Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
File:                     7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa (raw, json)
Hash identifier:          6TrMJy1//EG++5jQflrpwnVLAL0gzaNsPAfRczaG6Ak=
Subject key identifier:   8B:88:F9:9F:F3:D4:D0:1A:4F:8D:0D:0C:5A:54:40:13:BE:A3:51:54
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845CF6E3AE214663E146FC872C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     13414
IP address blocks:        209.237.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3a:e2:14:66:3e:14:6f:c8:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=df59db5c-bef8-42db-a9d0-081480035187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:56:0e:79:ec:82:5b:30:7b:ac:46:cb:11:
                    86:77:99:88:17:68:60:0c:66:66:96:65:71:fc:7a:
                    97:4e:ff:71:27:d6:af:a2:c9:9f:63:f1:e4:33:ac:
                    49:08:04:cf:a4:fb:38:3c:89:76:49:65:69:d6:ab:
                    61:e3:e8:e1:62:27:ca:0b:23:b8:1a:d4:ec:9f:da:
                    65:a1:d1:37:54:c8:d2:a0:c1:a2:e9:5c:99:bf:09:
                    ba:6b:c1:64:67:ff:62:21:f9:c5:ca:00:78:36:ae:
                    1c:82:d0:b0:d2:8d:1c:24:d2:b3:85:2e:ad:fa:71:
                    71:c3:08:70:06:49:a9:86:cc:6a:9c:26:d0:e2:34:
                    7e:23:60:3e:e6:91:39:b8:5b:42:92:7b:99:44:76:
                    2e:9c:03:1a:76:0e:38:48:12:56:c1:31:94:c2:64:
                    8d:e9:ca:c5:8f:ce:17:68:29:05:b4:32:15:a6:69:
                    34:7d:35:63:b4:51:46:54:db:ad:09:a5:57:83:85:
                    9d:09:86:b3:4b:a5:42:7d:f6:ee:9d:0a:98:b5:62:
                    72:66:52:bb:fe:cc:b2:bf:ed:4c:35:9f:6a:52:6a:
                    26:1b:db:66:14:63:af:28:59:9a:2a:d6:62:43:a9:
                    90:e8:d3:2c:5a:26:a9:8c:c7:0f:40:8d:b6:df:d6:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:F9:9F:F3:D4:D0:1A:4F:8D:0D:0C:5A:54:40:13:BE:A3:51:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:54:0e:fe:fb:07:ba:ed:9c:e5:c7:20:0f:55:5f:62:45:48:
         69:eb:bf:00:4b:7c:28:50:b2:27:40:eb:8e:2a:1d:6c:78:bd:
         7a:5a:a1:e2:4b:ab:be:b2:56:ca:c9:5b:bf:16:f8:51:7f:e1:
         1c:bc:0c:11:13:85:35:de:7e:bf:12:96:a3:8e:bb:7d:2e:d1:
         6e:43:dc:ae:a4:6a:4b:1e:81:ca:47:bb:37:fb:83:68:27:11:
         f3:2b:34:81:11:46:91:c7:ee:22:de:5b:75:be:ff:05:1f:28:
         15:61:71:a4:9c:62:c1:b8:68:62:67:e6:65:c6:77:c9:a4:9d:
         30:40:0e:3b:8d:88:ab:71:c2:19:ce:14:9b:d4:cd:c2:e7:6d:
         11:66:25:5b:17:de:f8:9d:24:2b:3c:c8:96:28:3a:59:38:0d:
         97:d8:0c:e8:db:73:df:bd:df:91:78:ba:0a:0f:54:66:e0:df:
         56:5e:1c:35:0e:f0:24:e1:1e:f8:53:95:39:81:ed:72:77:04:
         03:e4:92:b7:ea:09:14:9f:7e:43:db:ee:8b:44:72:67:2b:f0:
         cd:72:ad:91:5d:94:89:22:54:57:b6:8e:99:37:b9:c1:e1:01:
         ac:21:e6:dc:b9:ec:db:c4:17:fe:28:b2:05:a9:67:4b:64:6e:
         ea:b8:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:09:42 2024 by rpki-client on console-ams.rpki-client.org