Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab0bc84-3fa3-33ed-91a1-dca491ee4ba2.roa
File:                     1ab0bc84-3fa3-33ed-91a1-dca491ee4ba2.roa (raw, json)
Hash identifier:          YYRvxCjeD2R02vf3a91uvTtLidDDFhKaP27dSWgT56s=
Subject key identifier:   98:26:4E:CC:39:E4:F2:43:53:BF:AB:22:93:AF:98:78:DE:8A:AF:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BF19594EE9C508FDDBA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab0bc84-3fa3-33ed-91a1-dca491ee4ba2.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        69.246.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:f1:95:94:ee:9c:50:8f:dd:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ba6b7afe-70de-4ba1-85f1-c28e4f5d42b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:57:b8:06:ad:79:96:7d:e4:96:d6:84:46:
                    28:cc:79:b6:99:d2:5a:77:8d:36:e1:4d:80:41:85:
                    c4:04:0b:09:01:8f:12:cf:99:3c:82:12:a9:ff:c9:
                    40:b5:58:a9:fd:97:07:37:d4:5e:58:a1:e5:ac:03:
                    ed:70:c3:43:62:24:2a:ff:98:52:df:c6:19:93:1d:
                    f9:a1:56:71:8c:fc:8b:ea:b7:1d:c8:e3:29:2c:b1:
                    bf:b9:1c:e0:2b:79:e4:96:c1:38:f3:dd:e4:15:8e:
                    32:52:3d:03:6f:7a:5c:4a:8f:93:3c:5c:aa:2f:f9:
                    8d:e8:9b:fe:03:cf:0f:e7:6f:b6:78:da:7d:8a:c0:
                    a3:7e:09:09:47:9b:ef:d5:c9:63:69:64:8e:e6:3e:
                    5a:fa:63:92:02:93:d7:bb:06:71:06:b3:1f:08:39:
                    c4:bc:f8:90:6c:4f:37:84:83:6d:3e:da:72:e1:8d:
                    88:8b:05:26:3e:10:f9:f0:72:a5:b0:ef:37:38:0f:
                    4a:19:4f:77:5f:e5:68:31:d3:1e:65:e7:0d:8f:a8:
                    c2:57:02:f1:2a:99:27:f9:13:8a:61:1b:72:55:60:
                    1b:8a:92:9c:16:2c:51:80:6c:a8:99:37:11:76:6d:
                    eb:2c:50:75:01:7a:ad:9e:fe:52:b0:cc:bb:00:80:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:4E:CC:39:E4:F2:43:53:BF:AB:22:93:AF:98:78:DE:8A:AF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab0bc84-3fa3-33ed-91a1-dca491ee4ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:47:5d:7f:28:73:19:14:37:97:84:b8:0c:92:ef:5d:f4:af:
         f0:55:30:d9:e9:12:46:db:cc:c1:d2:3a:12:c3:ce:0b:19:0c:
         53:99:bd:eb:1a:aa:c1:dc:3b:c8:76:50:6d:67:ee:e7:5b:6a:
         b4:bd:51:87:e5:ba:2a:6c:47:59:de:7c:73:c9:44:ad:87:c7:
         2b:0f:f1:47:54:78:3b:49:24:74:b3:a5:a8:2b:87:be:89:cc:
         d0:fd:b4:3d:d8:0b:1b:11:a0:bc:2b:4b:29:2a:cd:10:3f:46:
         40:f2:e9:a0:b1:80:4b:12:3a:fd:5d:93:1e:f5:39:32:de:61:
         3e:79:03:bf:74:90:16:e4:08:b1:e5:50:5d:d3:e2:df:bb:88:
         66:e8:50:48:bb:bd:eb:f9:15:c8:df:cd:4b:08:3d:3d:db:72:
         b0:95:df:bc:af:eb:61:fe:f3:3c:31:89:21:04:45:c0:6a:71:
         66:eb:27:34:1b:49:bb:ea:05:6d:bd:fb:5c:bf:05:40:24:07:
         c0:72:8e:47:02:af:01:03:ec:b3:d3:9e:bc:a3:15:9a:74:cf:
         bc:f9:48:30:1b:81:a9:f9:f5:e0:af:5c:83:19:6e:70:9d:5c:
         85:da:10:86:68:77:95:80:ca:5b:9c:61:6a:a1:3a:1c:00:8a:
         84:54:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:36:42 2024 by rpki-client on console-fra.rpki-client.org