Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa
File:                     2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa (raw, json)
Hash identifier:          Iq4UgpADJ6V9fnamXiV2kToxBpFdGVfc4hnVOfx5qXM=
Subject key identifier:   CF:FD:00:AE:D5:6E:01:A9:59:D7:62:F2:1B:7E:02:89:F9:39:4D:10
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F432858459368BA29D92C84CA4A439700
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        64.69.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:ba:29:d9:2c:84:ca:4a:43:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=f613a810-13a0-4560-9601-e6a7b3bd43e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:2d:ad:2c:bd:54:44:83:85:b0:bf:9e:19:
                    44:74:1d:32:e6:14:31:e2:50:e4:d4:09:7c:95:3d:
                    cb:d4:62:76:5e:c9:2d:06:bc:7e:b7:cf:b0:eb:eb:
                    70:19:d5:18:c9:ac:11:4d:35:47:ef:6a:9a:9e:67:
                    8b:99:28:3e:c3:92:91:a0:da:ef:af:9e:5c:00:3b:
                    ee:3a:65:d5:74:df:09:f3:12:00:6c:89:55:23:24:
                    dd:59:01:14:86:a2:7e:8b:c6:40:71:05:6c:97:97:
                    a7:7c:70:01:ce:12:c9:fe:7f:90:74:c6:b6:36:25:
                    6e:ef:6c:1a:83:1f:32:24:58:65:fa:a3:9e:74:68:
                    08:e2:fe:0b:3a:90:c0:84:a9:ef:2b:40:be:4c:b8:
                    81:df:3a:8b:08:2f:c8:2b:01:72:14:8f:a9:9f:88:
                    99:ed:cb:9e:0c:f3:29:80:a8:1b:4e:e5:91:cb:37:
                    95:b7:f4:04:f3:a7:7a:ed:f0:f7:d2:9e:a2:26:6d:
                    e2:be:b6:45:d3:e0:f9:66:a7:dd:2c:9e:0e:ca:1a:
                    4e:e1:4d:80:c2:73:04:49:a8:9c:e4:ba:53:fe:56:
                    e8:b7:c8:b8:ca:5d:5a:bd:05:75:7d:6a:4d:6a:4b:
                    01:45:b5:93:11:01:6c:39:e9:bc:b7:58:67:71:6b:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FD:00:AE:D5:6E:01:A9:59:D7:62:F2:1B:7E:02:89:F9:39:4D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:9d:83:8d:6f:4d:41:29:a0:24:fa:1f:37:13:46:13:36:
         3d:62:8b:a1:bc:f3:d6:e3:2a:f2:41:11:31:34:f2:12:74:d0:
         24:37:b2:47:62:7e:79:1a:5b:35:c2:a6:6d:19:ce:a7:98:e1:
         86:be:77:c5:9b:db:7d:52:0a:c3:da:ef:70:06:53:d9:ab:58:
         c8:2c:90:e1:50:22:da:36:02:89:0a:24:fa:07:ee:8f:a9:bf:
         c7:aa:03:5a:fb:cb:9c:ca:09:b5:4a:51:bd:86:79:80:03:1a:
         cd:9b:d7:bd:4d:83:4b:92:5a:e1:37:5c:4e:f7:a4:8e:db:35:
         93:fc:cf:33:b3:cc:d1:eb:87:71:3e:47:f2:eb:4f:57:c3:21:
         95:28:3c:4a:ed:6e:d0:7a:4a:0e:45:71:07:08:a4:46:8c:02:
         22:44:22:72:09:6f:b0:b6:53:06:92:e7:cf:0a:17:13:d6:0e:
         6a:b7:db:29:16:9d:f5:1d:6e:bd:ab:1c:13:bf:4f:89:24:b1:
         01:d5:56:7c:f4:eb:70:2c:5f:98:be:60:57:ff:d6:8d:ad:e3:
         bd:68:fa:28:44:cb:97:36:55:03:19:ea:ad:a5:a9:83:d5:49:
         73:97:98:88:ac:cf:93:26:1c:38:57:97:ea:e5:f3:cb:69:1d:
         fe:89:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:16 2024 by rpki-client on console-ams.rpki-client.org