Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/e5715690-5456-34f2-94db-a032059159c2.roa
File:                     e5715690-5456-34f2-94db-a032059159c2.roa (raw, json)
Hash identifier:          5NenjVcsrjVSniEAUx0abfFsYpJMqJ6zWTuZzxnMsWA=
Subject key identifier:   59:BC:83:53:49:6A:89:0F:A9:D3:46:64:17:4B:5B:BF:FE:04:C7:60
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285847DF2F4A7BC89F8F67E219D500
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/e5715690-5456-34f2-94db-a032059159c2.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     11272
IP address blocks:        69.89.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:4a:7b:c8:9f:8f:67:e2:19:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=f2bce819-03b3-44a9-b8f5-2b655954990a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:bf:ff:44:4f:9c:ec:09:d0:a5:76:48:ce:
                    c7:55:ec:ff:cb:63:ab:fc:6d:c2:8e:64:34:4d:b4:
                    79:9a:74:3f:db:be:c7:3e:a5:02:da:17:94:56:45:
                    64:dd:47:ef:f6:fc:8c:2e:c4:3e:07:ef:68:98:69:
                    ad:cc:f4:0b:54:5e:60:8d:45:ac:ac:19:55:12:b1:
                    d1:18:79:ad:f0:46:68:89:cb:d0:ed:f4:fb:6d:40:
                    a7:a8:79:f0:cd:fa:9b:5f:e7:99:67:cd:43:76:83:
                    f4:b2:5f:63:db:96:a9:0d:dd:ea:1f:b8:57:1b:7b:
                    a5:ab:89:9e:35:5b:5e:e2:b8:ee:cd:89:f6:6f:d8:
                    42:91:6b:11:41:1f:91:ce:f6:71:65:6f:9f:84:b5:
                    33:e7:af:83:3c:c2:93:4e:03:2b:66:52:2e:a8:d7:
                    b4:f8:9f:20:27:1c:08:6c:08:5a:53:46:46:86:dd:
                    01:dd:1a:b4:55:e1:0a:e9:be:1d:46:89:c8:e5:5f:
                    c6:50:63:42:9d:a8:66:41:90:bc:ae:df:31:56:12:
                    61:dc:25:13:eb:05:97:64:fc:85:41:e5:ec:ae:f6:
                    be:61:74:8a:83:08:df:85:5e:77:10:b2:a3:93:ea:
                    a3:3a:bc:ad:f5:60:7f:55:db:14:34:c0:cd:12:bd:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:83:53:49:6A:89:0F:A9:D3:46:64:17:4B:5B:BF:FE:04:C7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/e5715690-5456-34f2-94db-a032059159c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:89:3c:6f:f7:ce:cc:4c:ba:1f:71:c3:30:b6:fa:db:0d:
         02:8f:eb:ca:b8:b4:92:4c:cd:50:b8:61:7a:94:d8:22:c8:6e:
         92:70:26:53:b5:1a:90:8b:f3:91:22:90:52:b5:e7:ba:ef:ea:
         a9:1f:61:5e:b9:3e:fa:63:11:bb:af:8a:59:39:04:32:50:44:
         a1:67:48:a3:55:7f:6b:53:98:4c:0a:ee:49:d2:b7:fe:14:18:
         69:a2:71:25:8c:1d:2a:bf:a7:1a:49:3a:de:cd:06:f8:58:3f:
         05:0d:47:a5:dd:bd:70:35:9e:24:f3:f6:e6:2f:b8:bd:64:e1:
         73:7b:d2:fb:7d:54:10:09:44:a3:e2:4e:a7:71:77:a4:01:e7:
         e6:0b:91:34:81:83:03:d9:36:5d:0a:43:72:12:ce:55:af:8c:
         9a:9e:c6:33:0c:65:08:94:90:0a:fc:86:ee:80:b4:b5:fc:fa:
         da:db:d3:38:41:5e:60:c5:61:48:eb:69:8f:f7:8c:85:08:33:
         cd:4c:e7:52:3e:12:64:63:9c:36:51:64:93:50:42:92:49:15:
         a4:e7:69:4b:b1:6f:1a:5b:6b:a5:05:87:5e:df:97:46:87:d1:
         da:81:6b:65:e6:f2:96:cf:28:31:d7:39:7f:41:60:e3:7f:2f:
         e9:f1:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:03 2024 by rpki-client on console-fra.rpki-client.org