Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/6c1889d7-e282-3bfa-8770-7a6bc707c522.roa
File:                     6c1889d7-e282-3bfa-8770-7a6bc707c522.roa (raw, json)
Hash identifier:          MiEpeGwWC6+XyEG2cUjHRqhjdLZwLnWzA2te4FUcIhQ=
Subject key identifier:   24:D2:8E:94:D5:F8:CE:3C:90:DA:94:EF:16:BD:A6:49:E3:48:E4:B2
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285844F9D6E8CDB890BC7BC0CD7240
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/6c1889d7-e282-3bfa-8770-7a6bc707c522.roa
Signing time:             Thu 22 Feb 2024 12:48:26 +0000
ROA not before:           Thu 22 Feb 2024 12:48:26 +0000
ROA not after:            Wed 22 May 2024 11:48:26 +0000
asID:                     62240
IP address blocks:        69.168.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:d6:e8:cd:b8:90:bc:7b:c0:cd:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: Feb 22 12:48:26 2024 GMT
            Not After : May 22 11:48:26 2024 GMT
        Subject: CN=6f209a86-91ea-461c-ac64-382542ba3666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:21:df:9d:67:62:96:ca:2f:50:23:65:56:
                    c9:f8:ce:49:2c:69:b9:d4:dc:99:32:ee:da:8d:14:
                    53:09:fd:20:be:13:f6:21:d4:e5:66:0e:47:be:b6:
                    c2:e1:bc:bb:f1:d3:fe:56:87:97:3f:26:fb:69:1b:
                    8d:34:7e:2f:d6:67:07:dc:c6:ba:01:61:c9:18:2d:
                    10:91:78:cb:82:60:27:02:02:2a:96:78:b8:28:4b:
                    b3:af:99:12:76:87:73:33:57:f0:46:8d:89:b7:85:
                    0b:1c:97:d3:12:df:77:b4:f6:69:d1:a8:9a:77:16:
                    94:c8:54:03:44:9e:33:ac:21:11:a9:fc:21:10:f8:
                    f6:8b:2f:71:ff:60:75:c4:d4:35:30:16:6c:47:e6:
                    78:93:2e:3a:6a:9e:f5:eb:7d:d6:34:c9:cf:53:aa:
                    f7:67:1e:d9:61:e2:b0:bf:ab:75:74:63:a2:ce:f4:
                    8e:35:09:5d:71:45:95:31:41:bd:5d:03:a3:fc:e8:
                    12:8a:7a:87:09:c1:ed:32:4d:95:84:a4:38:d3:60:
                    da:c7:22:24:85:96:05:5e:23:5d:60:c1:48:a7:83:
                    b8:2b:88:9f:f1:74:df:f9:12:34:d4:81:2b:ed:b7:
                    75:60:df:3a:18:85:b5:12:bd:c5:e8:7a:8b:bd:6d:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D2:8E:94:D5:F8:CE:3C:90:DA:94:EF:16:BD:A6:49:E3:48:E4:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/6c1889d7-e282-3bfa-8770-7a6bc707c522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:df:1d:07:42:7b:1c:f5:c3:2d:58:97:a5:df:22:ea:14:
         4e:56:f8:d8:da:d4:ac:75:3e:27:8d:7a:b0:da:c3:e9:8b:72:
         9d:4d:5c:ad:c4:71:67:f1:13:57:ee:5a:5d:aa:fd:71:61:bd:
         bb:25:92:16:65:4a:8a:ea:d0:ea:a2:de:29:8d:20:4b:6a:5b:
         82:41:ba:4a:aa:24:f2:80:e0:c2:95:44:9b:4c:96:e7:a6:0e:
         4e:9b:ab:bc:87:50:35:15:d3:2a:42:4a:8d:12:b2:b6:a5:19:
         e1:bf:fc:9e:38:06:1d:be:09:1c:18:5e:88:5a:49:3e:c7:af:
         aa:b4:5b:7c:34:9d:7a:03:1c:b1:f3:28:6f:3e:f5:45:f4:f6:
         ee:51:8d:b1:0e:bb:ac:8a:42:9b:99:95:90:6c:ed:f4:49:27:
         77:91:a6:e1:9b:1c:9a:bc:86:ff:39:59:13:27:01:3b:5d:e1:
         d7:91:a6:40:3f:72:64:8a:91:44:aa:8b:cd:7f:2b:af:b1:a6:
         b0:fe:a7:80:0e:b6:fb:17:13:46:0b:2d:55:c1:09:d4:00:0c:
         33:04:1f:46:69:b1:02:29:ab:f3:a5:07:9c:bf:93:e9:92:b9:
         5e:49:be:37:db:f0:94:b2:85:7b:52:fb:04:b2:77:42:25:aa:
         73:e1:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:31:28 2024 by rpki-client on console-fra.rpki-client.org