Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
File:                     43a5601d-1585-3131-be68-bff003a98cc5.roa (raw, json)
Hash identifier:          rmV72neTa/GDq5DHFhMeQ0HTx61swJ35r4YRc6ri6KY=
Subject key identifier:   BA:60:40:B4:DF:0F:46:68:12:0D:78:94:B9:B5:19:86:A1:E1:17:D5
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858478CB688D674D3F73C1B0F0980
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        209.237.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:88:d6:74:d3:f7:3c:1b:0f:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=d19c09d0-8bb5-4385-bfb6-e671266c4ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:20:11:69:54:3c:52:73:7d:5d:ab:b2:97:
                    28:8f:ee:a5:be:20:58:9f:c2:59:86:b8:8a:84:f5:
                    30:1b:95:11:61:ad:cd:6f:e9:1e:d6:c6:e6:c3:07:
                    6d:2c:d9:82:0b:1f:ba:73:26:ab:71:80:e5:a5:c5:
                    c8:d1:54:75:de:4d:c7:98:4e:12:18:0c:89:1d:3c:
                    e4:cd:d9:6b:03:73:3d:31:9f:ea:08:60:bb:5b:f1:
                    fe:a7:09:e3:0d:0b:63:13:20:3f:c1:38:89:6c:74:
                    1d:80:db:66:a2:26:8f:ce:3a:dc:fa:4e:16:ad:c8:
                    27:ea:0d:85:22:40:62:06:59:2e:c1:da:5a:ad:86:
                    b4:e9:86:4b:f4:2a:9d:f0:4a:a9:89:62:44:0d:9c:
                    be:0d:0e:47:e3:24:dd:75:63:63:d1:4f:39:bd:cf:
                    22:46:e1:eb:9f:24:ff:63:ae:2c:ef:36:2f:ca:cb:
                    71:97:ee:b1:3c:5a:5a:46:83:c6:a2:3f:ab:10:e9:
                    13:74:e8:68:a2:24:01:40:72:b3:c2:3c:54:e4:e2:
                    22:23:16:85:7d:f9:59:ce:7e:1c:a2:9c:8c:be:1d:
                    ef:a3:e3:3c:72:26:9e:e0:c1:79:87:f5:aa:ff:4e:
                    e9:fe:af:f0:88:47:99:9a:9b:00:a0:0c:77:4c:09:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:40:B4:DF:0F:46:68:12:0D:78:94:B9:B5:19:86:A1:E1:17:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:44:27:73:88:b5:31:aa:b5:cc:17:dd:03:81:b7:8e:8c:
         ea:b7:0c:50:a8:15:17:68:97:d6:3d:75:f0:bf:1a:bc:0b:f7:
         22:f5:32:3c:4c:92:f6:32:ef:43:02:0a:59:00:73:a5:c1:9a:
         b9:a1:29:02:9a:f8:70:a9:80:1c:7c:e8:80:d8:e1:99:c3:fa:
         c6:46:21:55:59:b5:5d:7a:c8:5d:77:2f:69:19:76:c3:db:89:
         f0:ce:02:f4:1f:77:94:19:59:86:a2:3e:82:6c:32:71:d7:16:
         a9:e2:95:32:33:4c:df:bf:72:76:e6:48:12:00:10:54:e3:38:
         e8:74:50:f1:42:ac:8c:d0:22:25:e5:28:ec:6f:11:80:48:ee:
         43:30:0e:8b:fa:fe:53:d9:ab:b3:6c:bb:58:d2:ad:22:15:1e:
         a7:c8:e7:8f:e9:62:d9:7f:87:bf:c2:82:63:12:cb:12:48:05:
         36:0c:f0:36:8e:fb:0c:9d:82:11:8f:76:04:e4:9e:ed:03:68:
         0b:1b:dd:44:d4:53:f0:81:13:e3:df:06:6b:6c:14:98:b4:af:
         16:8d:e6:49:4d:a4:d3:fd:82:ca:6c:7e:4f:11:cc:c0:1c:55:
         ca:f6:d4:ea:11:61:48:47:f8:4b:6e:d6:43:ae:70:6a:a3:65:
         ac:4b:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org