Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa
File:                     4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa (raw, json)
Hash identifier:          WFiC6kZt8qjILIRmoNOlHELpj53agoHRea5DK6iZgTk=
Subject key identifier:   E6:CA:80:2C:1B:B5:08:18:09:1C:33:07:40:80:D3:0D:62:0C:EA:6E
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858478CB688C74D70E7DDCFD97100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        209.237.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:88:c7:4d:70:e7:dd:cf:d9:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=e7ed4369-45f3-4323-8839-81423354095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:a8:a4:bf:df:d1:09:df:95:a3:16:0a:e9:
                    2c:55:96:39:af:49:8c:f1:84:7c:4a:31:ea:e3:43:
                    1e:c3:7a:70:6a:93:8a:9e:54:b7:aa:8d:2f:d3:7a:
                    ed:0f:d9:6b:ef:2f:07:59:2c:da:9a:8c:d5:c0:90:
                    2c:ff:ed:01:96:00:b2:33:d3:5e:45:19:a4:98:26:
                    b9:0a:d1:8a:65:40:c4:7f:e9:79:71:2d:46:3c:55:
                    1c:7b:fa:67:58:67:e6:ae:d2:3e:b8:be:d5:56:bd:
                    b7:69:7e:0f:f3:69:b5:e8:dc:0d:ae:65:71:13:c1:
                    e2:6e:e1:63:ef:58:49:a8:82:ba:4d:8c:9d:2f:80:
                    19:05:1c:d4:9b:e5:d4:67:4d:ca:3b:83:a3:88:54:
                    16:1d:05:3a:65:c1:cf:96:b0:d0:d8:b3:82:7a:23:
                    8f:39:91:18:c3:7a:6a:6f:30:98:aa:c8:00:51:b1:
                    af:1a:74:75:04:4c:09:37:1a:94:f8:88:db:61:8c:
                    a0:68:3e:8c:41:a1:c4:73:b6:5e:37:95:d9:4a:c7:
                    40:9d:36:42:47:6d:c4:fe:9e:bc:53:11:fc:12:f2:
                    84:48:49:b5:11:b3:61:2d:65:f6:8f:7e:6a:2e:6b:
                    74:4e:34:42:15:5c:14:08:42:33:b8:c8:74:7b:f0:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:80:2C:1B:B5:08:18:09:1C:33:07:40:80:D3:0D:62:0C:EA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ce:75:98:b8:bb:19:6f:b3:25:f7:96:b3:3a:14:48:76:87:
         ea:dc:6e:60:d8:97:39:30:eb:1a:08:5f:5b:41:b5:cf:37:a1:
         ea:87:15:b4:14:46:64:c0:14:c9:d0:0b:cf:9b:7e:44:82:cb:
         79:bc:f5:43:24:e9:f4:ad:16:61:37:45:cb:ff:cd:80:2c:00:
         9b:eb:7d:ce:2e:05:06:09:d0:55:b0:42:2f:19:13:d9:56:4e:
         82:74:90:0f:d1:97:9a:95:b2:ee:8f:a7:2c:72:fd:0c:93:46:
         ce:72:ff:5f:eb:b1:eb:34:1f:d4:b2:83:ba:d2:5e:4e:04:e7:
         cb:03:42:ae:fa:22:72:b6:c2:b9:3e:6c:e1:73:32:3c:4f:f6:
         74:d3:67:97:89:4d:13:4b:6e:86:aa:99:9a:dc:33:da:51:89:
         ec:17:00:62:2d:18:94:e1:7a:2c:5c:44:38:23:1b:dc:96:7c:
         b2:24:bb:0e:3e:b1:65:c5:eb:1a:31:f4:8c:5d:4f:9c:91:da:
         e6:55:ac:51:7b:d9:9e:74:24:bd:c8:ee:2b:93:e8:d3:4a:55:
         63:7b:d0:6d:10:e7:3e:59:71:6a:c3:c5:98:36:0f:df:ed:bc:
         f6:aa:ac:04:50:8b:67:d6:15:88:af:fd:36:f4:7c:d4:eb:6c:
         07:e1:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org