Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb697cf9-2cfe-3f14-99b9-e760444ef181.roa
File:                     bb697cf9-2cfe-3f14-99b9-e760444ef181.roa (raw, json)
Hash identifier:          qLHKVMTusht60LY/uVR/GnOj4AUk01TF+q1BZ96QB0w=
Subject key identifier:   B5:73:81:4A:FE:63:8E:6E:17:32:62:FB:2B:32:0F:DD:93:30:03:4F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858457FDDD7E311150C0EF0B2A940
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb697cf9-2cfe-3f14-99b9-e760444ef181.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     834
IP address blocks:        69.171.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d7:e3:11:15:0c:0e:f0:b2:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=7b51808d-305e-4142-92f4-829eb1180975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:68:92:e7:3a:33:ca:38:99:6d:e7:88:fb:
                    1b:2b:cb:dc:34:1e:22:8e:5f:91:cd:fa:b9:a3:30:
                    f0:de:a1:c5:6d:30:14:34:46:61:2c:95:69:5b:8e:
                    47:87:f3:8f:0c:e9:66:d6:3b:8f:15:0b:e1:54:28:
                    7a:79:c6:61:f6:a0:04:bc:51:53:2a:ef:eb:6b:d7:
                    2d:65:dd:16:4c:5c:9e:90:58:d7:fb:45:09:c0:e4:
                    2c:e1:ac:ba:db:99:4f:15:5e:32:a3:8b:6b:f1:ed:
                    06:9a:72:22:db:30:0d:77:13:d6:95:fd:da:2a:1a:
                    32:e5:20:b7:f1:e5:b8:00:3e:21:b8:d2:6c:0b:ae:
                    5e:41:df:fa:cb:0d:51:73:32:d9:43:3f:14:5f:ad:
                    3b:16:40:a8:9a:04:60:8c:f8:55:bd:d9:ae:27:89:
                    e3:79:95:d6:a1:20:1d:09:e8:37:b5:53:24:dd:14:
                    78:77:06:c7:47:e8:5b:c9:24:36:aa:39:f5:95:c4:
                    f1:e2:bc:b3:42:9f:e8:22:f5:a8:17:c8:bf:5a:de:
                    73:5e:2e:a7:89:ce:73:58:52:9a:74:e4:9b:10:f4:
                    39:f8:d6:ca:b0:8b:35:3d:0a:bb:ea:f5:13:91:ea:
                    06:9c:82:50:f5:e4:4b:44:20:3e:2b:a1:e3:0c:a6:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:73:81:4A:FE:63:8E:6E:17:32:62:FB:2B:32:0F:DD:93:30:03:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb697cf9-2cfe-3f14-99b9-e760444ef181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:5e:b1:3c:a8:5c:fc:de:99:25:cc:92:6c:1e:e0:d6:02:
         e9:85:18:de:f1:c1:ea:6a:fc:0e:51:64:8d:a4:bf:19:c4:13:
         85:6b:10:c8:b3:6e:ed:0b:da:e2:75:1b:b6:49:f8:8a:e2:54:
         0a:8f:05:ab:d8:58:15:d6:b4:d3:51:6c:1e:7b:50:79:9f:34:
         b0:c6:9f:97:03:9a:c8:4d:d7:55:b4:33:2a:4a:92:16:98:17:
         24:75:b2:99:85:3c:f6:33:ff:82:4c:a9:82:ab:70:0d:4e:ee:
         a3:6e:4d:58:46:15:e3:52:3b:e5:2e:56:3a:b2:66:d0:fc:40:
         33:1c:dd:2c:2b:93:0f:cc:4a:21:a6:5b:f1:ec:a4:18:fc:c4:
         e9:1d:17:cc:04:12:21:1b:33:a3:3f:50:6a:9a:e3:6e:3c:6f:
         41:b8:d6:67:a8:3a:16:ed:6a:03:e9:4b:6c:61:cf:7e:91:ec:
         de:77:ce:8e:cd:ae:7b:ce:d2:0b:38:6a:7f:b9:00:37:09:6a:
         ac:e8:22:7e:20:5f:b9:91:e8:c3:43:7e:36:5c:ef:6b:e0:61:
         1e:a1:33:c8:cd:fe:2c:a5:0f:bf:d9:f8:59:38:24:dc:1a:98:
         1d:d7:09:62:14:b5:17:2c:f9:70:7f:ec:91:02:8c:4d:dc:55:
         98:b1:84:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:29 2024 by rpki-client on console-fra.rpki-client.org