Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/69ca2837-f8bb-3315-a6e8-43bceb550019.roa
File:                     69ca2837-f8bb-3315-a6e8-43bceb550019.roa (raw, json)
Hash identifier:          C7d8/KTnMa1z4EdncSeWfe0D8/RzJXzbCf7yIehWRWE=
Subject key identifier:   DF:35:A0:DE:7C:BF:7C:AB:69:BC:30:11:B7:8C:C3:FD:9B:72:41:C2
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F432858459D2DE26A5B2D01D0FA7BD460
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/69ca2837-f8bb-3315-a6e8-43bceb550019.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     8075
IP address blocks:        199.65.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e2:6a:5b:2d:01:d0:fa:7b:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=d6a14958-016e-4511-aac6-5639ee2273e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:66:ae:ca:3f:18:d9:01:da:d9:e0:08:b2:
                    8b:63:5b:cf:7b:4a:ac:a5:2e:de:87:00:79:94:b7:
                    08:79:88:89:c2:3b:41:ac:13:e4:af:db:12:f1:4c:
                    d9:74:4f:e4:18:f1:d7:a7:a7:41:4f:7f:93:c7:ae:
                    11:7f:a7:e7:fe:6a:dd:d6:59:f3:26:b6:b6:ed:be:
                    4d:ba:8e:c6:ba:20:a7:a6:c8:f2:4b:5f:fb:e9:78:
                    c2:fb:a3:de:4e:ce:d0:40:20:aa:67:3d:19:08:18:
                    be:14:89:aa:48:a5:99:76:bd:d6:b3:62:b6:3a:90:
                    f8:ce:1b:44:05:5d:3a:c1:be:2d:77:62:7a:c6:94:
                    2e:b0:f0:f8:5f:ab:4f:77:fc:56:fb:dd:06:9c:49:
                    f8:25:38:79:0e:ea:b7:4e:8f:8e:56:91:6a:13:4d:
                    7d:7f:c1:fb:ba:16:97:51:ab:8a:9f:76:c9:31:ed:
                    66:7d:d5:5c:8b:b2:e2:67:ac:b1:f3:b5:b6:20:72:
                    47:8a:8e:88:82:5e:62:83:51:40:79:b4:fa:b7:88:
                    88:1b:31:b5:91:bc:29:fe:13:67:6a:df:74:88:3b:
                    44:c5:db:41:99:a8:cc:63:b2:c5:8f:0e:bb:11:d9:
                    5b:96:64:27:48:61:f9:33:4b:3a:a4:da:b1:b0:4b:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:A0:DE:7C:BF:7C:AB:69:BC:30:11:B7:8C:C3:FD:9B:72:41:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/69ca2837-f8bb-3315-a6e8-43bceb550019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:4e:8f:3a:ac:1a:4b:c4:d6:f7:e5:44:f5:bc:db:0b:5c:
         3c:5e:e6:a4:bd:34:16:34:1f:5c:bd:bc:7d:36:1b:d8:47:5e:
         eb:19:87:e2:2d:4a:bf:af:17:41:18:bd:c6:22:ad:54:08:4f:
         f6:3f:0b:11:2c:81:fa:32:57:9f:a3:4a:89:de:1c:d3:a1:c6:
         13:9e:3b:42:25:2e:63:ee:d0:21:9b:86:5e:cf:24:0a:1e:09:
         19:d2:5c:2c:e3:91:59:f2:d3:e8:4c:7c:fd:e0:60:0f:ee:12:
         e4:08:06:b6:0c:5c:d3:25:b8:29:75:50:ea:ee:90:b6:cf:56:
         0f:de:81:40:b5:cd:9b:b3:a4:5c:6b:db:04:89:2b:d8:ef:fb:
         95:44:4d:ae:ea:ff:ff:a3:39:ae:6f:2a:86:08:45:ae:ad:33:
         c3:f9:7c:4a:4b:34:5b:25:e6:94:0f:02:0d:0c:2c:bc:41:d8:
         60:d0:cf:07:6c:09:b4:4a:fb:32:b6:5a:34:ad:67:d6:a6:c0:
         e1:f1:68:4a:51:8a:84:3f:cf:99:0f:f3:89:83:e0:90:92:66:
         db:4d:9b:80:89:4e:1d:71:3b:1c:16:ee:29:d5:b3:06:b6:56:
         4c:bd:66:57:24:d0:14:ce:ab:9f:a4:8e:92:bf:1e:4d:de:9a:
         f9:c8:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:33:22 2024 by rpki-client on console-fra.rpki-client.org