Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa
File:                     d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (raw, json)
Hash identifier:          XFiZA3lzX1yKPcN3QR94YxoCFc8iwxsTmRUXEj/AZG0=
Subject key identifier:   2A:CE:57:43:EC:57:F9:6E:DE:4A:E8:26:4F:5D:3B:AA:0C:AB:2B:8A
Certificate issuer:       /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Certificate serial:       010D0C9F432858478D478ADC89C26ACB7486C400
Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa
Signing time:             Tue 15 Oct 2024 17:53:05 +0000
ROA not before:           Tue 15 Oct 2024 17:53:05 +0000
ROA not after:            Mon 13 Jan 2025 18:53:05 +0000
asID:                     16509
IP address blocks:        208.71.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:47:8a:dc:89:c2:6a:cb:74:86:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
        Validity
            Not Before: Oct 15 17:53:05 2024 GMT
            Not After : Jan 13 18:53:05 2025 GMT
        Subject: CN=6db958ec-1722-4cf2-82f5-e69207887c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:4e:00:90:24:79:c7:ee:e7:e9:95:48:1c:
                    92:11:3f:67:d8:1c:e5:7e:bb:14:91:d1:5e:42:be:
                    a2:4f:dd:15:6e:ed:02:09:af:ba:06:2a:81:81:e4:
                    ba:b6:d7:73:6c:30:79:7e:8b:40:5a:c5:e9:94:39:
                    b1:fb:de:94:ec:ce:c3:a0:fb:9a:c2:32:16:9b:cd:
                    49:51:17:c6:71:ca:91:9a:04:94:c0:15:40:4a:a5:
                    2d:aa:fb:fc:7c:e9:eb:7b:7b:63:04:80:2b:e2:5e:
                    ac:7d:50:ae:c9:4a:49:eb:a0:5d:0f:a6:e1:19:5b:
                    d5:2d:56:12:ee:42:e4:d3:e2:11:fd:43:23:78:f6:
                    c5:a3:bd:28:f7:2b:5f:e1:ca:7d:32:8c:83:a7:54:
                    34:eb:75:a6:51:eb:d4:68:8d:d6:da:b3:fe:25:1c:
                    79:56:70:27:04:40:da:05:3d:8e:36:89:e8:83:1e:
                    5e:92:f4:8c:f3:63:ce:d7:88:37:d7:ff:96:75:48:
                    85:7f:c0:8f:d2:53:a0:b5:56:09:27:f8:05:e7:a8:
                    b0:c9:ab:52:d4:72:f1:35:01:cf:01:5a:9b:3a:39:
                    86:12:10:d8:85:e7:42:fe:16:17:4f:28:58:2c:3f:
                    41:1b:32:5d:e8:2c:4e:82:e1:19:88:81:e6:d7:13:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:57:43:EC:57:F9:6E:DE:4A:E8:26:4F:5D:3B:AA:0C:AB:2B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:77:73:64:4f:05:a9:86:c5:2e:85:74:04:e2:8b:e8:d6:
         ae:b0:bb:78:f7:f9:7d:59:b0:fa:3b:63:c7:b7:6f:67:bd:aa:
         f9:32:57:61:a4:cf:fe:30:3a:dc:64:0e:41:60:e8:26:a3:ea:
         b9:32:2e:a5:07:ff:e3:a3:3b:5a:1b:c7:53:da:c9:a7:70:b4:
         4b:ce:58:ab:52:66:bf:73:f3:30:99:e4:c3:84:4f:6c:08:ad:
         a3:95:57:58:1b:76:ab:1c:61:9c:8b:88:bf:fd:40:bf:57:4e:
         8e:19:80:ed:4e:90:25:48:f8:6b:a8:f4:1a:cf:9a:fd:ea:cc:
         43:51:59:c3:a0:1f:61:fa:18:b3:5d:3f:77:7f:4f:4b:fe:66:
         97:86:de:1c:8a:91:aa:9e:55:5c:99:89:4f:3c:9c:13:df:78:
         f1:a7:17:31:c8:b5:64:32:f0:5a:3a:cf:ff:ae:a4:cd:e2:07:
         41:45:23:78:6c:1f:eb:bf:f4:04:60:c9:6f:a0:f2:13:a5:27:
         c7:a8:83:ed:62:be:84:c7:1e:e7:06:b8:21:4e:cc:b1:5d:bf:
         52:7c:c1:24:bb:bd:23:66:98:13:d4:c5:a2:d4:5e:b7:90:92:
         38:e6:f8:6b:e1:e8:ea:25:f3:0e:57:fa:6c:7f:cf:8b:27:a5:
         51:b9:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:41 2024 by rpki-client on console-ams.rpki-client.org