Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/3c29b6cf-d6ff-330d-836a-e1fde7b0b336.roa
File:                     3c29b6cf-d6ff-330d-836a-e1fde7b0b336.roa (raw, json)
Hash identifier:          fd2lf5YGwR2jua7GNg1jUygTZU1XXZQt7WixdNQEH/Q=
Subject key identifier:   6B:45:D0:51:8C:20:C6:95:CD:22:8D:A1:D7:D5:73:6F:0A:F5:5F:84
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285845D933D0D6B7F20458860E5580
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/3c29b6cf-d6ff-330d-836a-e1fde7b0b336.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     36344
IP address blocks:        69.168.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d0:d6:b7:f2:04:58:86:0e:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=1a23c8a2-632f-4be2-8922-b931eafdb39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:36:b3:57:5e:b0:5a:60:22:72:18:34:42:
                    16:ea:18:2d:c8:90:ef:3b:00:20:dc:ab:61:f8:d8:
                    98:19:d1:21:bc:4a:a1:c7:81:a0:a9:4c:53:27:7d:
                    e5:58:e2:0e:1e:6e:aa:dc:10:d5:35:69:7d:25:c4:
                    12:cf:d6:db:5c:cd:74:7a:c1:48:bc:64:f3:65:62:
                    53:03:a7:46:16:9f:87:18:73:ee:d5:ec:7b:57:a6:
                    d1:03:ce:37:ea:51:76:1d:45:15:8c:15:3f:3d:0a:
                    85:e9:cd:2a:4b:5f:14:f4:f1:5f:f3:4e:12:be:a6:
                    39:21:c8:c9:c4:33:e3:db:3a:6f:5c:1f:cb:c9:f4:
                    8c:cf:d9:3b:9e:2b:de:37:3f:a9:e1:ba:a9:5b:5e:
                    37:73:e4:46:1d:33:9a:3a:58:d9:5f:13:17:6d:37:
                    b1:d2:7c:d1:ec:af:db:48:aa:d9:b1:3c:a0:e8:c8:
                    0d:f6:6a:8f:bd:9e:1f:2d:2e:31:8f:1c:01:6d:87:
                    e0:3b:cb:3f:63:ee:59:22:62:f7:48:5a:6f:3e:af:
                    4a:d5:82:e4:69:50:cb:48:e8:fe:af:db:d7:87:fb:
                    19:62:1c:25:88:54:7d:e0:8f:97:b0:33:c8:04:b9:
                    60:90:50:82:f8:fa:54:bd:1a:19:bc:c2:67:2e:96:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:D0:51:8C:20:C6:95:CD:22:8D:A1:D7:D5:73:6F:0A:F5:5F:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/3c29b6cf-d6ff-330d-836a-e1fde7b0b336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:9f:1d:7b:18:b5:da:b9:f0:74:d0:25:95:b6:f0:11:56:
         cc:ef:fe:79:fe:ed:7e:ff:02:df:f4:c3:70:0a:e2:02:a0:8a:
         b2:38:8a:99:85:eb:09:d1:3c:0b:76:16:95:ba:1a:51:20:79:
         72:8d:0f:b8:27:be:93:03:ef:6b:6f:8f:81:28:37:c2:6b:88:
         8b:dd:62:af:f8:ad:b3:d3:06:fd:eb:89:f1:3c:c9:20:93:83:
         26:59:5c:03:25:ee:3f:fa:ad:fa:98:15:e7:96:e8:9e:66:c9:
         0b:56:24:5b:f2:bc:a7:a9:f3:46:7b:ba:f5:fc:81:fe:7e:0a:
         d4:cd:fc:1e:86:83:9d:2c:94:41:83:46:bc:9a:b4:3d:e0:6b:
         09:d2:b0:c0:6d:43:b6:48:cf:cc:9f:3a:f6:5c:70:b6:bd:82:
         53:9b:a3:97:60:f8:88:90:c1:80:5a:75:31:eb:97:87:fd:75:
         40:2e:d7:bd:8f:00:93:b2:d5:5f:a8:3a:44:7d:f6:58:eb:5e:
         bf:db:cd:b6:71:e2:c7:b6:eb:e4:0c:08:2c:81:94:c6:0b:90:
         88:bf:55:53:fc:0e:b8:3c:ff:5c:05:9f:fa:d1:0b:99:a3:6c:
         f0:c7:ce:eb:b1:a1:12:dc:fa:35:d0:9b:b9:f1:1e:e6:16:b4:
         ee:77:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:12:08 2024 by rpki-client on console-ams.rpki-client.org