Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1368c5a4-3541-351f-b8ad-667c678eb189.roa
File:                     1368c5a4-3541-351f-b8ad-667c678eb189.roa (raw, json)
Hash identifier:          fZbL/27SJz6R/BIf92ewtysJluWSJ6z31cu2bXPonEM=
Subject key identifier:   71:27:DA:B6:0B:B4:E1:8D:8E:69:36:CB:29:DE:96:D7:FC:3C:74:F2
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584769D0CE920466DCD264C22400
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1368c5a4-3541-351f-b8ad-667c678eb189.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     3356
IP address blocks:        69.44.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:ce:92:04:66:dc:d2:64:c2:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=22efb66d-9e13-48c2-b961-c4bf445084c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:4c:03:d1:df:89:40:ad:8d:fc:ca:36:70:
                    f0:ca:f5:62:c8:a6:5b:1b:5f:f2:04:96:1f:a0:ac:
                    19:55:24:ad:f2:41:f2:45:77:60:ea:61:92:43:a5:
                    91:48:a3:c7:02:da:6c:33:e1:8f:57:4c:49:24:ab:
                    5f:ea:8c:d6:6c:b1:81:a2:33:eb:2a:6b:3e:e6:cf:
                    26:b9:56:21:07:5f:05:fc:cf:70:3f:e6:65:a0:ea:
                    59:b2:1d:91:c6:f5:82:3f:dd:83:40:f7:19:d1:0f:
                    d8:aa:36:90:92:3b:b1:45:db:33:9e:e3:49:86:bc:
                    7b:86:5b:4e:bf:37:85:e9:c7:20:76:6e:eb:07:a0:
                    97:ca:c1:ac:41:8a:47:4a:e4:78:d0:6e:2e:15:2f:
                    e1:02:41:40:9e:f2:0a:60:c0:d0:b8:35:3e:12:0d:
                    d7:1b:46:12:78:18:52:97:5e:49:b8:11:7c:51:f7:
                    89:ef:59:e6:2b:8d:c4:d7:4c:5b:bd:e8:d2:e8:6b:
                    b7:3f:89:64:4f:24:19:73:78:15:6d:6c:45:95:2a:
                    c6:e1:c4:ef:c0:23:aa:5b:7e:8e:b4:f5:07:49:5c:
                    7a:8b:6b:57:6d:f5:95:14:75:91:4c:e9:01:80:61:
                    73:be:3b:44:79:bb:f5:ae:b0:3a:49:e3:57:92:97:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:27:DA:B6:0B:B4:E1:8D:8E:69:36:CB:29:DE:96:D7:FC:3C:74:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1368c5a4-3541-351f-b8ad-667c678eb189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.44.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:26:65:07:c7:53:a6:a1:02:35:bb:9b:a4:eb:de:46:1e:94:
         06:3c:7d:69:a6:5d:61:ee:b1:bf:f8:56:79:d8:28:bc:9e:7b:
         b5:82:d6:fd:2e:16:9e:a6:2b:84:34:1c:59:5b:7b:57:38:86:
         e3:b9:80:e7:36:e9:a1:2c:66:c4:ca:c0:f9:c9:28:e8:dd:27:
         79:2b:7e:9e:88:4e:cb:a0:a7:79:7a:60:d7:99:2b:e2:31:95:
         c0:24:7e:c1:de:0e:4c:c6:15:56:eb:53:df:3a:4b:4a:8d:c6:
         0c:2f:00:20:6f:d4:c7:30:9c:3e:97:1b:45:2c:7a:86:e7:47:
         b7:f5:39:dc:d5:0d:d8:17:59:31:fd:0a:3a:4f:a3:f7:62:16:
         6a:7f:29:40:c9:fc:f6:3e:77:e6:64:bc:a3:d1:28:32:2b:f1:
         ad:ae:1d:47:42:5f:18:56:17:76:a3:73:eb:63:e1:3a:f5:ca:
         67:2b:c7:8d:01:fd:49:f2:6a:06:6a:e9:c7:91:f0:7d:c0:e0:
         c0:5a:14:74:13:6d:0b:87:eb:c9:6e:b2:06:cf:d1:36:59:1b:
         32:b2:b6:1e:0f:b2:7f:cf:9a:48:af:2d:03:30:2a:0b:04:bc:
         69:0e:a8:90:6c:0d:fa:df:94:d5:32:c5:53:6b:cb:51:42:b3:
         4e:02:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org