Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
File:                     86ae9906-6182-3f5f-b7b0-38347082a9aa.roa (raw, json)
Hash identifier:          Szd7K4Auh47nj1kFQP0gQeSqVCvvxubIdDLiertvQfg=
Subject key identifier:   2B:22:B6:49:89:B6:E5:5A:A0:CB:73:0C:C2:B5:84:9A:7B:AF:73:D2
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F43285844F8955A8555F9F8A79EFEB400
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     54138
IP address blocks:        199.33.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:5a:85:55:f9:f8:a7:9e:fe:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=18d26097-d8af-44b2-af2a-f3ffbaf188a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:2f:3a:6b:18:d5:ba:ef:44:28:e2:0e:83:
                    18:25:9b:76:69:11:65:c5:65:e6:f2:7c:60:12:df:
                    13:32:87:63:a9:be:55:76:b9:87:dc:bc:0d:2e:97:
                    f5:f3:d6:00:bb:88:e5:52:aa:4a:5c:01:a7:0f:dd:
                    fb:6c:e1:1b:ad:25:4d:62:48:17:85:dc:ee:dd:31:
                    8f:0d:aa:b5:73:0a:e1:a3:62:62:97:d9:5a:f9:7d:
                    c9:20:ee:f2:23:b2:0d:4d:d4:1a:6f:77:50:2e:cb:
                    28:b0:06:c1:26:fd:87:e3:38:28:27:c7:72:4b:05:
                    fc:55:3d:9b:bf:a6:5e:0b:6e:34:ff:a5:c5:20:4d:
                    bf:70:5a:57:b0:85:34:82:df:3e:36:af:08:01:e4:
                    a9:9b:41:3d:ba:12:16:3a:7d:06:7b:e4:aa:63:c4:
                    a2:ed:5e:91:e3:39:12:d2:1e:da:52:c9:9d:23:e0:
                    1e:e4:7a:5b:dd:46:4e:bb:a7:c0:5e:8c:13:41:3b:
                    97:5e:71:0c:60:44:7f:9b:b4:f6:7c:1f:ba:95:a4:
                    2e:fd:06:ce:76:79:f3:77:c3:60:1f:06:b1:9b:83:
                    a3:3e:97:81:14:7f:a2:25:ce:49:0b:80:d3:42:c5:
                    f2:9d:5c:2c:ef:d6:a7:6a:e9:e9:95:34:16:ff:bb:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:22:B6:49:89:B6:E5:5A:A0:CB:73:0C:C2:B5:84:9A:7B:AF:73:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:f6:d7:3c:d1:87:ee:d4:0c:b4:df:da:29:4c:b7:e0:58:
         42:0b:27:11:0b:42:3d:d2:2f:33:e5:76:26:c5:4d:56:07:85:
         04:25:eb:91:81:3f:4d:d2:5a:6d:03:f7:71:f1:ae:5d:40:a1:
         36:96:77:86:9c:42:8e:61:c5:0c:05:ba:d8:4e:cd:f7:e2:be:
         0c:27:5f:9d:54:65:98:f6:7a:00:0e:e3:3c:e1:a5:ed:b7:fb:
         a8:49:f9:da:25:06:a4:e7:d0:50:61:76:98:78:99:a4:99:c4:
         7f:b6:23:f1:47:c9:bc:d4:41:ba:5e:6d:3c:f6:8d:cf:59:8a:
         c6:f0:15:af:4b:14:fd:fe:90:0a:59:20:9d:6c:b1:64:8f:14:
         37:6c:08:d3:0f:99:1f:7c:59:47:0d:ea:74:01:4b:77:c9:41:
         83:aa:33:23:ac:db:aa:37:e9:f6:de:26:3d:2f:3e:60:75:75:
         f7:e1:19:38:4d:6e:76:13:c0:19:84:aa:36:88:70:e4:72:ce:
         67:1b:db:97:08:ca:01:67:75:e3:ca:d9:bd:3e:04:de:47:d1:
         3e:25:4e:0e:0a:5a:a4:6c:37:8f:4e:36:a5:f9:eb:cd:2e:bc:
         63:46:41:22:37:2a:c9:2a:03:0c:63:9a:eb:52:b2:93:b5:70:
         2b:7d:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:27:41 2024 by rpki-client on console-fra.rpki-client.org