Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
File:                     c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa (raw, json)
Hash identifier:          MHLvpAjPkbD/CIKaFNBhwM8jE2Y6giIOD4M7HZ7i9ao=
Subject key identifier:   DE:A3:33:CC:A7:AB:93:73:6E:6F:C4:3D:9F:A7:85:BC:7B:AE:C8:C4
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847A30BFC83C7B8D30FABFCA2C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     16462
IP address blocks:        206.12.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fc:83:c7:b8:d3:0f:ab:fc:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=06603be4-032c-4c28-a041-e594f12c8a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:a0:ed:7c:f1:1a:e7:33:83:f3:76:20:7b:
                    3e:67:2c:a6:a0:70:43:59:43:96:ed:cb:37:cf:44:
                    78:3d:0e:80:e4:2c:4a:b1:10:69:94:ea:4f:b6:3f:
                    b3:98:fa:3c:51:df:79:4e:c6:e5:e7:9d:97:12:22:
                    df:66:f5:a3:b5:f9:8b:a2:4a:3d:f3:38:5a:89:c4:
                    d9:a3:8f:c0:44:18:4a:16:fb:c5:4a:88:82:41:0b:
                    fc:49:81:68:66:d4:96:76:2f:5e:d3:c9:a2:f2:41:
                    c6:1d:25:93:bf:b6:d8:17:fb:31:29:7d:1b:da:5e:
                    89:17:2d:74:0a:a8:01:e6:52:69:f5:4c:f0:d1:ca:
                    54:f5:b6:df:c2:ff:99:f4:4a:dc:f8:17:cc:7c:57:
                    53:c8:3b:25:a9:f8:65:9b:bc:62:f7:46:2e:f1:f8:
                    a9:f4:7e:1d:60:65:e3:50:fb:f6:4f:1d:f7:3e:8e:
                    f3:72:f2:43:27:c3:8e:f4:12:7e:b9:e0:7e:64:32:
                    d5:3a:93:2c:04:c4:c2:51:03:e1:c9:a7:59:ee:0f:
                    49:2c:77:b3:ba:8c:af:72:2e:cf:85:3b:53:8c:a1:
                    f1:f2:97:33:57:79:39:c5:1b:06:1a:ff:3a:20:5b:
                    86:5a:ad:41:db:88:b4:b7:13:f0:8d:3c:79:18:5c:
                    5a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:33:CC:A7:AB:93:73:6E:6F:C4:3D:9F:A7:85:BC:7B:AE:C8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:91:ab:b8:1f:76:e5:98:54:8b:b2:52:14:d7:cf:43:af:64:
         02:75:82:77:96:a7:82:e8:0f:8f:5f:10:9f:35:0e:22:ae:6f:
         12:ff:4e:48:50:81:e2:00:2f:16:60:6e:85:c0:05:a8:0d:3b:
         80:5a:76:c7:67:a4:24:14:a4:3d:ea:0a:e5:13:31:c8:3d:b2:
         97:fb:bd:e3:90:8e:1a:a1:09:8e:5d:2a:cc:7e:4f:66:7f:62:
         56:30:08:53:3e:b4:de:76:26:d4:a4:c1:49:65:8e:2d:57:fd:
         6d:21:7e:f1:f8:46:aa:94:0e:d5:bc:4a:de:0e:3f:f7:94:b1:
         6d:c6:01:91:a6:8e:23:44:fd:4a:34:be:ed:39:d4:c3:20:9e:
         72:f5:e4:94:38:ef:b0:07:8e:9e:34:15:d2:66:d8:0f:73:d5:
         47:d4:c1:bb:fd:0f:b8:bc:f2:48:25:37:0a:8c:f8:b8:f0:61:
         61:76:7d:c9:e2:37:4d:ca:96:e9:c6:e7:d7:42:2e:d3:84:99:
         8d:ff:0c:e5:a5:ff:49:38:02:aa:00:a0:8b:5d:3e:1d:34:f1:
         39:fb:33:12:53:64:33:54:15:03:25:5e:80:da:30:4d:27:29:
         4c:21:a9:28:57:1e:0a:2c:1e:d0:b8:89:9f:96:76:cb:c7:1d:
         0e:09:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org