Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa
File:                     7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa (raw, json)
Hash identifier:          ql4ZuvgAIu2KzR6zmtqQoXTSMlsC68/LAbjpDkC0MWA=
Subject key identifier:   A6:CF:90:CD:04:75:DB:79:0A:EE:46:DD:2A:8F:94:54:99:79:6E:5D
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845D0D3A307487890C90C60D200
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     13414
IP address blocks:        209.237.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a3:07:48:78:90:c9:0c:60:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=2773c8f8-e46d-4473-b6bc-0f1fc6b7a007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:c4:e2:f5:fa:80:1c:e0:c7:a7:bb:89:90:
                    ef:6e:38:dd:58:65:5a:28:b9:da:e2:e4:d0:e8:de:
                    e7:68:49:33:15:b9:ef:bc:e5:33:af:66:5f:c0:6c:
                    db:d3:3d:42:56:2b:ce:c4:03:68:7e:ad:2b:9e:0c:
                    2a:76:0c:47:79:c3:da:e5:18:43:71:71:a0:02:74:
                    d0:35:83:a2:ef:b5:4f:17:8c:06:dd:b8:bd:1f:10:
                    b7:95:75:d4:35:5d:49:f0:94:fe:95:60:cd:91:5b:
                    9e:55:30:56:c5:46:af:f9:94:51:2e:24:cb:56:19:
                    11:e5:4b:b7:8d:26:cd:88:f9:35:de:77:f7:2f:12:
                    1a:f0:9c:7d:d6:16:6a:b8:a5:d9:49:2c:50:07:83:
                    ed:9a:03:96:fd:4d:f1:92:7e:31:20:ac:15:37:fb:
                    7c:5f:f7:70:39:66:b8:44:68:b4:17:79:ad:3a:33:
                    11:e4:dc:7e:82:42:ea:42:d1:ce:5c:b3:57:17:0d:
                    22:e0:59:47:81:55:bd:88:89:fb:66:0b:69:69:ec:
                    6d:2c:84:13:c6:0a:83:a9:61:51:52:b7:60:01:05:
                    83:f1:bf:f9:f0:5c:3a:a4:a4:9d:43:de:53:cb:cf:
                    ca:9e:d2:17:69:d4:37:ce:81:76:bd:1d:24:bc:94:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:90:CD:04:75:DB:79:0A:EE:46:DD:2A:8F:94:54:99:79:6E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:6b:34:1a:3e:5f:f6:d0:cf:9b:44:ab:0e:8c:5c:96:a2:
         b2:f3:c2:fa:90:5b:03:4d:7f:79:c1:cf:5c:57:b1:91:41:ad:
         a4:22:c7:8c:c6:65:88:48:dc:8d:b5:b4:fa:c4:fd:82:9d:27:
         8d:2a:75:94:4f:f9:d4:69:b6:81:bf:4e:cf:2e:e9:6a:87:c5:
         59:d5:4b:b5:e1:14:b1:bd:6e:d1:3c:ac:f6:84:1d:3b:dd:22:
         cb:5e:27:a1:6f:7c:89:f6:ca:36:0b:fc:e0:06:90:bf:b8:56:
         17:ba:94:31:1e:2e:87:85:a3:b0:fa:62:f2:d6:77:25:50:cc:
         5b:58:ad:2c:72:fc:97:8d:33:fb:c2:59:8e:c7:b2:aa:84:5d:
         ec:b2:31:45:ea:97:fb:9b:47:e2:01:b1:b1:0c:40:6d:de:d8:
         e1:c1:9c:b0:e8:42:8a:56:b3:1d:26:7a:aa:72:09:40:e6:33:
         e4:3f:9b:eb:79:51:e6:e0:5b:07:3f:d2:6a:88:56:ae:b0:42:
         ca:5c:0b:77:0d:91:e2:e7:fa:a4:0a:a9:7a:e5:06:27:c9:e3:
         c1:69:8d:ac:78:19:ea:2b:54:22:d1:27:d6:93:bd:18:f8:88:
         48:9d:92:51:5e:1e:02:12:d3:df:53:8a:bd:a3:7b:56:f3:d8:
         81:b5:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:31:03 2024 by rpki-client on console-fra.rpki-client.org