Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa
File:                     bd4733f9-619d-3341-8788-1eee40224373.roa (raw, json)
Hash identifier:          06eLQC5P7TneZptTHUvhAjcXA4Y7znB/zjue3Gq+Hu8=
Subject key identifier:   5D:DA:A4:D6:1D:A1:0E:9B:A4:F2:45:C3:D2:B7:4E:52:37:19:AA:8F
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845E45E73EE187F82313B5080E0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     11105
IP address blocks:        206.12.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:73:ee:18:7f:82:31:3b:50:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=ddd32577-04e5-4fd3-967c-a3d7aafc345e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:9b:51:d6:6d:27:4c:84:bd:53:07:64:13:
                    8d:8e:5e:9f:51:3a:a4:eb:0e:74:d0:94:29:67:69:
                    7d:aa:d7:5d:f7:fd:1d:f5:0e:bf:a6:bf:3b:07:ca:
                    1f:f9:e7:4c:0c:29:3c:f7:8d:9b:4f:7f:72:b6:f0:
                    4f:07:c8:fd:4b:3d:ea:e4:9a:91:eb:54:42:95:4a:
                    48:9a:6e:a7:eb:21:c0:2d:16:e3:9e:53:a7:48:8f:
                    2b:bb:77:56:54:a3:72:e0:c4:c3:1c:4c:a4:b6:d8:
                    6e:e3:ed:cb:4c:69:b6:67:5d:0d:93:a0:1b:92:db:
                    4b:1b:96:8f:16:7e:e3:50:a2:bf:f5:b9:0d:2b:82:
                    55:ce:fb:06:3b:11:b7:c7:33:1b:60:71:f8:fa:06:
                    23:ee:cc:d5:23:38:20:e7:84:7e:86:1f:21:e6:0e:
                    15:8d:39:c9:43:a7:f9:36:eb:71:d2:ab:c4:64:91:
                    34:5f:f3:e1:20:00:6a:e4:c0:9b:44:bb:72:ae:c9:
                    fc:0d:b9:a4:72:9f:a3:10:35:f3:7b:95:7e:19:6a:
                    7e:31:9b:d4:c0:63:fb:f5:63:0e:d2:02:0b:74:cd:
                    63:b5:84:33:3d:de:c0:bd:3b:46:66:7c:d9:d4:2f:
                    e0:5d:5e:b6:ef:ee:22:c9:9f:9f:e5:51:ef:b1:64:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:A4:D6:1D:A1:0E:9B:A4:F2:45:C3:D2:B7:4E:52:37:19:AA:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:e6:09:b0:bd:12:53:c4:3c:1f:19:2c:bb:51:7a:a3:48:
         20:ad:e7:18:d2:27:29:fb:2a:38:68:29:a6:a8:5d:81:63:d1:
         2c:5e:a4:22:2a:7c:84:ad:51:3a:1f:a1:ee:48:b8:aa:d3:ee:
         e6:a0:8d:95:56:8e:fd:e0:0f:23:8e:3b:e6:6e:c7:4b:43:0a:
         05:b8:2a:5b:a8:fb:b4:d8:71:10:8b:0c:3e:f1:1f:c2:55:30:
         9e:e6:45:76:a7:ee:28:31:4d:94:c2:27:61:94:0f:f3:c5:42:
         7d:1e:ad:04:04:46:2f:7f:b6:8c:da:97:42:2b:df:6b:69:06:
         bc:65:d9:af:97:45:19:1c:54:2e:25:24:17:c6:73:3b:9f:c2:
         94:c0:ae:52:d0:3f:70:a8:2a:12:7f:96:28:47:34:38:b2:ed:
         c2:e0:d3:0d:90:43:3b:b9:fa:65:91:dd:9f:b7:f3:8b:29:f8:
         c8:e9:e2:f4:b2:b9:83:30:f4:6f:b4:8f:49:64:e3:68:b8:59:
         1a:34:da:69:f1:d1:48:23:97:87:60:4b:a8:99:e8:e0:ea:d5:
         e3:a4:bc:6f:f6:12:66:f6:8c:c5:cb:a9:30:86:38:81:f7:d2:
         3a:f4:84:f3:7a:9e:f3:fb:e8:1d:63:c2:bb:95:c8:a7:8b:2a:
         83:ab:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 19:36:40 2024 by rpki-client on console-fra.rpki-client.org