Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
File:                     da1134b4-14a8-3573-ade1-c42f592a22ce.roa (raw, json)
Hash identifier:          KuoUkbqpgmJ2iKKKwTkww4vfe5e3qWqOJEUyJs9flgM=
Subject key identifier:   72:C3:CB:1A:BD:65:D7:ED:A8:E7:FB:30:97:E7:C8:86:D4:7F:CC:7D
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845CF6E36F3F0DC346723EDF5C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     13414
IP address blocks:        209.237.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:36:f3:f0:dc:34:67:23:ed:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=61c84c50-2962-4dbe-b963-40370a9aad77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:b2:26:ff:2c:28:d3:d4:f3:b5:98:01:49:
                    ec:83:d1:98:c1:46:00:8e:56:78:d6:78:9f:29:57:
                    47:35:34:f9:3c:a2:69:48:95:a9:77:dd:38:e0:d1:
                    7d:1d:27:3a:64:73:5d:1a:a3:c5:51:48:09:e9:09:
                    b6:0c:3c:d3:d6:0b:2d:9b:f2:43:5b:ed:ad:92:bc:
                    16:b5:21:8b:e8:31:cc:3f:14:11:78:07:ae:4a:16:
                    81:6e:3c:18:74:32:47:f7:58:b4:65:af:c5:c3:38:
                    3b:b7:3e:dd:cc:ca:f0:4e:0d:be:c9:01:a8:c7:4f:
                    ea:3a:3d:67:bd:d6:9f:0a:d7:fe:38:d4:f4:b6:ba:
                    4a:7d:51:ff:8b:97:a8:de:1f:4b:3b:da:a7:51:a6:
                    ea:81:75:b2:17:d7:b2:0f:50:0f:8d:57:ea:bf:dd:
                    16:91:a4:7f:d5:2e:e4:e7:a7:4e:b8:f7:3e:4c:87:
                    f1:67:b5:9e:eb:ec:ba:78:02:ca:93:9a:94:5c:ba:
                    d9:64:e2:8b:17:ff:af:a9:41:64:92:9e:05:0c:13:
                    2e:d2:fb:ef:a9:9b:f1:dc:5b:68:a3:68:7d:f0:55:
                    a1:2c:94:de:40:bb:a7:98:bd:c3:66:95:98:8d:92:
                    07:63:ce:29:3a:ca:51:2e:a0:a5:3a:52:ad:5b:b0:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:CB:1A:BD:65:D7:ED:A8:E7:FB:30:97:E7:C8:86:D4:7F:CC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:92:6d:af:d5:24:5f:7a:cb:8a:d6:9e:3e:80:a0:97:f8:7d:
         a1:35:e7:d9:7e:84:d3:df:5f:69:9f:a5:49:80:bb:13:53:c8:
         d9:90:91:6c:2e:a6:cb:5e:91:95:53:ed:a9:32:98:27:0f:e5:
         3d:1f:d3:c1:40:bd:1b:0d:dd:2c:f6:74:01:66:8e:bc:01:27:
         da:f4:41:14:6b:38:b5:4a:a2:5d:6b:29:38:01:77:8b:b8:fe:
         b5:2a:7c:53:8e:0c:04:98:83:19:71:b5:f8:28:59:a6:10:7d:
         a2:f4:49:93:d4:b6:13:ab:3c:5f:bb:5e:cc:fc:b7:aa:51:a2:
         cc:a3:08:e7:15:68:88:e8:4e:4c:b7:b4:28:0c:cb:72:e6:9a:
         63:1c:8f:a3:53:67:2b:2d:da:1d:f7:1d:a4:ac:6b:c7:8e:db:
         4f:54:69:cf:6c:a5:98:6b:fa:29:ff:f5:d7:72:0e:96:58:22:
         0c:18:35:d7:43:33:dc:aa:1c:8d:36:42:45:28:f1:1c:74:67:
         bc:cf:fa:e8:c0:5f:e5:38:fa:66:cb:88:df:d4:18:c9:6d:c5:
         13:88:44:ae:46:6e:32:55:44:94:96:74:9f:1e:6c:ee:25:a1:
         a5:01:60:65:fa:52:44:e0:92:ca:9b:da:81:42:7d:e2:88:a2:
         9b:0e:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:35:27 2024 by rpki-client on console-fra.rpki-client.org