Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa
File:                     f7262f57-ce99-39cb-b66b-7cc44160ea61.roa (raw, json)
Hash identifier:          kfTcTfcPYrCPw16aLaTSIjd+ksYpSavvN33iEXuuBn8=
Subject key identifier:   DB:3E:AC:B1:86:E1:D8:E4:A9:25:DC:85:F8:1C:C5:50:1A:3D:05:AB
Certificate issuer:       /CN=b76a56d7-e03c-4adc-a642-166acb54d72b
Certificate serial:       010D0C9F43285847EFEF8AC532E0444FDCEE8F80
Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     32277
IP address blocks:        206.125.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8a:c5:32:e0:44:4f:dc:ee:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=ae5e87f9-8701-42ac-8e75-d3361abb630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:cc:34:37:64:32:a8:71:ba:01:c8:9f:17:
                    3c:98:2c:55:9f:69:5b:36:9e:f5:d4:41:c1:26:3a:
                    3f:2d:da:0e:7e:1a:70:79:4f:68:90:b0:fd:1a:6f:
                    a3:52:c1:51:86:99:fa:b4:c6:b6:df:89:03:a2:38:
                    3f:99:fc:e2:bf:b5:c2:af:4a:fb:13:b7:02:f4:95:
                    65:b4:55:40:c5:cf:f1:00:71:8c:4c:a7:7d:b7:00:
                    be:77:4d:ae:06:68:f9:8f:e6:cc:3d:7f:a8:5d:eb:
                    5d:26:0a:54:cc:1c:17:c8:a1:22:b9:b6:ff:78:6a:
                    44:74:36:f0:be:31:ce:f4:de:f3:63:3e:72:ec:d3:
                    5b:d4:57:6e:0c:8f:fb:7c:6b:fd:53:ef:59:05:98:
                    cb:18:2e:ac:8d:96:f9:96:da:56:76:17:d1:c4:fa:
                    69:5b:c5:9f:ad:ac:ab:66:ab:05:92:8d:26:5d:90:
                    2f:ce:2f:c1:9d:40:50:92:3b:1c:47:1e:e0:91:01:
                    92:ae:40:9d:ed:c1:55:86:e7:25:1f:66:fb:f8:df:
                    b5:42:f7:aa:46:9e:dd:77:38:e1:4d:e4:69:03:f1:
                    ea:9d:e4:9d:c3:75:1a:1f:f4:1a:83:69:bd:15:08:
                    6e:1c:72:fb:4f:ae:f9:9c:75:a3:f9:ef:2f:b5:c2:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3E:AC:B1:86:E1:D8:E4:A9:25:DC:85:F8:1C:C5:50:1A:3D:05:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl

            X509v3 Authority Key Identifier:
                keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:8e:26:97:cc:c3:44:42:bf:b5:3a:d3:1d:8a:ac:16:d1:
         09:9d:68:62:ec:41:9f:fe:6c:ac:35:de:42:d5:25:e2:d8:80:
         30:78:3a:30:3b:35:e1:08:60:46:56:0c:7e:91:eb:04:aa:a9:
         70:92:a0:27:90:1a:b4:90:e4:ad:36:33:81:43:9d:50:a2:d7:
         03:d3:09:d4:6a:f8:92:8c:dc:95:e7:c3:6f:8c:98:ce:f4:ff:
         ee:0f:58:ec:75:cb:9e:b5:16:1c:e0:36:8d:8a:7f:36:e0:bb:
         bf:f3:f2:71:e9:49:da:0c:0d:a9:9c:95:32:d8:73:c2:f7:ea:
         da:2a:1a:c4:55:2a:15:6d:fc:c0:2f:69:42:95:4a:91:48:96:
         73:84:94:bd:7d:6a:9d:47:1c:2d:7d:c1:51:af:02:e9:66:45:
         bf:f3:82:e6:e3:22:e4:82:0f:d7:18:f5:ad:41:f0:1d:e5:40:
         77:8d:4e:eb:16:bc:b8:e4:5d:ee:a0:d8:e4:f9:9e:bd:f4:90:
         53:0a:78:b1:f4:2e:47:ee:e4:8a:c4:bc:b6:3c:6f:18:4d:c4:
         fc:9c:97:de:14:3c:30:4c:39:84:e4:c5:84:c9:e6:e4:16:0f:
         22:73:02:a5:3f:fa:87:ca:dc:fa:c5:83:27:db:9a:85:4d:32:
         66:95:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org