Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f4f001cf-0dc2-3c3a-becf-b467a5c88b39.roa
File:                     f4f001cf-0dc2-3c3a-becf-b467a5c88b39.roa (raw, json)
Hash identifier:          mg3U3xqu2YPNxTK6qFoJwr1oHAUT4Vr5m2p+cLA00ZA=
Subject key identifier:   94:D5:85:86:42:2A:1F:AD:87:7A:7D:FC:BB:3B:91:1A:44:EA:89:FB
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285845D933D0797436D34DEEDA7EC0
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f4f001cf-0dc2-3c3a-becf-b467a5c88b39.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     212374
IP address blocks:        69.168.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d0:79:74:36:d3:4d:ee:da:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=6df90a3e-b99e-4601-a6b7-595ac82d2e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:ae:1c:2e:b5:4d:0d:0f:b2:69:8f:1b:93:
                    1d:f1:2c:ad:a3:0e:b8:a3:38:61:48:56:d1:7d:f8:
                    66:ac:e2:36:81:a1:c0:81:4c:d0:64:43:fd:d3:55:
                    55:e5:93:ed:00:b0:b3:b1:b8:40:41:0d:4a:49:dc:
                    29:17:fc:ce:ea:b0:02:e6:c9:db:ab:f5:2d:6a:32:
                    6c:d5:f2:5a:20:c4:94:77:35:24:4b:41:3f:fd:8e:
                    68:4e:8a:b9:56:f3:7a:5b:a0:ff:1c:a1:82:68:27:
                    a6:9d:55:fa:0f:9e:8d:cf:6c:67:14:7b:d6:31:04:
                    b8:3a:1b:1e:59:8f:67:5f:e2:03:7e:bb:89:b0:95:
                    7c:ca:7d:da:1e:4a:ca:af:74:77:5b:5b:cf:0e:13:
                    a5:46:5e:0c:8d:1f:f6:10:7e:45:5e:3a:09:1f:1c:
                    89:68:f4:61:16:47:9d:50:26:3c:0e:3c:50:da:ad:
                    d3:cd:3e:86:b3:b4:60:cb:13:26:bf:60:c7:88:11:
                    32:57:19:b1:14:77:b7:ec:11:91:e7:dd:f0:71:0c:
                    89:3e:3f:90:e1:65:6f:b7:55:af:42:c9:cf:39:69:
                    5b:f1:33:7a:f4:7c:56:c5:a9:66:eb:e5:67:44:7b:
                    f2:d1:a3:80:09:8c:42:bc:28:74:59:6d:c8:f2:f8:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:85:86:42:2A:1F:AD:87:7A:7D:FC:BB:3B:91:1A:44:EA:89:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f4f001cf-0dc2-3c3a-becf-b467a5c88b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:65:d0:df:5d:51:bb:3c:de:92:9b:f9:24:da:a7:7e:10:f4:
         0f:04:43:c2:a0:c9:c8:33:90:b3:5e:c8:7a:c5:f7:5b:2e:56:
         7f:3f:d1:af:56:01:d6:64:b6:ec:ad:d4:38:c6:3c:bc:1c:af:
         d7:49:45:e3:28:41:33:ba:16:4c:14:5f:e2:24:b8:6d:13:b8:
         0a:92:09:2b:d8:3e:05:95:3c:22:b2:0a:ff:77:c6:e4:05:44:
         32:06:9f:bb:f5:37:c2:eb:40:02:1f:30:e9:b1:20:00:55:2c:
         2a:73:78:a4:43:ab:bd:91:84:08:70:59:d6:74:3a:fc:55:02:
         20:c7:99:08:b6:f7:07:f3:62:d8:10:31:29:5a:5c:c2:ba:1c:
         5c:4c:9c:03:ba:75:c4:74:c2:7d:d2:b5:5c:8b:64:f9:c2:97:
         0b:8c:b0:ef:d9:2c:9d:00:77:ae:5d:d0:84:42:f1:b9:f2:59:
         f0:b7:4e:aa:13:68:77:99:5c:c1:f8:c3:59:28:17:c8:ee:32:
         67:82:ba:1c:8c:68:a3:a0:89:ca:5d:f7:46:ed:08:4a:8c:c9:
         d7:50:ed:b7:0e:94:61:29:ee:83:d8:c3:bd:b1:f0:00:b9:bb:
         6c:04:e7:3d:33:a9:92:5d:1d:8a:d7:bb:16:a8:30:8f:5c:95:
         c6:fd:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:46 2024 by rpki-client on console-fra.rpki-client.org