Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/deece2f3-aaeb-3d77-94d7-880d879954ab.roa
File:                     deece2f3-aaeb-3d77-94d7-880d879954ab.roa (raw, json)
Hash identifier:          BnpxqbdM+P1UT22WUeo1PACqRT2in6+QFdQhO72spvI=
Subject key identifier:   D1:47:2A:2F:F5:13:67:F1:8B:AF:9A:0A:0C:65:58:A1:B3:F3:F2:74
Certificate issuer:       /CN=961dbf2a-aa65-45d0-ab69-205783d0db66
Certificate serial:       010D0C9F43285847AB6C079099D6CC68A0626A50
Authority key identifier: BC:3A:83:D0:54:60:17:44:44:2E:61:6E:3D:8E:B7:F8:3C:AA:0B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/deece2f3-aaeb-3d77-94d7-880d879954ab.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     10423
IP address blocks:        69.176.128.0/19 maxlen: 24
                          72.44.96.0/19 maxlen: 24
                          2604:71c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:07:90:99:d6:cc:68:a0:62:6a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961dbf2a-aa65-45d0-ab69-205783d0db66
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=c9a55020-91bc-4dcf-997c-613fc5da71e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:63:83:0b:e3:5f:41:d5:b1:48:0f:bc:1e:
                    50:b9:ac:41:15:cc:23:89:a9:33:88:92:14:66:8c:
                    68:b1:d7:3b:e3:05:db:54:5d:32:6d:03:6f:02:1f:
                    20:fd:cf:16:00:9f:a0:ce:a7:09:48:a5:d3:1d:9e:
                    37:3f:ef:4e:3b:d0:c9:63:45:24:b3:42:ec:c5:fe:
                    ba:d0:c0:8a:5c:77:66:db:a8:81:17:9d:37:95:0a:
                    ad:a1:6b:f9:f3:ba:3d:e1:ce:a5:4f:af:ea:20:e2:
                    9f:1e:13:d3:0e:8b:f5:6f:f0:e8:5a:e4:e5:cc:a1:
                    fe:2e:b2:30:61:a6:6a:df:de:7f:f5:f7:be:4c:f3:
                    73:8b:d7:20:92:2d:b1:7d:12:47:ca:f3:a6:e2:af:
                    ac:5e:a8:58:68:d2:b2:b2:f0:27:35:34:7b:47:17:
                    e2:b5:29:05:ef:ab:1d:d3:8f:a4:6b:0f:07:a0:72:
                    34:7f:d6:7d:d5:40:30:55:4b:e8:a6:51:5c:f6:08:
                    29:ce:c2:0c:55:58:7a:cd:2b:79:e3:18:2f:e3:6d:
                    54:cd:ee:53:43:e0:08:d0:9b:d0:cc:6d:cc:91:1b:
                    62:cb:25:d8:72:b0:4b:07:ee:7b:a9:c6:6a:a1:3a:
                    aa:4d:6c:c9:a2:0b:c2:76:44:4a:68:fe:2b:2f:b0:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:2A:2F:F5:13:67:F1:8B:AF:9A:0A:0C:65:58:A1:B3:F3:F2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/deece2f3-aaeb-3d77-94d7-880d879954ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.crl

            X509v3 Authority Key Identifier:
                keyid:BC:3A:83:D0:54:60:17:44:44:2E:61:6E:3D:8E:B7:F8:3C:AA:0B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.128.0/19
                  72.44.96.0/19
                IPv6:
                  2604:71c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:4c:5f:c2:23:6c:26:ba:fd:86:30:da:0d:b3:ad:31:c8:
         9f:2a:4a:c8:11:31:46:1f:60:b7:fb:b2:97:f3:b4:ee:10:b0:
         0b:cd:8a:9b:cc:50:05:b9:6c:00:63:e0:d0:8c:cf:76:06:08:
         ec:03:02:61:bf:9d:f7:44:2a:e6:e0:69:29:22:12:f7:06:cc:
         05:2d:3c:1f:79:c6:40:61:af:ee:20:a6:b4:1f:3e:fd:98:50:
         b6:95:09:7d:6e:c5:d2:78:20:45:5c:85:0e:0e:37:c0:b3:22:
         1a:8d:2b:eb:66:99:77:bc:b7:6b:bd:9f:b1:10:e5:83:89:97:
         a6:0b:a4:50:85:73:7d:f0:d2:e0:c5:a8:61:5d:d9:f2:fb:c4:
         18:a3:ca:00:9a:5a:f5:69:06:cb:9b:e5:88:1e:f8:4c:59:e9:
         39:e8:07:80:6a:18:78:dc:fe:6f:f5:b7:8e:f4:0d:2b:da:ee:
         5a:00:fc:fc:8d:4f:19:c2:0c:83:79:b7:e4:ed:2e:f4:bb:b6:
         9d:0c:1d:13:11:c5:aa:ec:88:a9:06:b6:67:ce:07:f5:a7:a1:
         78:60:30:3a:dc:9f:99:34:07:62:a2:3c:1a:cf:84:97:ca:82:
         9a:7c:2a:2e:43:1c:18:c8:d0:ff:30:bd:86:fa:95:33:07:01:
         46:a0:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org