Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/cf95fd0d-4d70-32fd-8486-5f76dd7c90ab.roa
File:                     cf95fd0d-4d70-32fd-8486-5f76dd7c90ab.roa (raw, json)
Hash identifier:          OlgBcHV/9RbEzwsiF6SyIbfyCGFtp9t92XSoQ1YO4wI=
Subject key identifier:   2F:3B:AE:6B:6F:AA:6A:D7:BF:12:38:51:A2:76:C9:ED:57:1B:3C:B0
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845E45E74F8D8E58797F5518880
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/cf95fd0d-4d70-32fd-8486-5f76dd7c90ab.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     36391
IP address blocks:        206.12.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:74:f8:d8:e5:87:97:f5:51:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=98be7a4d-e9dc-42a0-af41-eed4599ef515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8d:5c:6e:79:5f:c6:2c:00:6f:4a:e9:2a:aa:
                    0e:85:c5:df:b5:d1:74:ba:91:d6:e7:66:ab:fd:29:
                    a4:5c:6a:4a:a3:6b:97:16:b0:b9:fe:44:73:7e:65:
                    fa:f8:3a:99:72:b6:6d:b4:62:e4:e2:6d:7f:57:68:
                    79:34:b2:64:7e:56:53:a9:0a:04:c6:f9:90:2f:5d:
                    6c:a0:95:19:d6:17:e6:7c:92:78:fe:22:7b:c1:e5:
                    d8:df:35:4e:82:15:a7:22:4b:75:44:b6:62:12:f0:
                    e1:22:0e:0f:8e:09:f6:a4:d1:b3:c9:77:ea:e4:fe:
                    98:97:cf:b3:b0:76:4c:6d:7f:78:76:8e:63:d4:9d:
                    f5:c2:48:82:aa:38:bc:ec:4c:1c:6f:66:20:fe:18:
                    da:bb:a9:69:96:05:90:9a:dd:72:2c:a7:63:94:87:
                    1d:8e:7a:b1:3a:fa:26:a3:ea:a9:f8:33:5c:16:94:
                    6a:05:3b:5e:58:60:c7:e9:8f:34:d4:e7:1b:ea:be:
                    29:49:35:a0:9f:13:9c:7f:ea:0b:ef:1e:96:b1:e0:
                    de:1d:fe:4a:28:9d:03:60:d3:17:27:e1:7a:62:fb:
                    f7:02:1d:fb:b5:82:30:18:fe:12:83:c4:f1:25:1f:
                    cb:6b:48:7a:6d:5f:2b:91:7d:7d:7a:ca:3d:bc:04:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3B:AE:6B:6F:AA:6A:D7:BF:12:38:51:A2:76:C9:ED:57:1B:3C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/cf95fd0d-4d70-32fd-8486-5f76dd7c90ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:85:70:0a:c8:7c:21:cc:9d:7f:5c:5e:01:e4:79:a3:b1:2b:
         3b:6a:72:3d:38:dc:5d:ff:46:b9:d1:c3:9d:ec:53:dc:63:ac:
         7f:01:f1:73:dd:b1:9d:d6:c9:6b:58:28:22:19:06:4b:33:a8:
         cb:b3:02:82:5a:49:33:55:96:1d:f7:17:45:3b:4d:22:c7:37:
         d0:a9:45:d0:8f:a6:3c:82:49:29:95:f1:59:f5:49:f0:f2:aa:
         1b:23:7f:54:6b:28:1e:44:cf:42:59:bf:32:23:c4:40:e9:13:
         93:48:16:0f:56:2b:a7:6b:9e:58:b6:0d:c3:5c:29:87:6e:e7:
         42:46:38:99:97:2e:50:5f:6b:31:60:ca:c9:47:da:a6:f4:7a:
         db:96:6d:09:04:6c:cf:a7:c4:ed:c0:49:46:ac:61:b5:67:f6:
         52:36:54:b7:2b:a1:3c:f0:af:dd:6d:c8:37:61:d2:92:0c:36:
         23:0e:b6:9a:15:95:47:43:81:4c:41:cb:86:42:65:b1:dd:65:
         2f:3f:b9:56:53:5e:b8:09:27:9d:b5:f7:aa:f8:48:4e:18:e7:
         f2:3d:78:b7:be:af:99:33:2d:43:0a:78:b1:4d:39:41:1c:90:
         46:2b:05:8f:22:0a:05:58:cb:e6:c3:e0:27:92:c1:6e:c3:83:
         60:36:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:32 2024 by rpki-client on console-fra.rpki-client.org