Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
File:                     c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa (raw, json)
Hash identifier:          CdyFebM3CuYIN1+wncWWkj2ESkMrlxb+UDBPC2AQXyQ=
Subject key identifier:   CB:75:F4:3A:C5:E9:0F:89:1D:76:70:89:7C:27:E3:1E:E8:67:3D:E0
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F43285847537B6DB16F412EB24DE39A00
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     7761
IP address blocks:        206.220.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6d:b1:6f:41:2e:b2:4d:e3:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=c04644a5-4d2c-4210-83ff-88579ee78843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:90:07:0f:b1:dd:97:52:79:c5:86:84:a0:
                    e9:f5:75:6c:17:a7:91:87:ec:e6:43:a7:a8:af:b7:
                    ab:01:19:70:40:37:ad:0d:a7:17:07:cf:52:c2:d5:
                    bd:9a:19:b2:b2:28:b1:92:58:7c:67:28:5a:01:4c:
                    c2:15:4e:31:d1:7f:dc:79:c7:88:1e:cb:5e:0f:44:
                    58:c8:1c:9b:79:08:b7:1d:39:b3:ba:f4:90:ed:4e:
                    a7:e4:d7:c5:1d:09:e9:3a:6e:4f:46:20:45:32:43:
                    50:c5:fc:b2:f4:b8:40:30:85:7b:ad:61:c2:24:1b:
                    e8:46:e1:48:6f:3b:61:97:99:2a:0a:01:4b:5b:9e:
                    c2:c6:a5:dd:05:9a:19:56:2e:e3:8d:bd:40:69:ac:
                    99:ef:56:2e:46:d1:8a:91:f1:27:32:32:f6:1f:5e:
                    ef:42:a1:63:33:e3:f1:c7:78:9e:19:88:8c:33:d6:
                    8e:7f:98:07:e6:0a:de:f7:9e:d6:29:2a:a1:00:ca:
                    35:91:4a:57:6d:0e:c4:4b:6b:6e:1b:9b:d0:6a:57:
                    db:4d:11:3b:a3:c7:e1:6b:84:df:b0:c9:0b:4a:5d:
                    d9:2c:5a:e6:48:74:7a:b5:4d:f2:bb:e8:15:b3:c6:
                    1e:58:13:19:d9:96:1b:fc:e3:61:9c:92:1b:fe:b8:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:F4:3A:C5:E9:0F:89:1D:76:70:89:7C:27:E3:1E:E8:67:3D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:d9:1f:b8:02:8e:bd:78:94:45:d7:b0:dd:f1:d7:f4:8e:
         c5:a3:d7:3a:07:6f:c9:83:5f:6c:6a:c9:a6:9b:da:a4:3a:f8:
         cf:c8:fd:13:9e:be:88:05:94:e4:39:d9:f2:a9:0e:6b:71:be:
         19:f3:64:86:90:ff:30:6e:e0:2a:22:07:19:b7:78:6b:eb:98:
         be:58:ba:be:b3:13:ff:8a:1f:1e:45:c9:fa:8d:d6:ab:36:69:
         8b:9a:cd:30:9f:75:65:a1:92:fe:29:79:07:fa:f5:ff:ad:0b:
         65:10:62:b4:9d:45:60:af:ac:6e:a8:c9:32:ad:43:62:88:de:
         b1:4f:1b:6c:f0:22:d8:66:59:51:a8:5f:01:52:b4:ff:61:f0:
         42:e7:8c:02:c6:73:1a:64:97:92:8d:81:24:e9:0e:80:d7:18:
         63:71:36:bf:1d:fd:3e:c1:3f:b6:39:9e:6d:56:ad:c7:70:4b:
         ea:12:31:c0:b4:39:5f:fb:38:74:4f:d8:b1:3a:6b:5c:53:a1:
         21:e5:19:4d:11:25:69:88:cd:57:9e:dc:49:1b:a5:0e:2b:c0:
         c5:b9:15:1f:83:a9:c9:98:25:4a:64:e4:f3:98:9b:f6:84:3e:
         38:fe:fb:1a:cc:a8:f4:d1:9b:5c:fb:55:6f:2b:87:2a:27:23:
         8d:28:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org