Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cd344b44-ee6b-3d84-9102-8379a55d2623.roa
File:                     cd344b44-ee6b-3d84-9102-8379a55d2623.roa (raw, json)
Hash identifier:          DUVEpCBps2FtENTkox8IQ8jdNPuMl/AhdQEjoHPYsNw=
Subject key identifier:   8A:BE:A6:FE:91:DE:73:37:77:5D:D7:D1:43:BF:07:BD:15:14:82:DA
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F432858450D858253977D94787D94F280
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cd344b44-ee6b-3d84-9102-8379a55d2623.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     13720
IP address blocks:        69.174.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:82:53:97:7d:94:78:7d:94:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=3a58a1f0-6025-4e33-bbdf-91293f3ca3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:7a:91:b9:36:a7:4a:46:2e:8a:24:b7:c3:
                    65:da:23:e6:70:b1:aa:1e:7f:ed:7d:fc:22:2c:c5:
                    05:e5:57:d2:76:d5:1a:19:67:aa:74:2b:db:08:44:
                    c6:f9:ca:e1:44:ca:6a:35:e8:07:b3:e0:0e:86:8f:
                    8a:e3:9b:88:20:14:92:08:02:54:90:ae:4f:bd:4f:
                    93:5d:d7:58:c3:d8:b2:15:33:27:82:0f:92:4c:30:
                    c3:6c:4e:cb:83:cc:f9:e9:ce:4d:74:e2:79:04:fb:
                    b7:6e:02:87:85:91:80:0d:99:9a:97:09:04:60:67:
                    e1:c5:18:ca:a4:ee:1c:fd:a9:e3:5e:dc:a4:9e:be:
                    28:3c:74:be:f6:fd:a9:ed:d4:3c:6f:08:3a:78:d7:
                    53:7b:8e:65:84:a3:b1:de:b5:f0:13:1c:4b:ad:1a:
                    e8:5a:ea:a9:e6:19:aa:05:6a:83:b1:d6:7d:2e:98:
                    40:99:56:9e:6d:1f:29:9b:e3:08:64:13:05:01:0e:
                    c9:18:94:22:2c:e7:ba:a3:52:b1:63:73:03:73:e8:
                    b9:67:ba:6b:be:cf:10:43:74:ad:37:4d:95:9b:d9:
                    18:b7:f9:66:d9:e6:42:c4:84:07:a6:09:05:b8:d0:
                    ea:75:56:83:89:ee:a4:8b:33:60:8d:a1:22:29:c1:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:A6:FE:91:DE:73:37:77:5D:D7:D1:43:BF:07:BD:15:14:82:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cd344b44-ee6b-3d84-9102-8379a55d2623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:d2:d4:b1:65:76:72:1f:fb:1b:b4:cd:74:6e:a6:fc:43:
         32:ff:4c:fe:1e:40:31:30:2a:85:fc:a6:55:0e:31:9f:45:66:
         45:bf:d0:9e:1a:13:23:46:84:9b:b8:91:2d:47:f4:b0:4f:a5:
         e0:1b:0a:72:ca:ba:cf:c4:40:7b:16:5b:a8:f1:af:b0:df:d7:
         5c:82:da:e2:80:2d:bc:b5:38:b5:af:25:af:78:30:9f:39:bd:
         b0:73:1a:d4:52:87:e1:9e:d3:1d:34:33:f1:16:93:61:94:a8:
         27:dd:ba:05:1c:17:eb:e7:74:9f:a0:d5:57:49:bb:4e:c8:03:
         78:8d:7e:bb:23:2e:29:a9:58:53:3c:47:61:90:0b:75:52:b1:
         97:3c:fd:9c:c1:11:7a:2d:e2:b5:20:7c:4e:1e:79:2a:78:88:
         90:8a:17:89:d0:cb:b0:d1:fb:40:73:aa:ff:ae:01:61:5f:dc:
         90:0d:0c:97:4f:9f:68:2a:5f:d6:3f:b6:59:76:26:68:8d:d1:
         d7:70:bf:b9:6b:ff:3f:f0:1e:ec:eb:9b:4d:81:7f:6c:f9:4c:
         5e:c3:d1:4f:dd:89:54:21:d3:9f:72:28:67:15:11:17:16:36:
         98:8a:20:80:f7:93:b5:54:cf:cc:10:ac:cf:1f:ab:2d:f9:38:
         71:a1:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:38 2024 by rpki-client on console-fra.rpki-client.org