Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/63c2453d-e496-3e86-beae-99fc3a6cf57e.roa
File:                     63c2453d-e496-3e86-beae-99fc3a6cf57e.roa (raw, json)
Hash identifier:          q2ifwwu+jWyqe7RluhYnfoMiGIXHCdDka7/mrrVwNHQ=
Subject key identifier:   9F:FE:52:29:9D:47:C4:37:7A:F5:E6:62:6F:32:6C:D7:5E:9D:D1:D4
Certificate issuer:       /CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0
Certificate serial:       010D0C9F43285847C4AA168F75009B69FEFE2880
Authority key identifier: 2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/63c2453d-e496-3e86-beae-99fc3a6cf57e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     63023
IP address blocks:        69.50.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:16:8f:75:00:9b:69:fe:fe:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=c79ca7f8-e685-4345-baeb-b74323210594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:81:cc:fb:65:52:17:de:dd:d3:75:2b:be:
                    d6:88:13:e7:79:9b:70:1b:e6:ca:3e:dc:5d:42:71:
                    5e:69:bb:6c:a4:db:c6:7b:05:ab:f4:cf:73:d1:78:
                    f4:12:3d:c5:f4:e2:6d:3d:13:aa:2d:c9:29:d4:8a:
                    09:91:23:ec:c5:c2:45:8f:51:fc:4a:0a:b6:55:b9:
                    9f:47:be:cb:eb:f1:09:f2:76:d9:5e:6b:6d:b8:3b:
                    7c:a3:14:e0:dd:61:fc:42:5c:1c:64:ab:e7:98:63:
                    c4:70:ca:6d:63:78:87:f8:27:10:c5:ac:3c:e4:23:
                    76:6e:c8:a7:c3:dc:be:27:d4:ed:0d:07:42:87:99:
                    78:b2:a2:0f:92:1e:12:a8:3f:54:07:48:14:4f:20:
                    7f:ce:80:0c:72:c1:70:81:ae:e5:78:2a:25:38:37:
                    01:66:27:ef:09:6c:02:7d:db:e4:00:3d:3f:ee:32:
                    a1:7f:d8:15:c2:8b:48:ff:8f:54:98:05:ec:a1:13:
                    4c:55:24:21:ba:34:f8:dd:9c:e1:12:44:ab:90:d6:
                    cb:7a:cb:c0:61:96:dc:25:36:bb:5b:7e:30:0d:c1:
                    95:86:32:2f:81:c5:c0:7c:84:69:17:bf:ed:56:0f:
                    66:3c:ab:da:7c:24:27:2d:6a:19:00:8a:17:1f:4d:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:52:29:9D:47:C4:37:7A:F5:E6:62:6F:32:6C:D7:5E:9D:D1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/63c2453d-e496-3e86-beae-99fc3a6cf57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:c5:67:3b:63:88:db:da:0b:3a:ca:e9:bd:c8:44:b8:8e:
         cc:3d:65:98:a3:7a:48:8f:51:10:3a:31:54:3e:7e:40:01:ef:
         c1:d2:3f:9a:59:a6:e9:a8:7d:7b:e3:78:6f:8a:ed:01:fa:5c:
         4c:02:75:36:eb:e0:8e:68:34:1d:1e:07:3c:90:c5:d2:dd:c5:
         7a:6d:df:09:4e:4f:a6:8d:c5:6e:03:99:aa:fc:a2:28:75:6a:
         0d:c7:35:27:cf:56:99:b9:eb:72:26:34:02:40:62:4e:95:91:
         48:bd:4b:80:58:1e:4b:10:38:e3:4f:99:7e:67:2f:84:19:a0:
         1c:b9:b7:b0:36:58:da:ef:f9:49:54:f8:7f:59:45:74:c7:32:
         3f:6b:ed:60:22:53:11:58:88:21:80:4f:97:94:56:9a:b7:6c:
         25:e4:aa:18:5e:03:0a:6e:75:12:d0:a7:10:d5:31:0a:69:2f:
         73:fe:25:7e:82:f1:06:5e:4d:54:d9:5b:f2:ca:2f:db:c7:c4:
         c8:9a:84:e9:c7:ff:c7:bb:66:1f:81:29:2e:fe:24:58:05:7d:
         c9:40:9b:a7:c6:2a:f5:6e:bf:fb:b4:0e:88:85:22:87:3b:78:
         a4:86:9a:03:a6:28:60:bb:bb:3d:d6:cf:f4:ee:5d:72:15:7f:
         e0:9d:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 19:09:52 2024 by rpki-client on console-ams.rpki-client.org