Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/007ec423-e9f5-3fb8-90ac-cb50345d39fc.roa
File:                     007ec423-e9f5-3fb8-90ac-cb50345d39fc.roa (raw, json)
Hash identifier:          9jMk6BrEe3BxA/3dbAIVziP8hV3dccmOaj/wpVpuXJk=
Subject key identifier:   78:81:18:A6:85:56:8E:9B:08:E8:AB:BC:D3:04:DD:F9:C9:0C:38:89
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584722A078A4F387D70F0221F380
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/007ec423-e9f5-3fb8-90ac-cb50345d39fc.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     0
IP address blocks:        206.51.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:78:a4:f3:87:d7:0f:02:21:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=52fc9b69-772a-4df0-88f7-0e54f6fd1414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:0b:ab:7f:f5:e2:57:3a:f1:39:0c:9d:41:
                    8c:b8:71:19:5b:c2:d7:94:bb:c9:f6:97:ce:8c:93:
                    36:72:44:91:eb:bb:0b:47:e9:4c:78:7a:42:bb:8a:
                    ea:55:f5:a9:c6:99:6a:e6:09:0a:b8:41:bc:d3:1a:
                    d8:7e:f9:c3:f0:31:7f:02:ca:f1:aa:c6:c1:20:e9:
                    ec:a2:0a:e7:d7:4f:22:f9:4f:e2:38:00:2b:35:b7:
                    55:66:a3:4e:3d:0d:ed:da:e4:7a:34:d2:3b:d1:3e:
                    f4:e2:95:6c:6d:f8:e1:37:d7:a3:ff:86:7e:06:38:
                    31:d7:c4:50:3b:61:ec:92:53:40:eb:83:fb:95:bf:
                    b3:6d:00:7a:5c:4c:06:c5:a6:49:eb:2e:08:ef:0f:
                    45:1c:39:c6:74:61:ed:77:e5:ce:7b:95:37:b9:ae:
                    4c:cf:06:af:3a:33:56:37:34:d6:87:90:70:18:42:
                    f8:02:97:c5:e5:34:0c:4c:51:83:11:2f:ab:db:0c:
                    40:2f:1f:4e:d3:a0:0d:1c:6d:4b:d7:d5:42:69:bb:
                    75:a1:d4:93:3b:d0:20:55:ad:66:19:d6:10:0a:df:
                    d0:a4:c2:3d:0e:a0:2c:0c:4e:45:17:55:02:91:b4:
                    6a:74:94:9c:17:45:42:05:f4:c8:25:eb:51:d4:91:
                    92:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:81:18:A6:85:56:8E:9B:08:E8:AB:BC:D3:04:DD:F9:C9:0C:38:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/007ec423-e9f5-3fb8-90ac-cb50345d39fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:30:39:c8:93:4a:bf:de:76:ca:13:db:d3:45:e3:02:bc:
         ac:d5:27:30:9a:d7:31:20:e2:72:b9:a8:01:3b:8e:96:77:f0:
         51:44:4f:1e:69:e9:84:d7:d3:e7:14:7d:c8:99:6e:9b:ea:3a:
         2b:ae:07:ba:ec:7c:4e:f6:4c:81:f0:0b:35:97:2f:4e:06:d4:
         e2:26:8c:27:87:6a:ac:75:a5:b4:0e:27:44:56:2f:f3:6b:f0:
         fb:c4:b2:19:1b:41:3e:2c:c3:65:7a:ce:2d:41:0f:9f:a4:32:
         90:1b:bd:93:b3:3c:f8:aa:bc:ac:4d:df:e5:e6:f5:6c:56:a2:
         67:ea:6f:d6:e5:14:de:3e:d4:63:99:c1:2d:ba:91:b9:b7:e3:
         f8:d6:b9:ba:f0:67:88:49:be:68:ac:66:0e:6f:8d:32:1d:83:
         0d:1e:d9:f8:6d:2e:2a:7d:5c:23:98:db:07:3d:67:8a:3e:f6:
         64:35:3d:f7:a6:01:3d:ee:b1:ff:93:23:4c:ac:a1:30:78:68:
         a8:aa:44:d4:c6:10:1a:fd:33:6f:95:57:fa:43:07:07:19:a9:
         73:ea:95:f4:fb:aa:bf:5e:90:dc:18:7d:e5:ef:1a:55:8c:7b:
         ee:0a:56:6b:02:3e:9c:dd:8c:df:17:d0:e1:d9:e5:a7:90:d7:
         df:78:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org