Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/71244b69-4d6e-35df-ae1f-cd830167010f.roa
File:                     71244b69-4d6e-35df-ae1f-cd830167010f.roa (raw, json)
Hash identifier:          FCqMNiuNkY8WrFdbw2yF0k4RYFEKSqeRsdK7ga9jAB4=
Subject key identifier:   1F:21:D0:53:E1:97:9B:F7:B0:84:10:5B:FF:91:77:B3:99:03:CC:C2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858458F387800E3BC323BEEDC7D00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/71244b69-4d6e-35df-ae1f-cd830167010f.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     271
IP address blocks:        206.12.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:78:00:e3:bc:32:3b:ee:dc:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=b25d7c02-2eae-436e-8e5e-a57f3cba2874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:b4:04:0a:f1:4f:6d:20:b5:9d:c5:60:8d:
                    10:ca:b4:45:ff:d2:32:e9:3b:01:9c:21:0f:a6:d0:
                    2a:c0:5a:87:2c:c2:25:a2:b1:52:40:75:c6:40:5c:
                    c4:db:d2:af:92:a9:12:c9:a7:12:07:ba:67:93:d8:
                    b3:4d:48:90:2d:8f:b1:2b:35:b4:90:77:ca:3f:af:
                    b1:d1:21:d9:9b:7f:e3:31:ed:8a:e8:cf:4f:44:7d:
                    9b:7f:f7:3a:e0:ef:2a:31:13:21:28:91:7a:9a:fa:
                    63:eb:46:f4:98:79:e2:a1:78:18:48:6e:69:c9:52:
                    bb:6d:48:a4:f5:4d:ea:c8:f0:e7:21:bb:1b:05:be:
                    11:e7:9e:6e:64:4e:57:c0:66:15:e1:17:74:5a:6b:
                    50:5f:a0:90:9e:ed:82:d1:e0:17:c2:c1:c8:a8:d7:
                    6c:3f:f4:c4:77:3c:f1:fc:4d:6c:ee:82:ec:c0:b5:
                    65:fe:03:6a:be:a6:3d:75:c6:d9:56:d7:6c:21:3c:
                    7a:b6:ec:81:77:b7:eb:c0:1a:6a:51:aa:29:85:20:
                    a0:ac:45:34:91:5b:61:e5:88:fd:f9:04:fe:a7:d6:
                    74:91:63:16:77:74:47:8a:89:e4:ea:95:bc:f3:95:
                    de:da:ed:d7:da:00:9c:52:72:c8:0d:52:7b:ed:7d:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:D0:53:E1:97:9B:F7:B0:84:10:5B:FF:91:77:B3:99:03:CC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/71244b69-4d6e-35df-ae1f-cd830167010f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:2a:61:e2:e9:0c:4f:66:4e:dd:a4:2c:19:23:19:93:eb:
         1b:2c:5e:f1:e7:66:c5:2b:e1:0d:8c:b4:6b:c7:b6:c1:57:f1:
         56:73:82:8d:4d:79:fd:63:aa:e1:6c:48:cf:b4:f4:66:65:6e:
         73:9c:f2:79:c7:e3:3f:d1:56:f3:8f:1f:8f:7f:65:a2:81:ae:
         6c:24:97:c9:f6:aa:1a:e9:d4:90:aa:1b:f2:6f:71:06:a0:59:
         65:43:91:9d:38:2f:4f:d0:ff:25:82:49:dc:48:26:c1:68:fe:
         60:bf:a9:e9:43:d4:e9:b3:be:92:3b:eb:07:19:f1:c6:b3:38:
         1e:70:c2:f9:80:66:f3:f2:1e:86:dd:1e:b1:92:df:aa:f7:76:
         3e:0c:fa:f9:57:8a:54:a8:84:0c:e1:8b:13:ad:ad:87:bd:1c:
         81:80:2a:5f:30:d0:33:0d:9a:e8:32:f4:3e:1b:7d:3b:ec:71:
         48:bc:dd:f9:43:6e:14:b9:05:f6:3d:99:fb:c9:94:a5:f2:1c:
         b4:1e:74:a2:ef:d3:44:a5:c9:da:03:e5:19:60:15:88:44:94:
         15:c1:d9:89:9f:2c:f5:cd:d1:c8:57:32:19:b9:0d:94:47:24:
         bb:ea:6b:2d:d8:58:b9:f6:66:55:5e:2a:5c:61:c0:0b:7f:0e:
         20:f1:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:14:48 2024 by rpki-client on console-ams.rpki-client.org