Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ce51c0-f286-3ca7-ab2e-674d0a83344c.roa
File:                     a7ce51c0-f286-3ca7-ab2e-674d0a83344c.roa (raw, json)
Hash identifier:          /c+U7VtIDZ8RwDoNLFeiMaHeki22Nh4YxA8B9Etk1Qg=
Subject key identifier:   E0:00:52:13:8C:B9:80:FA:BE:EB:5B:E5:52:6D:C7:90:7C:7F:A8:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB06723AD24C2308085C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ce51c0-f286-3ca7-ab2e-674d0a83344c.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        69.138.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:06:72:3a:d2:4c:23:08:08:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=24903087-3b32-4117-a242-efd80330466b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:0b:bd:5e:98:20:fd:d9:2b:2f:eb:20:e1:
                    cd:4b:2c:dd:fb:68:26:9d:cb:74:9f:fd:c1:41:6b:
                    83:84:1d:d9:db:21:8d:e0:03:e4:a1:05:56:d7:df:
                    d3:f4:c9:ba:61:8f:f9:9d:ff:0e:85:6b:c5:c2:ee:
                    24:00:de:00:a6:b3:ea:f1:3c:0f:86:45:02:c8:2c:
                    5e:cf:bb:27:3f:f7:a2:a0:5d:9a:e5:96:44:32:65:
                    03:24:80:bb:93:d1:3c:ed:9b:f6:72:0c:96:04:29:
                    e2:d5:3d:8e:d4:a2:97:21:18:03:40:55:7d:b6:61:
                    9d:ce:b1:81:b3:8b:ee:16:d7:69:75:9c:d1:c7:82:
                    25:de:dc:d3:23:cb:41:41:34:81:c4:85:ca:83:40:
                    a8:af:7b:91:ea:71:3c:5d:b8:2c:58:a6:b4:e8:f5:
                    06:c7:32:3a:a5:24:6e:08:78:6d:5e:6e:44:2a:23:
                    81:e0:41:04:60:d1:b3:e7:94:49:18:06:19:89:8b:
                    6e:a5:c0:8f:63:4b:14:2f:b8:e9:48:20:bc:21:74:
                    34:ae:c2:24:90:00:b6:27:76:02:c8:0a:13:f9:ce:
                    58:0b:3a:46:f3:bb:c9:a8:3a:39:fa:de:f3:e3:e1:
                    da:57:56:e5:3e:7b:8f:d4:bb:75:1e:6f:e8:f6:7f:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:00:52:13:8C:B9:80:FA:BE:EB:5B:E5:52:6D:C7:90:7C:7F:A8:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ce51c0-f286-3ca7-ab2e-674d0a83344c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.138.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:20:e5:58:2f:1a:1e:23:5e:57:86:d5:e9:2a:2f:d2:2f:
         d6:ad:ab:f6:3e:8d:51:9a:31:34:f5:b7:37:97:e6:89:f3:f9:
         cd:32:43:4d:8e:cd:08:2f:66:46:b7:b5:51:c2:98:d0:c3:4c:
         2d:b1:28:86:18:ad:b7:30:05:88:a1:1b:bf:86:18:a1:24:25:
         01:85:12:41:14:0f:9e:98:3e:55:82:1b:d1:9f:02:ac:6d:f9:
         ed:02:fb:99:ed:25:2b:ee:72:11:5c:40:75:c5:0c:d6:2a:1f:
         66:f7:45:56:d3:16:b3:96:35:a0:34:44:2f:44:e5:92:e6:85:
         4b:5a:f5:f4:19:fe:e3:33:61:e7:48:14:54:47:fc:60:d4:bb:
         9b:18:3d:4e:6e:ee:dd:32:c0:15:9d:ef:2d:fa:61:eb:da:cc:
         e9:c2:3a:82:5f:23:3b:fe:91:46:60:0f:3f:95:87:77:56:42:
         c4:22:7d:d0:16:30:31:d7:21:d9:08:14:53:3c:9a:cd:b4:ff:
         2c:56:7f:2b:c2:b3:a2:ee:bd:f4:99:01:9c:e9:0d:a9:ec:1f:
         e5:67:0f:f9:8f:17:02:a7:53:15:92:20:b0:24:ca:7c:74:22:
         d5:26:bc:c7:50:10:fb:87:7a:e9:cf:cd:0e:8a:78:2a:4d:65:
         62:02:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:55:44 2024 by rpki-client on console-ams.rpki-client.org