Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa
File:                     899fc356-7769-3771-8801-72b850e98504.roa (raw, json)
Hash identifier:          pspOvTu8nMV0bTW4PrFuzBT2LWDibAah/HzSNtUhZXs=
Subject key identifier:   27:14:AF:71:38:6F:B0:4B:CE:9C:C6:7F:27:3F:4E:48:9D:0A:B3:A5
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F43285847AB6C13692365DEE9747FEBC0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     13720
IP address blocks:        69.174.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:13:69:23:65:de:e9:74:7f:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=8f81d3bf-59bb-4061-9351-598077f6ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:b9:7e:8e:64:5a:f5:97:6f:d6:c5:c3:7d:
                    8c:d0:64:86:69:8f:51:44:50:e6:1d:b6:47:84:28:
                    bb:f4:2d:a7:29:32:11:ca:b5:c1:f1:59:ad:00:a5:
                    05:3b:0e:8d:d4:61:2c:1b:f4:ba:4b:ad:4a:a0:a3:
                    3c:5b:61:90:cf:65:da:13:88:5a:a2:26:32:99:68:
                    8b:bb:05:eb:f5:d2:16:5e:17:94:ac:b4:70:03:40:
                    46:db:10:8b:06:01:11:33:87:42:50:bb:56:dd:e9:
                    dd:aa:40:7a:56:21:e4:53:8b:50:66:66:d4:9b:33:
                    34:47:97:cc:b8:f4:cf:76:66:dd:53:e3:ed:5e:50:
                    96:a3:30:47:0c:91:c5:1e:ab:c7:6b:41:ce:c2:47:
                    57:80:a8:f7:c9:16:7e:8e:3a:1a:40:f5:a1:7f:95:
                    52:6c:73:55:eb:5b:1c:a5:de:3c:99:a6:b6:72:31:
                    09:ae:47:28:b5:79:96:42:57:df:58:6a:07:e8:67:
                    57:10:be:1e:49:ae:2e:9f:74:bb:5f:f8:bb:f4:a7:
                    dd:17:18:7b:50:cc:14:6b:ad:ba:e5:b9:28:64:ac:
                    1d:50:ea:af:a0:5b:4a:33:2e:0c:a1:83:5f:01:cb:
                    69:22:27:f7:ed:7c:84:c8:e8:be:a8:3d:ad:d2:8a:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:AF:71:38:6F:B0:4B:CE:9C:C6:7F:27:3F:4E:48:9D:0A:B3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:be:29:2f:6d:ed:ec:d7:58:b9:05:d8:76:e7:f9:e9:0f:
         67:23:db:60:7a:6a:3c:a7:f5:b3:67:1d:75:14:f1:2f:e1:7c:
         c9:76:47:6a:25:35:3d:18:60:f1:94:b2:51:17:17:2e:0c:87:
         93:2e:2b:d5:e2:85:03:f7:79:e6:8a:86:67:c5:b0:8d:8d:cb:
         0f:82:0b:67:be:7c:e4:23:b9:33:e3:25:84:60:e7:74:02:0b:
         14:0b:34:a2:76:28:63:5b:6b:60:e0:eb:8a:30:00:59:07:06:
         e0:fd:95:46:b2:f0:c3:ad:d8:8f:cd:84:4e:39:1e:9e:5e:6a:
         25:05:ad:05:72:7b:5a:c8:89:88:b6:f3:7b:9e:1d:b0:e5:34:
         bb:a7:47:1a:2f:bb:a9:b8:2f:0c:d0:96:0c:ec:94:91:37:b6:
         6e:b7:b4:a4:56:7e:5d:8f:24:2b:cb:19:cc:3c:6b:4b:19:39:
         9f:9a:d3:44:10:97:45:ed:9f:f4:6f:0e:75:85:d7:15:39:24:
         c8:4c:03:d1:2e:d7:62:e7:14:4f:64:9f:9d:12:5c:f4:d1:69:
         db:c5:1c:1c:7e:6e:44:95:58:76:17:96:a2:10:1d:a1:24:7d:
         7d:d9:1a:6f:f6:cc:dc:52:ac:ea:81:d7:49:7e:94:64:e9:af:
         58:86:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:10 2024 by rpki-client on console-ams.rpki-client.org