Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/331c69ac-aa4a-3329-9917-b5191bee3889.roa
File:                     331c69ac-aa4a-3329-9917-b5191bee3889.roa (raw, json)
Hash identifier:          WHg2ks/xi+8IQ9ssHa4ehATSRracpd+dLC7Ozu69d+c=
Subject key identifier:   22:AD:98:35:85:F8:2C:DC:D2:79:F6:47:A8:A9:6F:32:D9:A6:DD:1C
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F432858455A2D873C7C16895ABFF4F400
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/331c69ac-aa4a-3329-9917-b5191bee3889.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     62651
IP address blocks:        69.16.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:87:3c:7c:16:89:5a:bf:f4:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=a80ec680-60b7-4d94-9ad2-4be889cae841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:5f:3f:b7:43:b4:32:a2:aa:49:79:16:cf:
                    96:f9:04:ad:78:1b:e1:e1:b7:48:d8:b8:41:6e:e6:
                    9a:7e:9c:12:ee:a0:f0:40:d7:aa:a7:f9:25:48:06:
                    45:ad:36:4b:c7:12:70:ee:f2:77:e9:56:a4:68:c0:
                    25:3c:4d:d0:96:4a:3f:02:09:e6:73:01:f6:0a:63:
                    ed:15:06:7a:b6:e1:c0:bf:28:da:b1:3e:bb:31:e6:
                    79:55:33:dc:f9:ba:21:b7:1c:3a:8c:06:70:32:db:
                    76:2a:17:bf:45:7d:8c:93:fd:5f:c4:54:dc:b8:21:
                    7d:9b:73:82:d7:c8:05:99:90:49:e6:12:0e:14:25:
                    cc:81:a4:fc:b6:6e:36:54:06:c7:04:8d:1e:ea:3d:
                    f6:4b:cf:9c:30:66:76:ea:bc:96:77:91:8a:e6:b8:
                    2f:36:90:7c:4a:f8:67:6a:47:51:25:02:fc:b1:0b:
                    fa:16:f7:ef:69:f7:48:26:40:01:4a:2f:b7:bb:ae:
                    7b:bf:08:06:94:ce:0e:85:bc:78:b9:6d:51:e8:a3:
                    8e:55:d0:e0:19:c6:d2:70:e6:ae:e6:cf:32:7e:bb:
                    aa:7a:44:b5:24:7d:e6:1e:f9:11:a2:9c:4b:68:53:
                    47:51:18:c1:5a:58:93:06:d3:ab:24:c8:8c:02:06:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AD:98:35:85:F8:2C:DC:D2:79:F6:47:A8:A9:6F:32:D9:A6:DD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/331c69ac-aa4a-3329-9917-b5191bee3889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:d6:28:a9:6f:cd:94:91:7f:7a:8e:a4:38:b7:b7:70:1c:
         41:b2:70:29:50:5e:29:99:4d:fd:3e:ae:2b:7f:58:56:34:d4:
         86:8d:dd:cf:8b:57:5c:ef:ea:5c:64:55:69:a7:ca:b9:09:8e:
         7b:c8:8e:a3:f8:23:ae:9a:15:95:ea:8c:51:85:0b:1c:97:20:
         06:86:29:bf:d6:09:b9:43:f0:ee:9a:cf:60:e2:05:9d:d2:14:
         1c:03:6b:33:2c:a5:43:b1:8b:34:53:15:6f:c2:78:53:db:aa:
         dc:65:cd:69:68:1b:41:31:f7:ba:41:a9:87:c5:fb:72:59:ee:
         1d:ac:7e:c7:00:d0:2d:80:d2:47:97:fb:50:6c:fa:14:3b:54:
         31:66:c1:21:bb:61:eb:5b:fc:09:3b:65:68:25:f8:7f:3d:2b:
         08:7e:a2:a3:8d:2e:55:ae:46:41:ca:9f:6b:ae:cb:36:8f:4b:
         51:82:78:11:2b:c6:90:36:cb:c5:30:f3:ca:82:0d:f2:80:f2:
         1b:55:a9:9a:ba:74:a9:84:db:6d:6a:5e:a0:5d:49:1f:26:3c:
         1f:bd:25:da:35:65:1f:77:ca:eb:a8:04:82:c4:5d:82:10:2f:
         56:6d:c9:1e:f0:39:3f:9b:f6:2f:e8:46:e6:ff:b0:7e:59:19:
         31:ef:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:09 2024 by rpki-client on console-fra.rpki-client.org