Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
File:                     646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa (raw, json)
Hash identifier:          LfUR4aaV4P/H2v7xd8Z4wO3mtuIMymmgbnwuDJPNaeI=
Subject key identifier:   6D:81:C6:A9:32:2E:66:6C:63:9C:8B:F3:F9:E7:E1:19:EA:59:97:99
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F43285847BAC6ABF2CC9943D0FC790E00
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     13649
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:ab:f2:cc:99:43:d0:fc:79:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=4b127bcf-74dd-4e0e-87f0-3d0b2093a3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:db:ef:8f:e1:da:8f:22:ec:8c:91:8b:d2:
                    e1:75:62:d7:2e:db:f4:6d:bb:0e:b0:2c:23:1e:b5:
                    72:3c:4e:c1:58:f5:01:12:49:38:17:e3:01:85:3c:
                    5b:8e:73:ed:0a:e3:1e:c8:fc:d3:04:c7:51:04:a1:
                    a3:6c:6d:c0:5b:f5:af:5d:04:0e:77:6a:6e:0e:5b:
                    54:eb:58:a1:0f:be:a6:f7:60:c2:3b:b5:03:cf:78:
                    73:ad:2b:16:50:eb:ae:49:be:d6:37:6a:e9:ba:1f:
                    43:a9:ff:d3:c9:b0:81:ca:77:36:00:0c:69:7f:09:
                    9b:12:84:1d:3c:88:49:c3:e9:e4:7c:72:7b:8c:d0:
                    94:28:a6:dd:24:3f:56:2a:0e:fd:40:47:1d:e9:bb:
                    e8:57:79:83:e0:d4:68:68:73:5e:07:83:34:bb:c2:
                    29:60:d9:75:9e:d5:1d:ba:8c:61:56:ed:18:03:b6:
                    5c:dd:5f:a8:78:c7:26:31:62:d3:f0:5a:b6:ad:ba:
                    83:f5:f2:f1:45:ea:e8:3c:14:26:5a:89:b5:ba:ce:
                    01:f0:7f:06:5b:62:60:18:8d:57:f2:8d:93:61:5e:
                    18:d2:82:eb:c0:8e:a6:cf:00:b5:43:cb:5b:9a:85:
                    8a:8a:5a:04:ef:40:98:e9:ab:9c:f4:63:22:29:19:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:C6:A9:32:2E:66:6C:63:9C:8B:F3:F9:E7:E1:19:EA:59:97:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:e0:e8:bd:fb:e7:3c:66:de:be:04:b1:44:dc:13:89:45:
         bd:d3:24:f9:54:33:22:c7:27:9f:b6:5e:4a:53:b4:65:7b:47:
         8c:4e:b1:60:3d:15:82:bc:16:35:dd:da:38:74:ad:91:04:05:
         71:39:9f:84:c9:33:76:6b:5a:3d:2d:ed:d6:e8:f8:60:4a:37:
         9e:ca:97:5c:24:cd:aa:d2:23:40:57:21:27:9b:3e:b3:66:c0:
         8f:f7:0e:a8:7b:31:e8:39:96:69:f3:29:57:be:7b:52:a1:70:
         ad:a2:95:e4:1e:f6:d3:a9:13:6c:b9:70:2b:a5:01:6e:c7:9e:
         bb:d1:f6:b4:0c:81:48:64:a8:12:c3:35:8b:88:d6:8a:aa:b2:
         1b:2d:25:32:84:26:71:1b:eb:93:d9:b3:f6:52:24:50:c0:52:
         81:e8:05:22:f8:b3:00:65:68:0b:88:d1:88:7a:bd:de:90:ad:
         ab:f1:01:54:4e:66:5a:f0:57:95:37:5b:38:97:05:45:e5:1c:
         76:8f:c9:d7:67:0b:3d:52:dc:e7:8f:60:f1:10:4e:23:67:f5:
         33:4e:3f:32:f5:f5:cb:e1:69:b4:25:32:f8:61:f9:a6:9c:16:
         0c:0c:e5:c4:3a:b5:27:e0:6a:c4:84:aa:eb:7d:f9:4d:05:30:
         d8:cd:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org