Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa
File:                     68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa (raw, json)
Hash identifier:          4TFeQNn1unc/shjULrjdHIhphoqBgfdx7vecrARyQnk=
Subject key identifier:   CF:54:EE:98:0D:01:69:E9:A3:03:DC:9F:AD:00:2D:F2:FE:C9:19:00
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F432858475EA62800FD80F570448C35C0
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     20304
IP address blocks:        69.71.137.0/24 maxlen: 24
                          69.71.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:28:00:fd:80:f5:70:44:8c:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=e1037a62-2236-4a75-a948-4d4d298afb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:ff:c2:44:e8:56:b5:fb:d0:f7:21:98:c7:
                    6b:48:bf:1f:5b:51:f9:00:7e:66:af:0f:e4:1f:1a:
                    e1:23:5e:c7:68:5e:28:8b:47:4d:7d:51:d4:56:c1:
                    45:6e:bb:2f:48:e3:4b:1e:3a:69:37:26:9f:01:a2:
                    a0:3f:af:b0:39:3e:c1:a1:a0:fb:95:77:32:0e:46:
                    bf:16:7b:86:12:e5:dd:91:0c:b3:db:7d:8e:60:cb:
                    f4:a6:56:4b:62:f9:ea:89:45:14:4a:0d:24:85:fb:
                    27:a5:f7:f1:fb:af:33:83:b8:26:dd:3d:47:7a:c7:
                    0b:a3:82:4e:35:cb:58:cc:88:f7:66:41:08:da:7f:
                    6f:73:91:2c:13:b5:ee:60:be:ce:f2:6c:90:80:37:
                    60:12:74:b3:f8:67:56:bd:15:63:63:91:03:56:a0:
                    5f:80:66:c2:ca:c5:be:4b:f1:14:1c:2b:8a:37:c1:
                    28:4a:ce:1c:61:15:b2:c9:6a:df:78:00:61:0b:2a:
                    5b:22:54:b4:64:32:6c:c3:ed:55:ad:5a:82:0b:39:
                    fe:9f:c5:1d:24:1b:6b:81:e9:a3:9c:c8:75:15:b3:
                    c4:5a:8e:c3:a4:53:6c:0f:36:40:8b:0c:38:85:ce:
                    4e:f7:68:86:b0:33:e9:fa:1e:6e:43:f0:2f:b2:a1:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:EE:98:0D:01:69:E9:A3:03:DC:9F:AD:00:2D:F2:FE:C9:19:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.137.0-69.71.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:93:1f:c3:ed:e0:a5:bb:1c:52:5f:62:02:27:9b:0c:88:
         be:3f:ce:d6:14:9e:b6:cd:7c:e6:4d:38:8c:a5:fc:6d:79:ac:
         81:29:e2:6f:e9:66:6c:ca:0d:6e:b4:03:6d:b7:7b:c3:88:62:
         18:75:a4:9c:0e:e5:8f:3c:cc:00:81:a3:99:14:b4:70:c6:fb:
         0c:08:40:17:81:0f:2a:c9:2e:0f:97:ba:97:19:a7:c2:d5:f8:
         17:99:4b:c3:0b:cf:ac:ae:53:de:e1:46:20:6d:80:44:d7:32:
         15:d0:08:5f:66:ce:c5:34:bd:f6:e7:c7:03:0d:07:79:78:b5:
         38:b4:b0:74:04:2a:eb:2b:72:8f:14:da:35:5d:1b:55:75:06:
         1e:0c:5e:30:c8:df:31:99:9e:eb:42:7e:ab:9f:d8:0a:6b:a7:
         30:5f:95:b9:f8:f0:b2:fc:16:ae:3a:46:72:0e:28:d9:85:a9:
         cb:22:9e:08:70:ab:14:83:73:2a:d4:38:68:00:4c:a5:08:6e:
         af:73:44:a0:6f:66:4f:20:08:df:a7:6b:25:a1:87:66:22:a6:
         43:14:df:c5:45:cb:47:79:60:87:ff:48:5b:46:61:2e:69:6d:
         f7:f8:65:c2:7e:8f:a7:eb:af:51:ec:dc:32:0f:cf:07:81:0c:
         d7:b0:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:04 2024 by rpki-client on console-fra.rpki-client.org