Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ddb5479c-0e14-3de5-9638-c857eac92fc1.roa
File:                     ddb5479c-0e14-3de5-9638-c857eac92fc1.roa (raw, json)
Hash identifier:          n0Z4htsSGUverZPLAgGRlyxumSTDg0mEHUxvRaZ0/qg=
Subject key identifier:   63:EA:BD:A7:BF:C9:18:AC:5F:B5:25:85:DC:D9:F3:4C:8B:6A:E7:FF
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F43285847CFD4D905037C9E434AB09D00
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ddb5479c-0e14-3de5-9638-c857eac92fc1.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     20148
IP address blocks:        205.143.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d9:05:03:7c:9e:43:4a:b0:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=2206cae5-c857-4b92-90c6-8e1d9def6e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:5e:c0:a3:0e:55:57:a6:ae:e7:14:33:04:
                    5e:72:98:1c:7b:eb:90:de:7f:95:a2:82:02:b1:c5:
                    7b:2a:82:73:ac:85:b6:09:5f:55:89:cd:51:b3:b2:
                    2b:66:a8:39:44:00:04:40:1f:90:11:36:00:52:97:
                    f6:35:0c:91:a2:d4:e3:78:79:cf:62:fb:de:72:5d:
                    35:9c:5e:5b:d9:b3:1a:df:51:79:cc:0a:46:77:48:
                    c1:9d:9c:d9:29:08:65:13:09:3a:af:73:39:30:3e:
                    c8:e9:4d:22:86:60:a5:6d:42:6d:f9:a7:cc:dc:f1:
                    c4:5a:fe:13:74:d5:92:02:5e:13:03:e4:82:e4:73:
                    17:c2:bb:7b:d1:07:0c:57:84:0c:64:97:d0:31:4f:
                    92:7f:fb:76:76:2f:87:ae:8d:e6:18:ae:5a:16:8c:
                    08:c5:fb:19:20:83:98:bc:4e:af:1a:4b:17:05:3d:
                    02:6e:1e:09:d2:d2:fe:d9:c0:b5:d6:6b:88:64:9e:
                    75:a9:3e:f1:64:5b:89:3c:97:fe:9c:46:43:47:22:
                    c1:76:3c:98:8f:75:32:bc:ab:ee:64:7e:a9:90:98:
                    e4:a7:9f:92:bc:98:22:3d:70:94:54:ab:19:c1:9c:
                    2d:a6:72:87:22:a6:06:02:83:f8:f2:d1:da:3d:70:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EA:BD:A7:BF:C9:18:AC:5F:B5:25:85:DC:D9:F3:4C:8B:6A:E7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ddb5479c-0e14-3de5-9638-c857eac92fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:29:6f:8d:e6:de:ed:9b:38:85:b2:e6:36:cf:e9:80:e3:
         c7:10:25:03:0d:42:ec:95:80:0f:5e:a4:30:80:af:3a:fb:d3:
         08:c5:ff:6a:a9:05:32:e1:35:c1:27:94:13:85:7c:8b:32:75:
         e3:20:e0:02:35:a0:ea:78:b0:a2:da:e1:e2:b8:3f:27:b9:4c:
         ca:dd:f1:72:8e:5f:53:1a:1a:b4:7c:d1:a7:47:a3:6b:61:b0:
         12:5e:b6:65:4f:77:22:6e:47:88:5b:41:ab:ed:7d:d8:17:31:
         f2:4e:d9:3e:d6:cb:a0:08:6e:ae:90:8c:b2:f1:fe:95:26:26:
         ac:bc:3e:b4:1e:69:f6:66:6a:12:b0:d9:b5:fb:1f:45:c6:20:
         09:0f:57:35:75:fb:aa:30:1a:27:ce:b9:aa:d8:18:ac:c5:3b:
         e9:98:67:30:60:ae:ab:c1:33:96:ab:17:8c:18:1e:4f:81:cc:
         09:3a:a1:55:e9:03:1a:3e:0c:d3:1c:9c:33:8f:b9:94:a6:8e:
         85:5b:0c:ff:e7:15:9d:b3:75:e3:e1:af:a7:66:f3:91:ae:1d:
         b8:8d:0a:93:36:44:d5:b2:9f:55:2d:4e:59:93:62:9e:8a:3f:
         82:0c:53:37:39:54:19:6d:4c:92:c9:47:6a:dd:54:c2:95:13:
         54:f0:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org