Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31a6c561-8ca8-3107-8734-271ca8468d3b.roa
File:                     31a6c561-8ca8-3107-8734-271ca8468d3b.roa (raw, json)
Hash identifier:          AKJ8hcZN4kNpSeMiwJ8i4NOISzF66U4528Aq2U8ifY4=
Subject key identifier:   CA:72:5B:25:EF:AC:93:93:9E:D7:61:4F:4C:C1:B8:22:78:C5:62:F2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858478E1BC885C02E1529A525BE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31a6c561-8ca8-3107-8734-271ca8468d3b.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        69.36.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c8:85:c0:2e:15:29:a5:25:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=7d56cbf0-c0ac-4a58-b761-435a19b63d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:b4:ef:d8:30:2a:8e:97:5e:f4:7a:ed:3a:
                    50:9a:c6:89:5f:d5:bb:12:82:ea:60:19:1a:57:ff:
                    f1:51:76:7f:a9:aa:b5:56:68:ab:3f:24:4f:e0:16:
                    60:ce:ac:a5:81:c7:76:1e:d1:09:03:c0:5f:17:27:
                    4a:0e:16:d2:22:e0:e8:94:42:16:cc:e1:1d:70:f9:
                    52:05:4d:44:db:11:3b:87:59:ab:68:6d:e4:0b:d5:
                    25:1d:c9:e3:f8:bf:af:8e:4f:23:e3:cc:90:1d:23:
                    8f:14:27:06:9f:10:12:6a:0f:3e:17:62:93:be:c4:
                    f3:a4:6b:a3:a9:01:25:b2:c9:a9:00:1f:b9:2c:ad:
                    b4:6e:da:ac:cf:c3:5c:66:c4:f7:37:5e:d7:40:e1:
                    68:fd:81:c5:95:e7:45:7d:df:e8:ae:26:d4:91:27:
                    68:fa:c2:ed:8c:8b:29:9c:8e:3e:4c:e3:44:b3:63:
                    42:60:79:71:2d:aa:91:96:dd:ec:6c:d1:5c:9d:7c:
                    f5:8e:ac:66:ae:e6:15:98:e2:6c:82:d7:07:38:a2:
                    96:1e:1b:08:1b:3e:ad:58:28:66:fb:23:f4:6b:85:
                    30:4f:71:97:d1:2c:71:c4:26:2c:55:9f:be:17:5e:
                    7d:c9:8a:28:ac:a7:fe:34:00:09:e3:56:ed:5c:5c:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:72:5B:25:EF:AC:93:93:9E:D7:61:4F:4C:C1:B8:22:78:C5:62:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31a6c561-8ca8-3107-8734-271ca8468d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:77:75:2f:98:69:e4:4a:50:df:99:af:03:01:6d:4d:96:53:
         6b:55:5f:09:b8:6e:c0:aa:98:e1:dd:2e:73:a2:c7:b4:df:2f:
         37:4d:6a:4a:eb:41:b8:a0:63:6d:88:84:69:f7:a8:dc:2b:41:
         b9:24:9c:2b:f3:c9:b8:e2:5e:ee:64:48:9e:f3:b7:19:49:3f:
         97:50:78:8c:bd:d0:9a:3f:c8:56:cf:54:6f:45:91:29:50:49:
         a5:fd:18:7a:66:ef:32:13:c0:66:5e:93:26:5a:cd:49:7f:f5:
         21:76:da:4e:73:92:0d:42:b2:df:df:3b:73:73:84:07:aa:63:
         3a:b3:a5:51:98:c2:ac:30:40:6b:58:43:01:69:be:f2:65:0c:
         9a:9d:20:3d:b4:f7:a7:a2:e0:b8:84:da:e3:09:7c:3c:99:9a:
         a3:d5:c2:62:a8:3f:00:79:4e:01:78:c3:3f:a7:cc:01:af:27:
         cf:10:8b:18:60:45:cc:07:70:ff:ab:19:5c:f8:d3:5a:80:15:
         bf:b7:fe:e4:1e:4d:cf:02:63:ae:68:49:6a:82:8a:bc:f5:c2:
         9d:20:f3:36:ee:0b:db:d5:63:f0:4e:0a:cf:b5:95:ff:08:18:
         0f:41:01:9b:da:f0:13:0d:7a:20:7c:4c:f8:43:54:b9:3e:ee:
         10:16:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:44:22 2024 by rpki-client on console-ams.rpki-client.org