Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa
File:                     7227acb3-123f-331a-8f3b-2f0488de64a2.roa (raw, json)
Hash identifier:          ffHuiywqbt5n2Hb7VH5fBp0XKag86U3jZVJ9W3vCSms=
Subject key identifier:   DD:60:F5:E0:97:55:DD:30:AD:91:C1:E6:DA:20:D5:00:CF:8A:2D:49
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584569886DC77F5BD9B4312D88C0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     394391
IP address blocks:        69.56.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:6d:c7:7f:5b:d9:b4:31:2d:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=3b75499c-4e94-42d1-8db1-513c3b2421fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:6b:80:21:91:4c:2f:ac:de:ef:ce:f1:16:
                    e1:4d:9e:c8:01:de:5a:b3:eb:00:a3:ae:2f:66:15:
                    32:da:09:3f:ba:ca:6d:df:f6:2b:06:9c:0e:4c:89:
                    6f:6e:ba:32:36:5c:7d:ac:75:a0:51:e1:e5:f6:cd:
                    8e:b9:99:39:d3:9c:3b:fa:1f:0b:bb:b6:b1:6b:8b:
                    17:51:d0:99:1f:da:af:87:ab:a5:45:48:df:98:77:
                    7f:e5:13:f0:c0:7d:c2:76:56:05:73:98:10:4b:8a:
                    f8:9b:e6:4a:00:e1:2c:d1:cf:8b:1c:d1:c5:a3:56:
                    5c:20:fd:6e:32:ef:ea:fa:d9:b3:ec:93:85:ff:c4:
                    db:07:15:df:46:1c:43:5b:d6:7c:9a:21:a4:1e:ae:
                    80:31:46:24:2d:7c:f1:e6:d4:75:32:da:aa:f1:42:
                    67:c6:40:f3:53:aa:51:00:27:fe:fc:16:0f:42:53:
                    a0:7d:f5:5e:ee:23:63:a7:4d:1e:8d:4f:58:58:ff:
                    9f:10:57:9e:31:93:cc:f5:87:19:39:f8:19:ed:8c:
                    46:32:8b:aa:2d:b9:25:9d:be:67:66:6d:c6:fb:aa:
                    f5:12:f9:42:a8:71:c3:f0:7a:be:8f:dc:bd:38:9a:
                    36:2a:ea:a4:0d:2b:e1:fb:4a:e2:05:70:e7:05:77:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:60:F5:E0:97:55:DD:30:AD:91:C1:E6:DA:20:D5:00:CF:8A:2D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:a1:b9:e8:99:d3:ed:0e:99:fe:90:e8:7f:b5:d4:95:53:
         e9:4a:8e:f7:b9:9a:d2:bb:e7:7a:3e:8c:07:a5:80:6d:a8:cd:
         cf:a1:69:39:b2:5c:0c:da:fe:af:2d:a8:78:88:76:23:d3:64:
         d4:ec:7f:10:bd:de:d4:9e:fa:0d:8b:b5:00:a9:d0:6e:dd:3d:
         e7:be:ef:1b:b3:b7:83:3f:49:ac:93:4e:2e:22:5e:39:57:fd:
         19:79:9f:dc:48:00:3f:13:09:76:53:67:d4:8c:9e:2a:5d:89:
         58:e0:46:63:df:0c:25:07:04:24:0e:97:52:ca:fe:e5:44:77:
         72:47:47:43:2e:69:d9:2d:30:4f:4d:6f:57:e8:f0:b6:01:1a:
         0f:77:c6:3c:71:53:0e:01:01:19:72:b4:f1:b9:8e:85:32:bb:
         59:98:f3:1e:c7:ed:e8:8d:27:66:8d:82:29:a2:b3:ce:a1:19:
         63:0d:89:90:90:0b:f3:0b:43:98:c7:d9:a7:6c:84:ef:41:e7:
         1a:be:2f:08:d4:d6:e6:b5:14:8c:21:c8:76:61:2c:92:3a:31:
         ce:41:54:75:5f:b9:4c:95:1c:25:54:1d:b9:b6:d3:b9:4c:27:
         93:c5:23:37:5b:00:f7:8e:0c:72:07:cd:3c:e4:2f:1e:3f:03:
         cd:39:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:11 2024 by rpki-client on console-fra.rpki-client.org