Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/ff07aff8-579a-3d70-afd4-ab27ed697392.roa
File:                     ff07aff8-579a-3d70-afd4-ab27ed697392.roa (raw, json)
Hash identifier:          lI10iymNC9PG/Iqabyf1e238HqAvOplkZu1JWb55MgY=
Subject key identifier:   1D:05:91:42:8D:11:94:C5:BF:6B:9B:D6:23:98:94:3A:F2:16:AD:AF
Certificate issuer:       /CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
Certificate serial:       010D0C9F43285845734DAA7CC2E84EABB20DD500
Authority key identifier: BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/ff07aff8-579a-3d70-afd4-ab27ed697392.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     10965
IP address blocks:        192.139.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:aa:7c:c2:e8:4e:ab:b2:0d:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=affd3a3c-e500-468e-b000-33dae0ea2c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:74:ba:08:56:11:cb:d8:71:48:b9:51:be:
                    66:95:84:27:08:40:e0:af:ee:be:b9:d4:9b:e5:be:
                    2b:67:8c:30:1c:4c:e1:f0:95:6f:9a:03:68:4e:4c:
                    a2:71:b8:26:17:67:cd:7b:7d:21:4a:e0:4f:c2:04:
                    e0:15:f5:17:dd:00:1f:b8:0a:cc:67:ab:85:c3:da:
                    06:58:d2:16:f1:f7:f0:2d:ec:f8:92:90:ae:ae:06:
                    90:01:de:ac:52:2f:eb:b5:30:8e:90:7c:a1:dd:cf:
                    fa:7d:f0:97:bc:f8:33:fd:6c:9e:1e:86:0e:6c:a3:
                    b3:c3:53:51:df:a2:33:1e:aa:0a:42:a9:7b:a8:90:
                    9a:36:81:c9:80:6a:b3:e1:56:49:b5:8d:70:ee:a2:
                    6e:97:a5:9a:bc:78:de:54:0d:a4:c9:5b:ff:41:14:
                    93:7f:a0:fe:a4:47:e9:6a:5d:80:d6:b5:22:66:3c:
                    eb:65:fa:cd:d8:85:92:bf:54:44:4d:5b:46:ed:b6:
                    81:6a:32:02:63:ae:9a:8b:ef:9c:8a:b1:87:29:3c:
                    1d:e0:7b:a3:79:fe:a2:33:27:88:f6:79:28:36:ae:
                    1c:2c:2d:57:2f:e3:f3:f1:34:46:74:5c:6c:07:af:
                    4d:56:fd:02:ec:59:36:2a:ae:5c:a0:b1:e2:a5:d5:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:05:91:42:8D:11:94:C5:BF:6B:9B:D6:23:98:94:3A:F2:16:AD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/ff07aff8-579a-3d70-afd4-ab27ed697392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:07:23:b2:a5:44:d6:c7:28:77:ec:62:35:c8:3e:84:60:
         ab:d8:1f:8b:58:81:17:76:07:34:ab:d7:ad:35:a3:83:bd:a4:
         35:a0:90:96:a3:5a:36:91:8e:00:13:72:62:dd:6e:34:90:5c:
         d9:55:dd:ce:05:c5:51:a5:67:7a:e4:12:dd:e4:98:f5:1e:b3:
         d7:14:07:6f:33:61:19:0b:d2:58:0a:bd:c4:57:0f:2f:56:d1:
         a3:40:b6:e7:df:2a:79:4a:2f:15:a5:16:0d:13:b5:a1:ec:9c:
         bd:d7:93:fe:cf:54:8c:16:07:a5:07:a3:79:40:f3:ed:10:2b:
         06:10:ee:87:d3:b7:61:41:21:9e:61:e5:a5:35:88:5a:50:31:
         2f:32:30:89:59:a5:09:d8:5f:df:29:56:59:10:ca:60:4a:e9:
         c5:65:88:2f:d0:d7:81:c5:ff:89:02:cf:c8:08:9c:5a:0c:6f:
         41:df:8d:47:60:de:f1:4e:4b:e5:ce:89:9c:8a:c4:51:e7:53:
         b5:62:11:da:e7:d8:53:b4:d1:2a:e6:97:8a:69:a8:35:79:db:
         48:80:0d:a1:bf:e3:dc:bd:59:51:5f:4e:ac:83:5d:de:85:58:
         f4:a4:90:b9:95:fb:d1:3d:33:d9:4d:6a:47:ce:6f:b7:f0:b8:
         60:2b:48:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:11:07 2024 by rpki-client on console-ams.rpki-client.org