Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/fef98bd5-a229-3c73-8549-2102133021b8.roa
File:                     fef98bd5-a229-3c73-8549-2102133021b8.roa (raw, json)
Hash identifier:          ksetxjJPxrEjYK6/s6ZRqE2Nh8rf3j+ZSxQMjpNCxzw=
Subject key identifier:   06:97:92:AF:9C:AD:F8:A7:2F:80:A6:DB:05:33:5F:19:94:3F:8C:89
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845F253F3C7D638C6BD607F6F00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/fef98bd5-a229-3c73-8549-2102133021b8.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     16462
IP address blocks:        206.87.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:f3:c7:d6:38:c6:bd:60:7f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=38246ff3-8fee-461d-8a89-9ecee4ede912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:bd:c6:90:e2:c3:62:f6:e9:ce:9a:21:36:
                    b8:fb:a7:aa:1b:a7:73:50:ea:2c:51:d3:01:1f:65:
                    76:2c:d8:e8:e6:7b:09:50:be:79:da:03:36:d8:ee:
                    8c:a1:d8:3f:cf:35:d6:f1:30:62:a2:ad:48:03:08:
                    11:97:c3:f9:50:d2:ae:ed:31:08:f8:8f:91:f3:aa:
                    2a:ed:d4:f2:6e:24:d7:53:3b:91:65:a7:65:08:6a:
                    f5:e2:f2:ca:ba:cb:d2:77:7b:bb:e8:46:c8:f5:e8:
                    95:0c:4f:44:74:8d:91:10:0b:5d:3b:2a:bc:5c:eb:
                    c1:17:32:47:3d:da:e3:63:34:82:63:b1:aa:d0:a7:
                    95:26:35:8e:02:13:d2:4a:51:44:87:2d:81:a9:0e:
                    a2:de:30:96:0f:44:54:d2:8d:02:fa:58:b3:0f:43:
                    09:87:d2:78:3d:d3:5e:01:c8:8a:a0:03:9f:17:c7:
                    cf:19:db:db:1a:02:c1:1a:6c:74:a3:4e:c7:03:e3:
                    2b:a0:91:29:90:c8:6f:38:8a:71:ed:21:6b:72:fb:
                    26:9c:40:5c:03:51:5e:06:b6:77:71:4c:7f:3a:bc:
                    95:1a:87:f4:2b:f5:1c:7a:03:a6:4a:a9:33:ce:b0:
                    f3:b2:24:a3:51:80:f0:2d:7d:5b:3a:e1:a8:a4:73:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:92:AF:9C:AD:F8:A7:2F:80:A6:DB:05:33:5F:19:94:3F:8C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/fef98bd5-a229-3c73-8549-2102133021b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:47:9a:a4:d9:1d:19:50:ab:ac:f9:8b:c3:72:17:74:4a:3c:
         23:89:b0:c5:16:84:8e:64:b5:12:9b:f6:24:23:db:d1:df:ed:
         d9:8d:e0:be:36:e1:cb:0a:23:79:1b:72:63:6f:61:01:7d:3a:
         44:ab:90:86:96:54:5e:49:a2:67:bf:fc:1d:2b:10:be:13:7a:
         45:cc:08:b6:81:8c:c3:82:bb:dd:f7:2b:9f:80:bf:23:78:da:
         19:6e:48:50:6c:e7:c7:63:6d:ab:58:08:da:13:d7:68:27:8d:
         e5:db:a8:de:09:9a:52:d9:f9:b7:19:f3:f6:1b:cf:4c:db:b2:
         a4:a9:ff:34:3f:d8:bd:b8:86:42:fa:18:52:81:ee:14:34:1e:
         b2:6d:0b:c5:40:47:04:12:5c:ab:1f:38:8d:74:e6:73:20:3c:
         9d:d2:21:a7:36:47:8f:26:3a:8a:39:3e:45:6a:70:cd:0e:03:
         76:ff:19:3c:6c:b7:ef:70:01:01:0e:c6:55:09:c2:ec:d2:45:
         8a:4f:31:5a:16:ec:64:b0:bf:87:9a:10:f1:d6:82:97:50:49:
         2e:4f:b1:76:51:b7:de:20:19:4d:fe:e0:46:03:dd:9f:8c:bf:
         2a:b4:01:9d:a9:fe:ee:90:70:9b:99:6e:ad:e1:9b:0f:f6:b5:
         2b:a5:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 20:42:41 2024 by rpki-client on console-ams.rpki-client.org