Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
File:                     f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa (raw, json)
Hash identifier:          RXyJ4j7zmL81Fm8fKvtCUjHQjv+mAPkCZqYMqKWeE98=
Subject key identifier:   5B:03:EF:F9:D8:B8:A4:38:DE:9C:96:C3:76:EB:EB:F9:42:81:9C:5F
Certificate issuer:       /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Certificate serial:       010D0C9F43285847D6CF4610D5F5C7EEC814A800
Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     399240
IP address blocks:        206.168.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:46:10:d5:f5:c7:ee:c8:14:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=38a0266f-6810-4f78-ac8b-8d15af98042a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:5a:e6:0c:fa:b2:6d:e5:5f:f4:fd:6c:81:
                    17:c3:42:1b:86:e8:a3:57:fe:39:d2:1d:5c:98:4f:
                    fb:14:d3:cb:9a:aa:9a:1c:e7:b5:c2:41:da:7f:bf:
                    a6:2e:f6:ca:1e:3d:db:7a:e5:f9:30:3f:63:53:bd:
                    ec:9c:55:8f:2e:a6:82:f5:a3:b1:9e:17:68:8e:a3:
                    b6:ca:43:31:59:56:29:3b:69:3f:15:6a:25:a8:cc:
                    10:74:52:46:27:59:94:bf:ed:8b:27:fa:62:0a:ce:
                    32:64:67:5f:9f:ba:4d:fc:dc:8d:12:02:69:d1:37:
                    8b:e8:b3:63:84:ff:0d:e0:ba:ea:f2:4a:9d:b8:5e:
                    b3:ef:fb:7c:13:a6:ed:f5:72:f6:ef:de:4b:33:a9:
                    90:83:d2:10:2b:06:50:f7:eb:35:5b:25:7a:a4:91:
                    1e:3b:c7:f1:9b:9a:ed:2a:a1:db:55:d1:3b:9b:f0:
                    50:2d:f5:3d:87:fa:8f:1e:40:a2:e8:5e:a4:15:84:
                    2d:78:6a:14:c1:93:c9:36:57:3d:fb:aa:a8:2c:5a:
                    5a:94:91:c3:7e:72:ab:f7:82:44:31:f0:ef:12:6d:
                    f9:be:99:f7:03:8f:b7:a8:18:58:82:a2:eb:77:38:
                    dd:db:fe:eb:12:5c:5e:c3:cf:6a:5d:af:64:59:48:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:EF:F9:D8:B8:A4:38:DE:9C:96:C3:76:EB:EB:F9:42:81:9C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:7e:92:61:ed:32:08:5b:e4:03:00:b0:21:f6:3c:43:91:9c:
         46:cf:e2:53:5a:7b:ce:21:18:00:8d:af:0e:16:8a:a4:5a:ea:
         ed:c4:40:17:f8:a6:0b:5d:21:27:a0:4b:c9:27:4b:50:62:e1:
         92:e7:ca:c1:e3:52:bb:52:3f:99:ae:c8:ba:e1:41:28:f0:1e:
         cd:f1:b7:58:b4:a5:d0:54:0a:dd:3d:98:fd:94:59:3e:00:0a:
         b6:b0:5d:21:e6:43:cf:10:61:2d:a7:d0:5f:2b:74:22:1e:6b:
         de:a5:fb:5b:8f:9b:19:73:65:6f:f8:ee:13:74:47:8e:94:62:
         4a:d4:b5:a7:46:21:ec:cf:0c:ca:07:7b:cf:3c:8c:02:2a:6a:
         2f:2c:a7:2c:c2:35:55:e6:cc:12:6b:88:a6:70:ef:63:50:50:
         c4:c5:d1:92:2a:32:f9:91:e1:05:77:a3:8f:65:fb:39:9e:b7:
         ab:47:91:6f:bf:92:e2:c5:c9:7d:25:8b:76:af:a1:a2:3c:9f:
         5e:f9:83:f3:cf:12:34:19:a0:80:17:69:c1:33:5f:54:17:29:
         4f:7a:81:83:56:e1:60:88:81:b4:ab:c3:c3:c5:51:c0:fe:c6:
         81:19:b0:20:a8:4c:86:06:2e:64:19:6f:e8:42:ae:22:67:82:
         fa:13:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:19 2024 by rpki-client on console-fra.rpki-client.org