Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa
File:                     2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa (raw, json)
Hash identifier:          gdJgRNGnrvs+8YRIKQh/1l85EYLNqLRRsbeQIQZEp2Q=
Subject key identifier:   D3:EC:4B:4E:E6:EF:38:4B:7E:B5:57:47:72:6E:F7:DE:76:22:E0:3A
Certificate issuer:       /CN=411f75d5-7410-4ca6-b23e-146e3726e630
Certificate serial:       010D0C9F432858473095E2BC9542C042313682E0
Authority key identifier: C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     0
IP address blocks:        206.80.238.0/24 maxlen: 24
                          2001:504:91::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e2:bc:95:42:c0:42:31:36:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411f75d5-7410-4ca6-b23e-146e3726e630
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=1889501e-ec96-40cd-995e-0bce955dd466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:fa:1e:f8:4a:02:3d:e1:e9:be:65:42:75:
                    7f:60:ba:f5:8c:34:96:a0:17:c2:9b:35:7d:64:58:
                    6e:1b:f5:f6:d5:af:04:44:ad:45:3a:23:1d:af:d3:
                    25:a1:c6:45:95:c3:75:72:f2:db:87:94:49:41:c4:
                    6c:3f:6a:74:76:20:a7:48:50:11:c6:d4:b4:82:f9:
                    46:95:be:4b:aa:45:0d:fc:e6:3c:d7:21:b7:19:07:
                    f6:a9:d5:35:4e:40:fb:82:ab:82:99:42:7e:cb:3d:
                    a5:52:aa:aa:c1:9c:8a:ab:f8:35:9b:df:02:07:a9:
                    d0:78:7a:ea:48:dd:48:58:f1:90:fe:52:49:10:bc:
                    72:ce:f6:3d:a2:c8:15:01:03:6b:26:7b:94:6d:cb:
                    a9:5d:64:a9:34:6f:55:ab:a9:52:91:fb:00:78:77:
                    ca:6d:a7:48:23:57:df:cd:34:86:a0:9a:32:43:7c:
                    2d:38:fd:32:66:c1:1a:bf:52:0c:fb:d5:21:32:0d:
                    b4:14:e0:66:d6:fa:93:d9:c0:07:23:a1:24:a8:9a:
                    89:8a:a7:96:f4:69:7d:3c:4d:83:8e:03:20:d9:35:
                    49:c1:72:b9:a3:0d:b1:8b:56:2b:07:95:05:cc:52:
                    32:e8:9f:75:e7:17:31:09:20:a2:0d:4a:32:35:54:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EC:4B:4E:E6:EF:38:4B:7E:B5:57:47:72:6E:F7:DE:76:22:E0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl

            X509v3 Authority Key Identifier:
                keyid:C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.238.0/24
                IPv6:
                  2001:504:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:93:58:9b:2d:18:44:f7:43:07:95:b0:c7:31:f1:89:79:0d:
         cb:dd:b5:01:56:68:10:29:42:d4:42:0b:eb:70:d1:37:1b:3e:
         91:91:c4:de:d2:17:a0:e9:a1:04:e5:fa:02:20:cf:bd:b7:7a:
         d3:a9:c8:47:e4:c2:89:6b:98:be:53:28:05:36:89:d6:9c:26:
         17:0d:13:89:e1:d8:c5:3a:aa:dc:f9:82:e2:48:91:1b:b2:04:
         65:4e:70:e3:5e:e2:2b:6d:03:ff:0d:87:d0:7e:6a:71:eb:c2:
         86:f4:8e:70:fc:92:80:56:88:b5:94:e5:6e:21:ee:de:41:47:
         12:10:93:59:92:28:2d:9d:30:20:81:49:51:67:20:0f:ee:bf:
         03:b4:b7:ac:ba:ae:ee:46:ba:32:99:dd:c7:1b:30:23:8d:17:
         6d:ff:a2:52:b8:4e:29:65:ee:9f:dd:07:2f:53:51:c4:a6:a6:
         1e:db:5d:6c:4b:0a:30:de:00:6f:7c:ec:f5:e3:ec:3d:e3:b5:
         44:a7:4a:0c:d4:a2:46:b1:24:6e:06:e4:0b:c5:92:67:58:4b:
         ee:f8:0b:d8:f4:33:ec:24:a7:ef:fa:81:a2:03:5c:8b:43:34:
         e4:db:dc:0e:72:a8:b2:8c:f5:3d:62:42:e9:ea:b8:01:66:50:
         8c:06:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:49 2024 by rpki-client on console-ams.rpki-client.org