Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
File:                     9b933b8a-dbdd-3487-9952-d09b51c4e640.roa (raw, json)
Hash identifier:          8415KknAdHuhI7ijEMrUgVGg9kGLk0wr2j/OUl19VfQ=
Subject key identifier:   7F:8D:C3:90:10:A3:F7:B9:B2:B6:AB:FB:5C:4C:3A:A2:E0:ED:8F:D3
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F4328584593689577C688B54157CF1D00
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     20454
IP address blocks:        69.160.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:95:77:c6:88:b5:41:57:cf:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=a85c1bb4-4462-4545-8ebb-391629487ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:e6:88:3d:e9:f5:7b:2d:04:f5:b8:18:bb:
                    15:e5:49:87:0b:e3:30:91:d3:6b:69:0f:2f:1f:b9:
                    de:63:bd:25:08:b7:15:cc:77:a6:c2:7e:3a:c5:0a:
                    65:35:58:c5:53:b4:ff:a6:c2:c7:25:7d:c2:28:35:
                    4b:99:fa:58:f0:98:f8:e4:7b:7f:7a:83:75:5d:61:
                    16:1e:dd:45:01:98:68:9a:08:d9:d7:8f:1d:e0:64:
                    a0:2b:39:bb:78:d6:82:9a:94:18:b2:c2:84:68:31:
                    df:84:fe:84:6d:1c:b5:9f:c9:db:15:fe:55:6c:d6:
                    bf:19:26:d0:f1:f6:7b:4d:6a:9d:a8:d5:16:5a:2e:
                    5d:fb:ed:15:61:b4:1f:67:bd:dc:82:89:39:85:0e:
                    85:a6:a8:79:d0:9c:ec:58:78:d7:e9:ef:81:de:94:
                    42:e6:0d:44:5a:21:7a:49:24:f0:20:ae:b7:9d:31:
                    47:ae:e5:8a:62:62:e9:95:41:02:e9:17:96:8d:75:
                    e7:85:28:89:ca:36:04:77:ee:0a:1f:f9:0a:09:05:
                    1c:82:ed:f5:9d:49:90:ab:94:09:1b:14:59:d2:af:
                    1e:18:9e:96:f6:7c:c4:44:b2:61:3c:21:46:d7:5b:
                    91:dc:9a:10:dc:28:25:2a:fb:73:13:2b:1c:d9:74:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:C3:90:10:A3:F7:B9:B2:B6:AB:FB:5C:4C:3A:A2:E0:ED:8F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:f2:1a:e7:41:23:0f:71:fb:16:15:77:09:ff:67:2f:e3:
         c6:2c:2c:5c:8a:bc:fe:c5:16:1c:e0:4d:91:2e:89:3e:67:e8:
         c9:9a:ad:e6:42:b7:9c:5e:e6:8d:72:e5:74:4a:6e:40:c1:09:
         fc:e4:9f:23:9d:70:e1:17:b5:3a:14:78:d9:ad:61:d8:c1:80:
         26:92:07:91:32:9e:c5:eb:be:55:12:43:0c:13:17:6f:69:9d:
         ee:3a:cd:d3:e3:7c:c9:cf:5d:96:19:4a:84:36:6a:5b:c3:93:
         16:40:50:d9:63:ae:00:f3:31:0e:5e:3b:59:ea:41:01:48:d5:
         17:06:0c:ba:a1:33:ca:a0:06:51:96:3a:eb:8d:e3:64:e2:7f:
         83:9f:30:39:ae:e9:9e:a1:69:9e:b5:dc:33:61:91:27:94:ef:
         55:e7:37:d3:2f:40:6e:b7:63:58:ba:49:03:b1:7a:b0:5c:e2:
         39:6a:ce:92:4c:50:80:af:6c:5e:42:c4:ce:d2:12:f4:35:e2:
         f8:35:e0:3d:63:a4:dc:88:7c:01:49:b0:5c:91:e2:39:77:22:
         1d:27:47:90:8c:c3:98:98:73:ee:39:f6:8d:02:6e:15:a7:32:
         51:36:98:eb:61:34:37:bf:99:f8:22:97:c4:45:ba:18:4c:55:
         d7:90:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:33:07 2024 by rpki-client on console-fra.rpki-client.org