Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa
File:                     e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa (raw, json)
Hash identifier:          Dqvp79JObZI4cH+bTdhUweGXhMFqNn7ixsIMY8raKpU=
Subject key identifier:   EB:5E:FF:AE:DB:21:1B:C1:90:32:2A:E3:D5:B1:5E:33:76:97:6F:58
Certificate issuer:       /CN=d0df77c4-4a94-461b-9582-441eb75796a4
Certificate serial:       010D0C9F43285847B3CC1584B38F6BAE78798B00
Authority key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     394023
IP address blocks:        206.108.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:15:84:b3:8f:6b:ae:78:79:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0df77c4-4a94-461b-9582-441eb75796a4
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=974f31da-126c-4bde-be5d-3fef313e56f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:43:6b:d5:6b:7f:c6:6f:36:84:64:51:18:
                    f6:36:c9:24:b3:c9:fe:bb:a0:bb:56:ec:b6:f1:6a:
                    72:39:95:25:b3:d4:14:4d:73:b8:71:0a:28:b4:dc:
                    e4:5f:7a:f0:c7:b4:1e:37:05:dd:37:0a:d7:66:3f:
                    28:d7:4b:18:50:d4:77:8d:8d:2f:8e:aa:65:ca:70:
                    fb:1c:0e:eb:ac:2d:d4:6e:d2:9e:f7:84:64:43:fc:
                    5f:44:48:6c:59:64:e2:d9:a3:95:97:81:e0:51:17:
                    34:dc:4d:ff:f9:bd:97:5a:01:8e:9c:eb:88:a0:51:
                    cc:d5:22:05:8f:c8:ef:77:23:9f:e3:a4:5b:e3:ea:
                    33:cb:b5:c3:67:a4:e0:6b:f6:cc:57:6e:8c:a6:06:
                    bb:9e:0c:3d:80:08:69:b6:ae:9d:65:7e:19:c5:74:
                    98:b6:29:a3:05:5f:07:3c:48:a0:9e:91:86:c8:ca:
                    b4:43:3c:06:78:51:ed:60:04:aa:3c:1b:a4:2f:43:
                    ae:49:e6:ca:f6:5e:f9:45:76:eb:d3:f9:ee:c6:78:
                    6c:20:9f:75:8b:9a:83:dc:8c:f0:ae:08:47:79:e8:
                    64:47:95:5f:65:37:54:67:67:98:86:5f:9b:ac:1b:
                    c3:15:55:3c:ce:17:64:14:23:40:54:39:1b:14:5e:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:FF:AE:DB:21:1B:C1:90:32:2A:E3:D5:B1:5E:33:76:97:6F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl

            X509v3 Authority Key Identifier:
                keyid:DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:93:6a:4a:00:c2:e5:b9:fd:db:a9:bb:08:71:99:d0:46:67:
         13:c1:2e:ff:f4:19:20:82:c8:06:b4:cb:f6:9a:62:c9:c2:73:
         05:8c:32:07:4f:2e:42:1a:9a:8e:b4:38:ef:d2:4f:77:8d:0e:
         ad:74:ae:f5:7d:df:56:af:31:d0:7e:9a:b1:07:5e:ce:c0:14:
         9a:45:1b:91:9e:bf:7a:5e:06:a2:e6:1c:89:0a:c2:c5:6c:ff:
         75:c4:fd:3d:df:7b:91:42:78:04:b4:c8:38:be:60:96:70:8c:
         81:bc:83:b2:0f:84:e8:e2:aa:db:4d:0b:18:55:4f:27:c2:3b:
         6b:19:7d:79:df:06:41:f8:6f:38:78:5b:c9:cb:2e:56:0d:4b:
         a3:52:8d:ec:2d:ec:f0:2c:52:08:e6:99:27:43:af:2d:07:66:
         52:aa:37:d7:2c:c7:e4:92:ae:b4:5e:8d:b2:8a:a3:93:36:f9:
         7d:8a:0e:08:e8:f9:56:9f:ae:60:5c:3f:fc:58:dd:48:42:a2:
         a8:d7:98:26:56:6c:15:ae:c3:28:7f:f5:b9:b3:ba:ed:96:5c:
         84:c5:cd:15:04:41:e9:85:30:76:9c:4c:e4:a7:1e:6f:9f:8a:
         3b:87:38:e4:bf:ff:ab:5a:7f:ed:07:67:2c:d3:a4:fc:d7:23:
         cf:ea:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:53:17 2024 by rpki-client on console-ams.rpki-client.org