Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa
File:                     a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa (raw, json)
Hash identifier:          WZcDPWfJ0LAbULQo1qYuNDzwomy87KFQbSpAXtp8vc0=
Subject key identifier:   0E:FC:C9:69:06:26:11:6B:18:0F:25:6F:A1:97:BB:66:6C:5D:54:4B
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F43285847924BE4F5B951CC0F83B3EA80
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     32157
IP address blocks:        205.211.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e4:f5:b9:51:cc:0f:83:b3:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=5452667b-3c44-4763-8c0d-0739d17435e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:44:35:c6:f9:b5:ef:e0:03:83:40:b9:53:
                    0c:a5:23:47:7d:d9:08:f4:55:43:e0:b2:eb:11:a3:
                    21:c7:c1:2a:4e:b6:0c:a1:11:df:1a:2d:a2:27:66:
                    82:50:5f:2d:19:96:a2:9b:2c:1c:a5:a1:5d:65:d9:
                    21:55:79:0c:4d:d8:8f:70:6b:3c:88:5d:ef:ed:b7:
                    ff:99:60:22:b4:c6:31:0c:89:fd:8b:b3:f6:73:e7:
                    47:b1:b3:59:8d:78:2e:c3:36:40:6f:ec:99:64:65:
                    8a:7e:48:65:df:24:f0:fb:af:fc:bf:10:fc:15:90:
                    e1:c9:0d:6d:9c:74:98:11:0c:e2:de:95:1e:5f:97:
                    36:e3:1f:0f:29:f7:8d:4f:68:2e:05:07:c3:4a:b8:
                    a2:c6:0f:53:2d:52:ca:d6:b3:1f:31:ee:4c:6f:2a:
                    bc:4f:dc:72:46:3f:da:ce:4c:91:6c:a0:4b:84:5e:
                    38:66:9a:92:e0:f2:30:5a:c0:49:fc:d3:64:1d:55:
                    c1:0d:79:51:0c:fe:45:60:82:43:a5:85:5a:02:29:
                    e5:d1:c7:21:f6:2c:16:3b:5a:51:ba:fd:29:bc:db:
                    13:66:48:b2:ee:3f:0a:6c:88:e0:1c:25:44:6a:49:
                    f2:b2:a7:47:b3:cb:e8:47:a5:5f:7e:7a:8f:18:f9:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FC:C9:69:06:26:11:6B:18:0F:25:6F:A1:97:BB:66:6C:5D:54:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:fb:a9:f7:8a:75:5d:35:28:88:3e:e7:80:7d:0d:19:d6:
         ef:ee:6b:b1:25:bf:52:eb:b1:46:fb:df:9a:5d:56:55:36:4c:
         a2:80:c5:f6:e3:7b:d4:f0:5a:4a:bf:ba:fe:12:d0:38:7b:ef:
         67:dc:59:c5:80:43:e5:6f:55:21:1e:3b:80:f3:25:2b:d5:15:
         3a:62:ed:93:9e:15:07:b1:68:44:54:3c:eb:99:ac:8e:01:3f:
         f0:6b:39:37:e6:08:e0:f8:ed:f1:fa:70:52:70:a9:b0:a9:13:
         32:1b:b0:0f:19:e4:f3:98:66:9b:0f:fc:79:79:35:c3:0d:6b:
         f7:35:70:3a:4e:2f:44:65:8a:fe:31:6f:73:da:65:09:33:a3:
         8c:df:1c:23:41:1d:f1:c2:a9:4c:d9:98:1b:0b:33:7f:02:14:
         50:01:70:58:f1:60:eb:20:fb:35:0d:0c:e2:30:5b:27:82:ef:
         cd:c6:2c:87:28:4d:86:7c:eb:a6:c0:5b:37:72:f6:cd:b5:48:
         ee:a9:27:b7:ef:88:32:a8:c0:ee:50:9e:6a:f7:ff:94:81:46:
         24:10:ba:3e:10:be:74:89:24:50:93:40:5d:b7:c7:f3:12:2f:
         d5:c6:e9:c5:98:04:a9:fc:96:a2:7c:95:2d:d6:39:47:94:dc:
         15:ad:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org