Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
File:                     e0c36319-b634-372f-9da0-aa28685ea81d.roa (raw, json)
Hash identifier:          Mz9hAmTaOnV3IyFpBwFY0uPTBAeXneRigSrD/ll9+Ek=
Subject key identifier:   DC:4A:9B:1F:66:9D:89:FE:AD:7C:30:8D:6C:98:70:BB:BF:F0:6A:4C
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847B101662DE0AC60EDFF5DCB20
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16462
IP address blocks:        206.12.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:66:2d:e0:ac:60:ed:ff:5d:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=6ea78af4-1ae0-4bbf-a5bc-b90194d04944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:42:a6:08:6c:82:3e:99:11:d7:d4:89:63:d0:
                    a0:91:a0:4c:7b:14:7c:57:41:d5:2f:3a:59:33:ac:
                    be:bc:b1:45:2a:29:37:40:02:61:86:9e:e2:9f:d0:
                    c4:2b:ac:8b:54:53:1e:b7:ee:2a:94:6a:74:32:c1:
                    11:f7:aa:f5:ce:14:09:32:1a:ac:92:42:9b:15:f5:
                    e4:a2:5e:f3:d1:a5:e5:8e:4c:7a:c9:18:dc:76:02:
                    ad:06:b8:51:a7:4d:88:f9:df:81:52:31:ad:40:78:
                    c7:23:a6:86:cf:47:5a:54:29:9d:1d:1a:e2:4c:3a:
                    88:44:08:25:d0:ba:91:fd:3d:55:18:b4:5e:76:a8:
                    8e:2d:c3:0a:cf:9a:bf:a8:57:52:a8:82:ec:6b:ba:
                    bd:f0:50:71:fa:ab:85:fd:27:47:88:5a:9f:73:b4:
                    82:3b:e8:cc:14:15:c7:30:57:c3:a5:b7:1f:99:70:
                    40:0e:18:b5:49:94:c5:bb:bc:bb:6c:02:bf:d6:60:
                    32:d6:06:08:ee:70:1b:bc:1d:8f:76:72:4b:7f:30:
                    9c:6f:9f:e6:17:77:7b:ad:2b:83:d2:6f:e1:bb:d3:
                    4f:d3:df:78:aa:a8:0a:06:4e:33:6b:3c:d0:42:61:
                    8f:6b:58:36:73:02:cb:f2:8c:54:94:86:3a:3a:09:
                    5e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:9B:1F:66:9D:89:FE:AD:7C:30:8D:6C:98:70:BB:BF:F0:6A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:2c:f5:39:6a:87:82:4a:ff:24:d2:ed:7f:df:ee:a7:96:
         c3:26:33:93:b9:3e:5b:2d:a5:ed:e5:0b:05:de:1f:b5:ce:bc:
         04:d6:c5:2a:cd:b4:1c:14:b9:43:d7:95:0b:fe:b7:80:9c:01:
         db:f5:e0:1a:ad:4c:0f:9f:87:30:2c:30:76:a7:b7:b3:8c:9a:
         d5:c3:70:da:01:7c:b1:27:5a:28:89:11:5e:99:3d:85:24:bc:
         0e:ed:bf:92:38:30:60:81:6c:7d:3a:5d:fd:f5:59:75:d5:2e:
         1b:90:d2:6f:6a:33:11:32:2b:d0:0e:23:ee:5b:62:cc:23:69:
         ef:ae:10:e7:9b:d2:24:76:79:1a:1d:4e:dd:15:d3:22:12:f2:
         bc:16:45:e0:cc:c8:76:eb:a3:29:84:72:99:12:52:69:12:15:
         8d:92:48:ba:96:f1:bc:d2:a9:88:e3:2b:1f:08:bd:6e:f8:f6:
         27:65:6c:7b:e4:12:c3:b8:a7:79:a8:21:80:e7:a8:7f:b6:a8:
         c5:38:07:d3:64:a3:45:7a:90:12:81:3f:6b:14:ec:a7:4c:15:
         c2:59:d9:e5:78:c6:c4:8f:fb:4a:e5:da:c2:7f:46:6e:84:9a:
         ec:55:b1:bb:0f:54:f1:b9:18:82:f7:bf:4a:4b:28:e1:c4:8f:
         8b:33:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org