Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3625256-44b4-3157-9295-429fdd6c780c.roa
File:                     b3625256-44b4-3157-9295-429fdd6c780c.roa (raw, json)
Hash identifier:          uCqi21P4jfIoJBP03wd0i0ggf0nGHIrSxmszcDKwGiI=
Subject key identifier:   E7:5D:0F:CB:BC:EE:E5:02:33:96:A2:D9:10:19:FC:9A:E6:8A:28:3B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847B1016641F8CA55BE8D1DCB00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3625256-44b4-3157-9295-429fdd6c780c.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16462
IP address blocks:        206.12.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:66:41:f8:ca:55:be:8d:1d:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=e7dc62a1-91ae-4906-b84c-2d455380f273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9d:a0:fa:94:1b:3f:55:e3:3a:4c:82:a5:74:
                    96:83:07:3e:ca:84:61:24:f0:ac:c0:b7:05:43:0c:
                    95:c2:7b:4d:69:de:2e:e4:c3:3c:a6:f0:5d:11:0a:
                    e9:75:e1:62:ca:c9:6e:ce:96:b9:f4:01:f8:75:b7:
                    e6:f9:e2:2e:2a:88:8f:31:41:b2:fc:7e:6a:e4:df:
                    9c:10:80:49:83:43:00:e0:b1:90:2a:71:f7:57:19:
                    f6:2c:86:c5:9d:92:ff:44:e6:46:a5:e2:2d:b5:09:
                    f8:45:c7:af:07:8e:1d:90:eb:58:d9:c4:36:d0:ed:
                    10:56:76:a6:6e:cf:e0:c9:11:da:e7:7d:fd:70:e6:
                    a2:7a:1c:1d:4c:0b:11:5b:ca:06:64:94:1b:f7:61:
                    f7:51:d2:ac:d4:d3:3c:94:f0:ea:69:25:a0:77:fb:
                    76:56:fe:c1:71:45:27:a2:ca:fc:b9:1f:02:f3:ba:
                    2d:0c:44:39:bd:7a:d8:62:37:04:89:f4:12:dc:6f:
                    98:b9:11:25:f1:de:5d:68:46:65:e8:ee:a3:3a:1e:
                    23:6b:8c:31:3f:a8:8e:36:ee:0e:52:08:17:d1:2e:
                    53:bf:fa:46:0d:4b:a0:4a:29:21:06:6b:7b:08:49:
                    d2:19:90:19:b7:bc:e1:f0:c0:fb:fd:09:39:33:e6:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:0F:CB:BC:EE:E5:02:33:96:A2:D9:10:19:FC:9A:E6:8A:28:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3625256-44b4-3157-9295-429fdd6c780c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c0:e8:69:75:28:42:14:79:13:8c:99:a6:e7:2e:b2:61:6f:
         76:d7:30:7c:73:30:65:7a:02:a2:7f:fb:87:bf:2a:60:23:57:
         62:37:ec:87:72:5b:66:d6:64:71:83:95:59:5d:58:b3:23:21:
         24:ca:84:d3:44:0e:af:3e:5e:4c:0e:49:a8:0f:04:22:de:a0:
         a9:68:32:79:ec:58:fd:a6:82:f2:9c:fe:91:51:93:c7:ab:0a:
         72:24:af:a4:b4:00:c2:8f:1a:c2:be:9e:a8:b6:f3:24:25:f1:
         50:ce:cf:9c:c3:26:9c:7a:cb:57:e1:07:58:6d:f0:70:08:bd:
         b6:ff:08:bb:09:ca:4f:d5:0b:95:36:80:54:3e:a6:c9:72:a9:
         82:07:6b:08:d7:b3:06:87:aa:97:73:bf:f0:d6:51:6e:70:f9:
         34:d5:fc:76:19:8e:7d:b0:e2:0d:87:96:ac:c0:52:15:18:be:
         a1:b0:13:5e:35:f6:89:40:ef:86:f4:71:75:e2:ac:dc:b0:08:
         ee:91:e6:9a:44:9f:75:ad:56:d6:cb:c2:8d:d4:2f:e3:5c:6e:
         50:57:97:15:eb:c2:6f:ab:b1:7e:e1:c3:f6:57:b0:72:ac:70:
         cc:62:67:69:36:59:02:6c:ae:ac:2a:12:f9:92:8a:f8:1b:76:
         85:80:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org