f7:4c:c9:1e:16:29:94:ef:30:53:6e:8c:c6:
                    9a:4d:4a:01:fe:00:d0:7c:14:43:59:c5:cc:eb:59:
                    70:8a:58:2a:68:01:49:62:49:30:44:e0:3f:ec:ea:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:32:D6:75:7C:1D:FA:1A:59:2D:30:F3:7A:A1:AE:7C:DE:CF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:d4:c3:be:d4:c2:a4:5e:c6:43:5e:cf:97:66:eb:de:fd:
         6d:72:5a:50:e7:d4:08:c4:8b:b6:86:d8:b5:c6:02:5a:33:f0:
         9e:e8:6d:92:a8:ac:b0:3a:9f:ca:f5:5a:91:ab:1d:16:17:58:
         8e:d5:12:0c:60:ef:fa:bc:6d:8a:88:0a:5c:7e:bb:c6:6c:17:
         2a:88:cd:57:ee:1e:69:c1:ff:97:89:94:74:80:1b:dd:9b:6e:
         7f:45:db:ca:aa:76:25:bc:e5:b2:ca:a1:dc:bd:99:2a:fa:0b:
         8e:e0:fc:87:dd:2b:87:be:6b:7a:76:8c:29:37:ea:e5:a1:0b:
         72:ac:2a:26:db:0d:f1:d4:7d:72:3c:fa:a3:eb:2f:be:e1:41:
         65:0d:10:30:07:f8:82:c1:81:29:2b:5c:cb:72:3c:ab:62:fe:
         f8:df:12:47:b8:a2:0a:45:a8:30:91:ea:9e:33:a2:27:2e:ca:
         01:0b:44:f4:bb:f8:f7:28:df:e0:3a:0c:05:80:02:39:44:d4:
         e3:f1:6f:c6:d0:a4:89:f5:2a:25:f7:cc:b1:3a:43:79:a5:c1:
         69:79:50:2b:83:57:1c:06:68:ca:e0:8c:11:6e:18:2d:7e:65:
         12:7b:28:6f:43:da:a8:25:9c:c1:8b:47:cf:ed:08:31:ae:3f:
         9d:c6:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org