Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa
File:                     d56235c3-7112-36eb-91e7-941956b41963.roa (raw, json)
Hash identifier:          eGVWWvsIK27Y1QmJux6h04DQ0MFF95ru5YiGv2YG2g0=
Subject key identifier:   1D:F2:E1:52:E1:D5:00:82:1C:5D:91:AE:C0:4F:93:AE:F4:98:12:64
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F432858456C5320C797F0B5A4935F8A00
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     19905
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:20:c7:97:f0:b5:a4:93:5f:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=a9c1f9e6-c27e-47b3-9129-ac5b7c698ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:f8:fc:27:33:d4:95:98:bb:1f:d8:a5:7f:
                    05:3a:67:31:c8:83:12:c2:f2:c9:f7:7c:ce:60:0e:
                    dd:d7:01:6b:4a:57:d6:35:f2:6d:94:08:d3:e8:44:
                    c4:77:5c:f8:4f:40:4b:8c:4a:e6:4b:ae:93:50:02:
                    0f:ab:50:6e:60:8d:28:0c:fe:01:54:b6:ca:7d:50:
                    33:7d:94:de:b4:ac:88:a8:3c:62:15:7a:3e:b7:84:
                    60:b5:e6:ce:04:db:17:df:e0:b9:9f:6f:d0:f8:c8:
                    18:ff:bf:ed:94:81:b1:d5:9d:6a:4b:b4:55:1c:24:
                    54:98:a7:d4:3f:23:61:a0:36:77:4e:31:54:e8:9b:
                    14:0e:e7:41:d6:04:22:14:79:be:f4:a2:21:05:da:
                    3b:15:4d:fe:d3:8f:68:62:e6:23:6b:e6:c3:69:2a:
                    ba:dd:b0:b6:4d:e0:ac:b9:d0:53:ef:a9:6a:b3:e0:
                    26:1f:64:f4:df:54:b6:30:92:22:b1:ec:1d:53:a8:
                    87:8b:79:50:57:9f:f8:f0:76:29:ff:70:86:cd:24:
                    e4:7b:4a:7c:ef:6b:12:31:32:d0:d2:1d:84:b8:28:
                    11:76:c5:b5:c8:86:6d:38:f7:87:cc:9c:77:f2:73:
                    69:05:be:9d:f5:ac:26:30:32:18:57:dd:98:f6:96:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F2:E1:52:E1:D5:00:82:1C:5D:91:AE:C0:4F:93:AE:F4:98:12:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:86:1c:9a:84:91:61:2d:d3:1e:b6:88:d0:a7:a9:5a:49:
         21:51:53:1e:bf:2e:a8:3c:e6:49:72:ad:74:e1:06:4a:18:5c:
         b4:9a:fd:c9:eb:a6:ce:3e:68:7e:56:c4:57:71:09:4c:88:29:
         b7:a0:e1:05:e8:13:14:05:75:40:55:bf:92:04:3e:67:85:02:
         ab:bf:b4:22:ec:f6:db:bd:46:ca:db:7e:f9:0d:0a:49:89:bc:
         c4:52:28:c4:ef:9e:d0:cb:3d:98:93:c0:c7:a2:fe:0d:33:82:
         f9:3b:6e:25:66:6e:73:17:99:84:04:fa:29:e8:94:bf:13:e9:
         f3:16:40:0c:5d:94:f7:8a:bd:39:d3:29:8f:55:38:a8:b7:e8:
         bf:5b:8a:6c:fc:fd:4e:e2:1d:20:9b:73:18:ae:fd:37:d7:25:
         e4:2d:75:84:17:09:43:28:ed:35:fc:e1:2c:e6:49:d0:9e:d7:
         27:82:f3:70:b1:f7:80:36:92:0c:93:a3:ca:28:b4:61:86:f5:
         f6:a4:3c:37:00:fa:81:bd:5b:e1:fd:23:2b:7e:d4:c5:db:fa:
         f6:a0:10:81:f0:0f:96:ce:df:42:22:9a:a4:35:df:fe:a8:8d:
         0b:33:a3:a7:e8:de:45:af:df:6b:fb:1c:1c:3a:ca:04:3f:7c:
         01:9d:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:11 2024 by rpki-client on console-fra.rpki-client.org