Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/fea1dfeb-87ff-306f-83e1-4d93e345821c.roa
File:                     fea1dfeb-87ff-306f-83e1-4d93e345821c.roa (raw, json)
Hash identifier:          nJkI0ur2Cnx2t4dcTz7DGYCp378ipi6dz/4Gi/Y5gHs=
Subject key identifier:   BE:D3:8A:9A:F9:C8:94:F5:45:EF:98:25:D6:39:3D:DB:8F:ED:3D:FA
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858472C65D47B9DE2A8034D4F9C10
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/fea1dfeb-87ff-306f-83e1-4d93e345821c.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     15285
IP address blocks:        69.21.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d4:7b:9d:e2:a8:03:4d:4f:9c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=a1cad9db-5592-4b08-a23a-4fb826c3107e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:f2:71:26:25:0a:7b:d2:31:ae:c8:1e:4e:
                    d9:60:1b:54:ab:cf:e1:35:4b:99:c9:1e:a9:14:49:
                    59:c3:17:6a:7a:ce:86:5c:31:4a:92:95:12:de:6d:
                    ad:83:40:ec:1f:ce:53:65:c9:c1:e7:c2:91:81:fa:
                    dc:23:9d:ae:d5:58:ee:f4:bb:85:6a:d6:cf:21:74:
                    98:db:73:6a:94:29:85:fe:e5:9a:70:37:d7:6b:05:
                    fa:7d:43:0e:ba:71:ef:61:91:e6:f0:bd:f8:c1:6d:
                    77:45:2f:27:52:33:a5:46:f6:00:f9:86:f7:68:66:
                    fa:05:0e:94:30:42:44:84:9c:13:44:46:c9:9a:c5:
                    a2:99:6e:2d:24:c2:44:d4:79:fc:a2:f7:3f:c2:1e:
                    42:53:20:66:3f:67:8d:00:41:3b:47:8b:33:7b:45:
                    91:4d:59:d3:7e:fd:bb:9d:c1:6b:cb:a7:bc:50:f8:
                    df:d8:eb:43:2f:6b:36:1d:de:d6:ef:4b:01:fe:60:
                    45:37:47:47:b3:4e:50:e7:b9:b3:71:f5:43:78:63:
                    f6:d7:5c:35:d9:bf:ce:d0:e5:54:85:ea:c9:76:a9:
                    7b:34:55:20:f5:9f:78:78:06:72:30:63:ee:4b:be:
                    1d:47:b4:64:44:d5:63:e8:ca:2c:76:51:b9:fe:ac:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D3:8A:9A:F9:C8:94:F5:45:EF:98:25:D6:39:3D:DB:8F:ED:3D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/fea1dfeb-87ff-306f-83e1-4d93e345821c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.21.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:a2:7d:af:4e:43:a4:24:78:f8:d7:7a:cb:5a:fe:d3:01:
         40:40:cc:22:ee:76:8b:c1:25:0f:a9:c4:a2:7b:a6:f5:fc:e2:
         4f:ae:6f:3b:e6:d6:6c:3e:a6:71:03:4e:e4:22:30:4a:ac:d1:
         07:d1:6b:56:4d:98:07:1c:fc:02:79:39:2c:d1:f4:1a:32:17:
         49:38:63:8e:d8:cc:b0:84:1d:5c:1a:51:c6:21:61:0c:aa:a0:
         64:05:b5:ee:23:e0:3f:7c:86:8a:25:d9:a0:cf:1a:8b:33:5a:
         3a:7a:37:18:0a:35:69:3c:63:2b:8f:13:14:0e:df:df:be:5d:
         2d:24:69:24:76:88:08:cc:6f:d1:73:f6:82:66:41:62:c0:e4:
         a9:4d:a2:3c:bc:e5:2f:99:e4:91:40:4d:8c:a0:17:24:ef:aa:
         12:be:db:58:65:6c:dd:f1:73:a0:8b:dd:fe:f0:0c:20:9f:61:
         bf:61:4d:54:cf:a0:47:7e:8a:28:09:cc:81:48:e7:de:7b:99:
         4c:63:7d:75:fb:d5:a9:c0:ca:fe:34:ec:5d:a7:c2:50:27:d8:
         c4:78:a5:63:d4:82:a6:be:f1:3d:a1:d5:64:83:f7:b1:4e:74:
         66:07:a4:69:00:d6:51:0c:25:c0:a7:55:e8:1c:8d:32:b4:12:
         13:5c:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:09:38 2024 by rpki-client on console-ams.rpki-client.org