Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9b876474-5117-3fc4-917b-b75e1fed7f26.roa
File:                     9b876474-5117-3fc4-917b-b75e1fed7f26.roa (raw, json)
Hash identifier:          zipXXuuYSUFU6SJ59MM4jqPYF9wL9OWRmsqnpZRJbOs=
Subject key identifier:   0E:C8:75:FC:DA:0D:CB:E1:77:46:8B:A0:7F:42:DD:84:4C:E0:80:C9
Certificate issuer:       /CN=9753e726-64c1-48a7-af77-48b8031adfe4
Certificate serial:       010D0C9F43285846CA2994555082C34F8CE4E300
Authority key identifier: E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9b876474-5117-3fc4-917b-b75e1fed7f26.roa
Signing time:             Tue 06 Aug 2024 20:30:05 +0000
ROA not before:           Tue 06 Aug 2024 20:30:05 +0000
ROA not after:            Mon 04 Nov 2024 21:30:05 +0000
asID:                     14618
IP address blocks:        204.69.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ca:29:94:55:50:82:c3:4f:8c:e4:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9753e726-64c1-48a7-af77-48b8031adfe4
        Validity
            Not Before: Aug  6 20:30:05 2024 GMT
            Not After : Nov  4 21:30:05 2024 GMT
        Subject: CN=04707216-c048-495f-a0c5-872966a1a1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:ba:84:5b:ac:7a:48:13:73:a4:39:17:e0:
                    77:31:db:a9:ee:e4:20:8b:1d:35:ef:60:1f:da:b0:
                    d5:ae:39:6d:60:76:d8:5e:a4:45:6b:52:f3:d0:a8:
                    c9:30:d2:55:82:ed:b2:0a:84:78:03:95:b5:42:99:
                    87:ab:d7:e0:c0:63:1d:e1:90:e1:71:9b:52:3a:c6:
                    38:62:40:ab:aa:f3:bc:79:9c:be:60:8f:d7:db:e6:
                    6b:2d:c0:32:f9:19:a4:49:5b:d8:83:39:c2:20:b7:
                    b0:89:b8:f5:7f:41:0b:61:bf:0a:18:3f:c2:ba:80:
                    e7:45:1d:51:7f:dd:f0:84:d8:0d:a4:11:66:79:d7:
                    5c:82:ca:68:37:bb:f9:30:14:ba:ac:50:28:b6:d3:
                    87:32:a9:17:1c:a6:dc:c4:57:8d:c2:fd:fd:42:b2:
                    5e:0f:5a:79:7e:39:84:ca:16:22:6d:15:24:4f:16:
                    ba:15:2d:52:c6:2a:25:c4:d2:f2:4a:eb:2a:b6:80:
                    79:f2:f1:2e:95:9c:48:67:cd:b5:4f:e4:e5:40:a1:
                    e8:b3:65:7c:74:87:4f:0e:d0:3e:f3:e6:6c:88:5f:
                    b2:c3:a2:bf:c6:b2:d6:7c:81:93:af:c2:56:42:4a:
                    4c:fc:32:dd:0e:da:63:b6:20:53:9b:f4:69:3d:e9:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C8:75:FC:DA:0D:CB:E1:77:46:8B:A0:7F:42:DD:84:4C:E0:80:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9b876474-5117-3fc4-917b-b75e1fed7f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8d:4c:da:19:88:ea:e6:31:ea:5c:83:19:c9:d0:b7:66:ef:
         ae:2d:ff:1a:de:22:96:4e:fe:a7:f9:f0:31:c5:a4:bf:2c:0c:
         5b:b9:7c:7f:64:db:e0:f7:96:11:d2:91:5b:19:84:e2:bc:3c:
         eb:a9:bc:8d:f7:00:27:a3:11:4a:31:80:33:07:e9:88:66:f5:
         63:26:e1:bd:83:55:e9:89:6c:4f:39:10:e3:f9:b5:d5:09:52:
         c8:18:6f:ec:b6:a9:ab:a1:6f:98:61:ab:2c:b3:57:c9:75:97:
         13:9a:19:7c:50:db:b9:d6:9b:73:4a:9a:98:02:74:0e:41:4c:
         16:04:4f:54:d0:27:7b:f8:6f:09:06:ca:60:d3:c7:90:a7:08:
         7e:94:42:ae:b4:96:ba:c7:89:c5:49:0e:ae:7d:23:4e:d2:ed:
         5a:f8:af:66:91:df:f2:92:56:04:fe:b9:f8:d1:85:16:a1:2e:
         d5:5b:22:21:dd:34:e1:51:8b:38:48:85:48:7e:27:e7:55:61:
         eb:e7:03:89:a8:d3:7e:46:16:1f:62:ba:90:b2:b5:c0:73:4c:
         b6:a1:26:c8:62:87:44:76:3c:b3:66:8b:bd:d2:47:75:2a:c4:
         57:7e:21:0b:32:ea:76:9f:6f:0c:93:ac:ce:8d:96:36:af:20:
         04:0e:12:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:58:32 2024 by rpki-client on console-ams.rpki-client.org