Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
File:                     bebf7928-f361-384a-ac34-db9c92606597.roa (raw, json)
Hash identifier:          td136Ht3uA0uULM2wS4CmCBDR/30gTkE85/x/MeSYLQ=
Subject key identifier:   A9:D8:6E:69:8B:82:E3:AB:BB:7A:FE:05:E6:67:90:20:0B:CB:9F:39
Certificate issuer:       /CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Certificate serial:       010D0C9F432858450D858656D5E44D9CC864F8E0
Authority key identifier: A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     23465
IP address blocks:        69.71.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:86:56:d5:e4:4d:9c:c8:64:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=df6406a6-9984-4eea-98ff-4a666ab968ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:14:03:e9:6b:e5:ba:60:77:32:b8:e4:08:
                    49:92:be:5c:50:17:aa:3a:b1:bd:5b:cf:66:46:44:
                    ff:12:00:9b:99:64:f5:22:05:88:50:f4:bf:6d:cb:
                    8e:11:a6:22:61:13:dd:a4:94:f5:a0:6e:b6:49:1b:
                    25:40:ff:a6:80:3d:27:e3:54:1a:08:d6:21:37:64:
                    5e:82:89:21:d3:9a:7b:ae:a8:ba:51:0a:99:26:d3:
                    79:f4:db:66:2f:68:32:65:1b:be:d6:93:40:5e:cf:
                    ea:3a:c1:8b:d2:19:c8:a0:fc:30:9e:01:c3:2b:47:
                    f3:9b:12:4b:e0:3f:5a:82:7c:05:e5:3e:62:4c:28:
                    d6:9a:5e:4b:80:03:5a:b5:f6:3a:2b:17:79:de:07:
                    51:6f:5c:1a:97:6c:6a:58:22:82:2f:90:8e:ab:7c:
                    9e:ff:7d:69:a1:84:82:d5:1f:ca:e9:f1:1e:84:15:
                    66:44:b5:65:72:98:fa:59:b6:a9:0f:dd:a1:f5:4e:
                    74:48:ab:0c:dd:f5:a1:6d:69:38:03:b2:13:7b:c8:
                    b9:f0:b1:03:d8:a9:73:42:cd:6e:e0:e2:78:37:cb:
                    0e:55:07:3f:c2:a2:80:66:91:26:2b:2d:7d:93:1d:
                    a8:d0:c1:57:e7:3f:a6:82:02:b5:31:19:09:05:87:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D8:6E:69:8B:82:E3:AB:BB:7A:FE:05:E6:67:90:20:0B:CB:9F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl

            X509v3 Authority Key Identifier:
                keyid:A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:d0:12:3c:ce:87:f4:95:fa:a6:f9:a4:de:2d:87:d2:0e:
         29:16:ab:45:6d:e2:d8:71:c9:92:f3:bb:cc:c1:bf:f8:e7:e3:
         8f:bc:ff:3a:b0:42:c8:a6:6f:91:47:69:21:dd:06:36:9f:73:
         41:5c:1b:2c:87:4e:2b:07:43:35:d9:cb:eb:69:35:03:57:c8:
         58:f3:30:91:bf:44:79:0a:20:37:c6:9a:98:87:ff:ae:32:8b:
         94:a8:da:82:45:ba:81:8b:1c:69:fd:17:1d:68:49:9a:76:30:
         0b:16:a3:f8:32:cc:57:84:bf:3f:9a:f9:17:f1:c4:bf:03:30:
         8d:fa:72:49:0a:db:60:0b:c2:07:e6:1b:8d:d1:59:7b:6b:c1:
         9d:0b:55:7f:b8:03:75:8a:93:fd:82:dd:f5:5c:5b:53:c0:a7:
         6f:bb:d3:f9:38:06:c3:dc:e3:e8:22:25:56:c2:8f:3b:78:f5:
         a1:64:a0:91:49:c6:ef:71:7d:5b:3f:12:f0:92:7e:70:f4:3c:
         55:56:59:73:4e:84:f5:15:ea:73:c5:b1:de:94:85:ea:13:96:
         66:6b:de:0c:1f:b6:24:f8:4b:f7:79:df:60:e9:7c:fe:4a:35:
         37:e4:af:51:22:57:60:3f:e2:1d:c6:54:c5:6f:7e:45:bf:af:
         d3:20:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:28 2024 by rpki-client on console-ams.rpki-client.org