Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
File:                     c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa (raw, json)
Hash identifier:          T6dEtsfoWFXp3g9KhBTRRgq+dZ0gc37McXzxVLTB4yY=
Subject key identifier:   8C:E7:A6:2A:B7:7B:B3:68:74:8F:D4:93:AC:61:D5:7A:84:DB:6D:C5
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845E45E73646C9E605FB65B5600
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     16462
IP address blocks:        206.12.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:73:64:6c:9e:60:5f:b6:5b:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=4eec073a-aad2-4331-b874-3a41ccb84732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:0a:27:e3:84:9a:37:34:bf:02:a1:b5:6b:
                    f7:6c:e1:a9:18:73:3d:00:56:8a:aa:7f:c2:ae:4f:
                    78:f9:f2:d6:44:82:bd:c0:bf:f5:d8:ef:e1:c3:32:
                    64:d9:71:4d:ab:c6:ce:1c:32:fb:78:3a:05:7c:58:
                    25:fc:20:9f:7d:f1:b2:c7:51:57:9b:50:e5:66:05:
                    3e:a0:c2:28:4d:ce:29:16:a6:3a:69:43:83:fd:2b:
                    55:1a:af:3a:c2:e6:a0:66:49:8b:3c:12:77:79:19:
                    7b:92:33:bb:16:26:b5:84:dd:3c:a8:26:3a:21:31:
                    b7:db:68:e5:11:4b:79:31:52:e5:b0:0c:1e:9b:34:
                    30:34:13:f1:07:d3:0d:05:4f:0f:70:0b:3c:8b:16:
                    f3:3d:23:d0:9f:fa:b8:d0:ff:79:4e:ea:be:be:ef:
                    b0:fe:60:55:50:90:b4:10:bc:53:62:76:a1:aa:53:
                    66:1c:71:56:8f:eb:a3:a2:43:20:5c:ae:43:b5:9d:
                    0e:b7:92:95:bb:91:7e:67:d0:cf:05:c7:8e:d8:d1:
                    70:88:cd:79:f6:67:3e:a6:90:27:dd:5a:fb:52:d4:
                    0f:72:16:21:85:70:bd:5e:4f:9f:72:69:c0:16:23:
                    fd:6c:3c:5a:b1:ed:ff:eb:99:f5:00:49:91:aa:8e:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:A6:2A:B7:7B:B3:68:74:8F:D4:93:AC:61:D5:7A:84:DB:6D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:25:f9:fa:40:a2:68:bf:17:94:fe:a3:8e:32:d4:b8:8f:6d:
         0d:78:2f:4b:11:15:b7:10:3e:38:b9:c8:6f:4e:e5:9a:64:f6:
         99:cc:20:71:52:89:58:27:c5:eb:48:1f:0b:71:c7:49:72:bf:
         2b:57:a4:40:ce:d2:34:e1:6e:ea:4e:18:68:2c:27:10:99:7d:
         36:fc:ca:c8:e6:78:8c:d5:28:20:61:71:8f:ea:f1:f5:52:a2:
         a4:22:5c:c4:da:70:c0:8b:d9:71:55:f8:51:d1:80:ae:ee:89:
         be:13:a7:a5:39:08:73:69:bf:53:0a:ab:8d:8d:e1:25:df:85:
         27:bc:72:c3:35:2b:3e:1f:42:2d:d7:53:28:23:a2:cf:b2:c6:
         75:df:0e:34:eb:88:9d:3a:54:8a:e4:9a:dd:74:6c:4c:cf:80:
         af:ec:63:de:ea:5c:e9:12:fe:18:af:be:ef:d7:0f:44:d6:91:
         1d:c2:ac:ee:80:a9:49:ea:c6:da:62:b9:5a:03:9a:48:a9:84:
         dc:74:54:a3:9f:67:c3:17:f7:60:8c:61:9f:25:01:95:80:73:
         ac:60:34:40:02:97:a9:a8:f0:6c:86:ab:8b:d2:9c:8b:5b:6b:
         b9:ad:7e:01:90:49:dc:1f:43:bc:41:e9:9b:af:2b:7c:7a:94:
         17:54:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 20:42:41 2024 by rpki-client on console-ams.rpki-client.org