Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d2bed273-b1c1-3910-af48-15e90d582c33.roa
File:                     d2bed273-b1c1-3910-af48-15e90d582c33.roa (raw, json)
Hash identifier:          6zVJJ2TaFq3C4WgBoMuyJortg1QHmiT/hoZsyigUMo0=
Subject key identifier:   6A:FA:AE:86:BE:D2:30:99:E3:F1:88:AE:0A:38:52:E3:A2:9E:68:8A
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847A30BFCC67100F21E2A052FB0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d2bed273-b1c1-3910-af48-15e90d582c33.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     11105
IP address blocks:        206.12.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fc:c6:71:00:f2:1e:2a:05:2f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=3975dee7-3191-4f39-90ca-3ff0f1c6ac27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:b2:75:a3:71:20:9c:1b:1c:92:e4:8c:a9:
                    20:02:cc:73:d0:92:6f:11:2b:3d:79:fb:d7:31:34:
                    b0:7e:38:c6:92:16:35:b0:4c:9d:da:08:4e:db:f5:
                    19:5e:89:51:e2:38:a3:cc:d4:7c:91:b4:b5:e8:1e:
                    23:7d:a5:b9:05:c3:55:3b:fa:99:f4:0d:7d:86:f6:
                    a6:21:1f:5e:c7:5a:bf:c7:99:23:d2:93:80:ed:3f:
                    d6:1f:b4:d4:b4:17:c8:81:e4:79:df:46:b0:9a:79:
                    a8:8f:cf:73:06:b5:95:cf:22:8b:ec:f2:1c:2b:20:
                    cd:1c:9a:d1:be:23:1b:ed:5d:89:85:79:8c:ec:be:
                    40:ae:9a:bb:8e:01:a2:ed:db:7e:7f:5c:9d:b6:06:
                    c5:1b:2c:6f:9d:2d:7e:ce:06:33:a8:a0:84:ba:ed:
                    59:9e:c8:9d:f5:7d:6e:7d:26:ec:26:02:a7:69:f7:
                    00:e3:79:6d:40:5a:d7:55:e0:13:16:2e:95:aa:d9:
                    25:af:16:fd:d8:59:1e:c7:f7:67:9c:71:6d:e0:7d:
                    ad:d8:18:98:72:bd:20:37:35:0b:71:ff:84:53:63:
                    3c:d5:d0:7d:65:87:70:e0:0c:0e:a3:42:8a:8e:e8:
                    14:3c:6e:ce:b6:90:73:27:22:7f:8e:9f:05:f2:f9:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FA:AE:86:BE:D2:30:99:E3:F1:88:AE:0A:38:52:E3:A2:9E:68:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d2bed273-b1c1-3910-af48-15e90d582c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:46:bd:5f:e8:6e:ff:e7:7f:37:7d:55:f5:6c:b5:a5:d6:a2:
         ee:0f:20:1d:ed:9c:ca:b5:95:e9:47:2d:73:13:4c:03:ba:18:
         cc:5e:92:9d:70:41:d2:51:f8:32:e3:fb:e0:6a:91:9d:b8:32:
         c4:51:80:9d:e5:72:9e:4b:97:56:9c:94:95:d8:31:f1:5e:59:
         a3:b3:29:03:2c:e2:e3:fb:63:36:4f:31:fa:03:11:bf:97:d4:
         0a:8a:44:47:af:24:3d:26:b4:fe:4f:bf:2e:ec:92:88:1b:f8:
         30:ae:ed:9a:22:76:c6:96:6f:4c:89:73:7c:86:00:b5:c5:82:
         9c:36:a9:5b:63:f7:27:3c:14:29:65:f5:68:d3:f0:7d:08:2d:
         d2:ac:86:58:9d:4a:28:72:8b:51:8b:0a:23:ed:5a:82:51:43:
         ad:70:3a:01:63:07:55:40:b4:c6:98:79:95:6c:b0:de:b5:84:
         f7:95:d2:28:11:6c:80:f2:f6:6b:06:36:3b:11:34:9d:bf:ec:
         ba:94:7b:17:bb:81:e3:a8:67:71:64:eb:8f:fa:6e:5c:8c:6a:
         d7:6d:6c:bf:2e:a2:76:57:64:66:56:09:5d:03:e3:d3:c9:b4:
         6a:a4:25:70:fc:87:64:56:78:7e:03:a2:19:af:df:d4:66:c0:
         c1:3c:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org