Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
File:                     86ae9906-6182-3f5f-b7b0-38347082a9aa.roa (raw, json)
Hash identifier:          bL+eo+i3KgPS43689iqoSm1q9BRNr2VBopfSk2FRzC4=
Subject key identifier:   EC:8D:D7:65:3C:03:C1:AE:05:AA:EA:48:76:F5:60:45:C2:20:E5:16
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F4328584797E13BBB8EECFAA295C954D8
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     54138
IP address blocks:        199.33.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3b:bb:8e:ec:fa:a2:95:c9:54:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=643169bf-e6a1-470a-a93f-7a02dfd028f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:91:86:b7:7f:f3:15:99:d1:9a:d4:6e:bd:
                    25:a7:c5:33:ee:ae:07:91:ca:9e:05:61:fc:7d:75:
                    89:2d:68:ac:e0:0b:c9:9d:5b:1a:fe:1d:4b:07:9a:
                    23:25:bb:ec:f1:31:5b:32:e0:8d:1c:15:9f:1d:7c:
                    28:85:c9:55:de:a7:79:34:74:a5:f3:77:60:c9:91:
                    85:1e:ae:74:1b:ed:a5:ab:ee:b8:61:45:1e:3e:8f:
                    20:ae:ab:79:7b:63:61:f4:bf:87:a3:ec:97:da:c2:
                    ac:ce:60:dd:8c:d1:ab:a3:05:f1:8c:d9:13:72:db:
                    6f:4b:32:42:59:ef:a6:c0:af:f2:0f:16:86:65:e0:
                    1c:87:7a:be:74:2d:41:f8:bf:28:61:f1:32:f0:9d:
                    36:e7:24:7b:11:08:f2:10:e8:d1:bc:6d:f3:c9:3f:
                    c2:4a:df:52:48:03:94:77:df:43:da:58:87:a4:e3:
                    87:c4:6f:24:2c:01:95:5b:bd:ee:1d:b7:f5:ff:cc:
                    63:ad:94:32:4f:f6:45:52:1c:db:12:5e:bc:ae:b9:
                    cb:3b:cd:35:57:f9:00:48:e7:93:aa:59:f2:9a:a4:
                    36:11:9d:cb:80:49:db:f9:02:cb:fd:31:41:54:f0:
                    e9:97:d4:5c:21:b4:fe:3a:52:3a:60:15:c2:46:74:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8D:D7:65:3C:03:C1:AE:05:AA:EA:48:76:F5:60:45:C2:20:E5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:90:71:13:72:56:f8:c0:a8:6c:21:a3:26:23:86:14:50:
         77:98:24:75:4a:b6:9f:8d:fe:f7:d1:07:77:c3:f2:de:5e:01:
         25:e6:c4:df:4c:c5:82:2d:08:b0:e0:4f:f1:5b:01:d3:04:32:
         50:b4:8f:66:b2:a2:75:f2:e6:1b:db:a8:33:c0:26:dc:1a:6f:
         cd:93:d7:eb:5c:c0:dc:17:3b:df:92:e8:27:7b:60:07:8c:15:
         02:ab:e7:e4:ba:80:e1:d4:ec:ab:74:75:73:20:75:07:b9:62:
         78:5b:5d:4d:29:a5:de:0a:bd:7c:2c:6b:0e:c1:e8:a0:20:b9:
         c2:6f:76:f2:6e:cf:25:98:83:8d:d3:e7:96:98:d5:f1:36:f9:
         b3:d6:d2:be:38:5f:17:b7:88:bb:be:51:bb:d0:4a:55:68:fd:
         ed:87:a1:76:75:8d:55:58:91:c2:2f:f2:6c:d3:58:67:cb:a2:
         a4:63:c6:94:ab:52:30:a6:09:28:5f:ec:a4:f3:bc:5c:e1:7d:
         7e:31:5b:9a:08:ec:e5:8b:f4:65:b3:af:f6:c1:09:6a:b7:1f:
         bf:c5:3b:a6:31:ea:4c:b6:b1:19:80:12:62:26:a2:91:4a:71:
         f7:2e:d5:27:ed:2e:42:c2:23:79:f4:99:bf:59:4e:23:b5:0a:
         89:8d:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:04 2024 by rpki-client on console-ams.rpki-client.org