Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ea4fed3c-874e-3d30-9dfe-41af57ef5ae1.roa
File:                     ea4fed3c-874e-3d30-9dfe-41af57ef5ae1.roa (raw, json)
Hash identifier:          W+fe3KaRvVq7rXe3bAd/HhxLxesKMTGYzGgU4tgMotk=
Subject key identifier:   5B:0E:96:46:3C:96:62:6D:1B:DD:4D:C6:77:64:C3:CC:AD:A4:22:F2
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285847B7FBF9A40038FAAB6FCF2580
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ea4fed3c-874e-3d30-9dfe-41af57ef5ae1.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     7018
IP address blocks:        69.91.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f9:a4:00:38:fa:ab:6f:cf:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=748d011b-7048-4176-bad0-db589fc6d518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:b2:56:7a:04:2d:14:bd:fd:b4:2c:35:f5:
                    60:26:12:39:18:52:26:92:7f:d7:0a:c5:63:e4:a7:
                    bb:5d:1a:65:7b:52:6f:75:2e:77:79:5c:73:45:04:
                    1d:27:0c:b9:61:64:eb:e2:0f:b5:41:6a:a4:40:72:
                    79:80:15:2a:8b:a9:f6:28:b7:19:f7:7f:3e:8c:5b:
                    cc:f2:4f:d9:f6:4c:77:d8:9e:fd:65:17:18:df:56:
                    79:5a:69:3d:00:ab:7e:5a:7a:25:d3:76:ae:fe:8a:
                    4e:d9:f4:fe:98:bd:59:2a:15:2b:2a:a0:ec:28:67:
                    d5:97:ab:ed:1b:0f:b6:6f:55:1f:95:51:77:9f:0e:
                    b1:6f:e7:27:e6:47:3d:32:a1:87:6d:18:6d:f2:79:
                    12:4b:23:0c:b2:2e:7d:d9:e7:7b:85:77:e6:85:a5:
                    27:d0:a8:16:55:30:b1:ba:ef:b1:10:16:c2:fd:bd:
                    d8:87:84:0b:3b:5c:d4:97:8d:b8:b5:52:ed:de:39:
                    0c:3a:88:d9:ff:2a:f7:8d:c1:97:0c:77:12:6f:4e:
                    73:8d:36:0c:ea:c8:ec:2f:e7:33:e4:f9:5e:86:a2:
                    f2:33:10:fd:c2:09:2e:3d:9c:47:e9:31:42:e6:3e:
                    23:14:1d:5a:7f:9f:09:da:cb:8b:c6:32:a4:c7:38:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:96:46:3C:96:62:6D:1B:DD:4D:C6:77:64:C3:CC:AD:A4:22:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ea4fed3c-874e-3d30-9dfe-41af57ef5ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0d:08:e0:4f:aa:dd:93:be:33:28:a1:6d:f0:1c:b2:1c:35:
         60:2c:e4:4a:87:cf:d6:d8:1b:e1:9a:a5:0e:18:50:8e:df:df:
         3c:82:36:09:cd:a4:15:06:d6:16:68:d5:d8:bc:c3:80:86:02:
         08:fd:d1:da:9b:e2:56:03:3c:16:76:65:20:ca:31:97:3e:1f:
         99:54:0e:10:98:cb:c3:ad:4a:b3:cd:5d:33:f3:8b:a3:07:b0:
         e5:76:a6:d9:d4:ca:b1:1f:fc:93:56:b5:e8:9c:3d:6a:b0:64:
         52:d9:52:d4:aa:16:2c:99:26:1a:3d:25:7e:d4:b5:ef:7e:42:
         8a:09:f4:8a:b0:7d:0f:42:7c:a2:43:90:fc:11:db:39:a5:40:
         1a:69:94:51:32:a5:38:88:c2:84:da:c6:4e:bd:2f:b7:f4:86:
         8a:cb:21:5a:cb:3d:50:34:c8:0b:6a:af:0f:0c:31:f4:62:d1:
         fd:48:0a:24:79:cd:f4:e5:49:4c:a5:f0:5a:4d:bd:03:b2:40:
         cf:0a:93:a1:04:2a:ea:38:c9:3f:a6:43:1d:56:1e:4e:4a:73:
         04:68:21:1f:86:1f:99:3b:1b:18:57:1f:72:0a:43:ea:d5:d4:
         59:e3:b8:0f:13:ea:04:fa:02:c9:e5:ee:f7:af:03:8d:dd:5e:
         3e:f1:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org