Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60344eec-6187-3af7-9c0e-8a5a81538d00.roa
File:                     60344eec-6187-3af7-9c0e-8a5a81538d00.roa (raw, json)
Hash identifier:          PDEBjBKSD2v8z3axZhGGFU9dk2Q/hnS0Aa/sAkIr820=
Subject key identifier:   D8:DA:DF:37:F5:87:DA:0A:64:90:D7:C8:ED:7E:EC:E9:0E:23:AD:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AE29654241A2F0B7DA456C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60344eec-6187-3af7-9c0e-8a5a81538d00.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:e2:96:54:24:1a:2f:0b:7d:a4:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=2b5e7680-dc13-4ab1-9cf2-c4195d56df88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b1:51:2d:8a:79:83:69:e3:32:73:67:ed:be:
                    c8:9c:3e:66:ac:10:05:17:45:62:9e:0d:ac:7a:be:
                    4b:13:f8:80:35:1b:89:47:c0:08:88:ee:30:19:67:
                    36:79:93:c9:a5:41:e8:93:5f:59:df:3f:5e:f2:60:
                    d7:72:2c:1d:8a:87:b4:b9:81:3c:b4:38:a4:c9:5e:
                    ac:4a:0e:b0:7e:0d:ac:06:2d:3d:cb:ca:0d:bd:c2:
                    3f:39:57:a8:93:02:83:87:80:01:7b:18:7c:e9:e4:
                    0e:d0:40:09:3b:ff:49:e8:e5:dd:cc:9e:64:40:ad:
                    e3:83:08:6d:44:8a:b9:af:08:65:35:26:a1:5d:95:
                    38:d4:78:86:12:35:ed:03:ac:0c:fe:b3:b7:97:60:
                    c5:35:9c:5b:6a:32:87:96:ce:3f:54:15:e2:4b:01:
                    42:15:57:c7:fc:74:4a:15:46:1c:c8:02:a6:b8:9e:
                    77:39:49:d2:72:c1:ca:fd:88:40:52:f9:52:62:9e:
                    fb:cc:17:e7:48:22:57:4a:1c:94:a8:21:99:e5:1f:
                    ec:e8:47:58:e7:40:be:c9:9e:da:be:a7:db:84:ea:
                    ce:e7:31:db:73:20:a3:0b:6e:b0:f0:26:a4:9f:b0:
                    b8:0c:22:43:5c:a1:b2:89:24:be:f3:eb:39:7c:bd:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DA:DF:37:F5:87:DA:0A:64:90:D7:C8:ED:7E:EC:E9:0E:23:AD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60344eec-6187-3af7-9c0e-8a5a81538d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:5a:1e:7e:1a:bd:d7:83:d3:21:c3:33:14:95:b4:21:06:
         06:2f:3b:7e:b0:d4:fe:d2:ce:fd:d6:3a:20:56:e9:a7:a6:9a:
         52:1b:d5:1f:bc:7e:dc:f1:78:92:7f:eb:8e:9f:60:ff:e3:52:
         91:04:01:ba:ce:ab:d8:82:d1:0f:73:e7:d9:fa:eb:8e:cc:bf:
         dd:f2:ac:96:35:40:f1:34:7b:18:93:06:a1:d8:a4:75:90:47:
         4e:c0:d4:bf:c9:0e:f4:6b:6f:9c:08:36:e1:45:ec:c8:a6:28:
         bd:36:28:b2:6f:ce:eb:5f:57:24:a1:a1:19:5d:ef:21:4e:8b:
         78:d4:df:8e:b9:cd:71:58:14:5a:8a:d1:e6:4f:b5:5c:65:33:
         f7:1c:7a:af:09:6f:04:a2:7e:7f:db:d0:39:a8:d4:8f:70:33:
         19:a7:97:40:2c:10:73:fa:41:42:63:5b:37:6f:cd:71:b6:68:
         5a:41:66:2d:c0:dd:66:bc:18:20:e6:ae:53:db:fb:04:6a:4e:
         4a:c1:76:ee:c2:fd:76:d7:b0:65:66:b6:53:c8:91:8f:41:85:
         bf:0b:66:86:a0:15:c1:83:e0:65:b7:f3:7e:e7:b3:5d:59:b7:
         5f:cf:61:28:e1:aa:68:b0:5a:03:f8:52:55:eb:4e:88:aa:d6:
         44:2c:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:48 2024 by rpki-client on console-ams.rpki-client.org