Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
File:                     bebf7928-f361-384a-ac34-db9c92606597.roa (raw, json)
Hash identifier:          71INSeCjApdgeQcVRkwAnN5f2oBYyhgO0OBcxCTB44k=
Subject key identifier:   CB:45:83:D4:14:6F:DD:5D:3A:2D:13:BF:18:82:18:68:A5:76:43:FF
Certificate issuer:       /CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Certificate serial:       010D0C9F43285847AB6C1257F0D4AF991081A680
Authority key identifier: A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     23465
IP address blocks:        69.71.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:12:57:f0:d4:af:99:10:81:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=2a21db23-ab8d-460b-8c94-6888dab815e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:9d:19:36:c1:c6:1e:c8:e4:ae:fa:d0:1c:
                    8d:60:8b:69:52:75:50:27:ef:63:13:05:0d:14:cb:
                    e6:d3:9b:0e:20:3e:3f:31:be:58:38:6f:45:64:3d:
                    08:e9:06:b2:89:df:b5:0c:b4:34:ff:73:19:52:55:
                    2f:0a:06:e4:dc:ca:ff:2e:fb:ee:44:5a:93:b6:f4:
                    ee:f7:27:1e:ab:73:a2:10:c9:01:5d:32:d5:bc:89:
                    1b:7e:b1:fe:46:e2:7a:81:48:e2:dd:db:bb:f4:38:
                    f8:7e:da:66:ef:e3:9b:7b:b2:47:57:ca:3d:ff:9a:
                    01:b8:ac:74:94:a2:62:0b:91:e5:f5:09:d9:f9:d9:
                    62:7d:e4:66:04:f1:26:24:52:41:93:e0:3a:43:3f:
                    8e:48:5d:7b:7a:f6:7f:34:b7:b5:5c:d2:94:70:17:
                    0a:2e:62:a6:70:e6:74:ed:7d:c0:f6:38:e7:2a:df:
                    b8:23:40:26:24:59:2b:dd:a4:1a:7f:91:fb:60:38:
                    44:4e:77:88:63:64:6e:f3:11:a3:3c:39:95:5a:45:
                    fc:65:31:2f:c2:87:2c:5d:9c:ba:da:ce:57:e8:14:
                    be:74:00:7c:de:f6:62:e0:fd:68:ce:83:53:2c:b0:
                    93:a9:be:1e:0c:ef:1c:65:5d:3a:cd:44:04:7d:3b:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:45:83:D4:14:6F:DD:5D:3A:2D:13:BF:18:82:18:68:A5:76:43:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl

            X509v3 Authority Key Identifier:
                keyid:A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:37:6c:fc:da:29:74:89:2b:5b:4a:42:80:00:74:48:e0:c3:
         0f:d3:aa:30:b1:42:ed:58:f4:29:24:54:29:5d:e9:7c:5a:10:
         77:f0:37:47:6b:8a:23:36:c5:bf:9e:e8:aa:e7:20:11:ae:23:
         b0:db:79:7a:75:7a:bd:35:22:f6:15:93:e7:0a:c2:2f:1a:0f:
         0b:17:d3:b7:34:4d:76:8a:38:5d:bd:5b:b5:7a:7d:90:a8:52:
         0b:ea:ca:d2:d9:0f:9e:9b:8a:44:89:ad:11:a0:06:8c:5b:e0:
         49:74:c3:53:ef:ad:bb:d0:da:14:36:69:7d:b0:58:15:1e:be:
         8a:99:32:1c:f6:49:78:f8:5b:46:c3:31:53:ee:c2:3a:b4:27:
         32:bb:c7:ff:11:88:85:be:d1:b8:f1:ce:ab:58:a2:10:fd:87:
         53:a4:56:5e:aa:94:1b:2c:18:f2:e6:4a:dd:27:f3:03:96:1a:
         83:a2:99:94:ce:6b:7f:51:1f:29:77:b4:86:ce:d0:f0:3d:5c:
         3a:6f:24:00:03:e4:03:8a:76:73:ba:68:87:81:b6:12:25:cc:
         6a:7e:1a:df:57:34:f8:20:bf:a6:de:28:36:74:72:24:80:ee:
         0f:ad:ef:c7:ed:6b:a3:ce:6e:d5:48:82:94:18:b8:37:eb:33:
         6b:a1:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org