Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd82509a-4f82-3335-9ff7-a825b7a410c0.roa
File:                     cd82509a-4f82-3335-9ff7-a825b7a410c0.roa (raw, json)
Hash identifier:          N7OTFQg7dh19ZBuTzxe09xBLuW0+58hyVOcpexG3LIs=
Subject key identifier:   D6:9E:27:3B:63:8D:9B:00:47:26:F0:98:A3:5A:53:4B:1B:50:4E:7C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5A35F0E4604D64B5DAE7C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd82509a-4f82-3335-9ff7-a825b7a410c0.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5a:35:f0:e4:60:4d:64:b5:da:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=0c89af1b-6823-4ee0-b0cf-c5f68e223352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:88:4a:18:2a:22:0f:8d:d4:31:8d:b8:99:
                    85:6e:24:48:c4:66:2d:9e:63:5e:76:75:ae:63:c0:
                    b1:60:b8:34:ff:5d:40:bd:9f:c9:2e:42:e4:ba:d0:
                    0a:32:71:ae:67:63:ff:60:a2:94:e8:39:3f:d9:13:
                    93:bf:f3:08:d6:e2:30:a1:30:b1:99:7a:8f:92:75:
                    51:74:01:91:bc:62:79:79:be:4b:b6:f4:c9:e3:c1:
                    ad:63:60:1b:1b:03:3e:ff:08:9a:2b:57:e0:bf:21:
                    f8:20:96:10:3a:d4:ea:7b:de:db:a9:92:0a:0f:34:
                    2f:ae:e8:70:b4:4b:8f:6a:de:f2:e8:d5:07:74:dc:
                    20:77:13:a4:a1:8e:bc:d8:02:a6:ea:da:31:4e:39:
                    72:2e:3e:54:b4:86:2c:10:1c:1e:72:31:61:ad:12:
                    53:59:1f:4a:e8:31:c3:7f:d9:e2:f5:d1:23:37:2e:
                    e6:7d:92:c4:65:48:04:4d:1c:6d:89:21:4c:c1:24:
                    78:ff:d8:13:55:d6:8e:e6:51:0a:1d:46:b3:80:fe:
                    f8:e5:23:4a:b3:2c:1c:7b:8a:9f:0d:43:77:bf:ba:
                    fe:83:4b:03:78:69:57:b6:ba:60:e1:3f:90:01:4f:
                    4d:43:f3:f1:f3:ac:30:bf:05:77:56:65:67:8b:46:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9E:27:3B:63:8D:9B:00:47:26:F0:98:A3:5A:53:4B:1B:50:4E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd82509a-4f82-3335-9ff7-a825b7a410c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:f8:31:ca:90:70:8c:79:01:0d:80:6a:e0:36:03:8b:49:
         b3:c9:b8:c9:92:54:04:2b:d0:1e:63:4e:b4:2d:5d:0a:b7:48:
         f4:e7:23:e1:f8:9b:f5:14:58:37:0b:f8:d2:81:f3:96:03:5a:
         b6:c8:d0:38:ea:c9:64:66:ee:24:e9:c0:c9:41:40:34:08:4b:
         d0:d6:e0:a2:23:31:14:6d:02:78:a0:2a:0d:63:d4:bf:5d:25:
         8f:12:48:ad:30:57:b2:a8:ad:ae:60:38:71:c8:18:0d:84:14:
         6c:7b:1e:b1:93:12:80:68:1a:ac:d8:6b:0f:2d:00:21:ac:ca:
         b6:f1:40:35:96:d7:1f:22:e3:e1:c9:c5:56:d2:1e:17:c7:34:
         a2:9e:82:ef:ac:4f:4d:e5:17:3e:b4:a3:9e:81:f8:2c:02:8f:
         ee:f8:83:ce:cf:e1:21:3c:52:ec:96:38:6a:3c:a9:72:4b:2a:
         04:e5:0c:13:d3:67:7e:b5:b3:2a:01:e8:1a:90:2f:82:6b:16:
         83:61:d1:a2:99:d7:32:47:8b:87:52:1f:eb:e7:9f:2f:9d:06:
         95:c7:ef:a3:92:2a:ed:28:8d:cb:b0:63:98:05:fd:11:86:59:
         fd:c1:b4:47:f8:cf:1a:db:d8:ba:ca:07:3c:9c:1a:00:09:31:
         01:e4:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:06 2024 by rpki-client on console-fra.rpki-client.org