Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa
File:                     89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa (raw, json)
Hash identifier:          9Anl8vb8igKP6DkOU+IxoN6D/byZeQXnQvybOv51rBY=
Subject key identifier:   B5:45:D2:B3:21:E5:75:AF:14:9F:C0:85:26:02:25:C1:2D:BF:F9:BE
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845CF6E3B0807C17F8CE9136FC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     13414
IP address blocks:        209.237.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3b:08:07:c1:7f:8c:e9:13:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=13c18a51-30c6-4a66-9274-b9c011c4bc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:dd:6a:af:dc:87:b5:b7:b3:9c:30:2a:e7:
                    98:c2:47:4a:77:9d:cd:56:d6:23:a5:b2:5c:56:d8:
                    59:60:36:a7:50:99:fb:b1:07:2c:58:8e:9a:f6:5f:
                    4d:70:d9:80:40:d8:87:a8:38:46:bb:16:1b:0f:5c:
                    4a:cf:61:5a:09:ed:e5:33:18:a9:ab:f2:cd:be:1b:
                    f6:c9:cb:87:cd:1a:89:3a:33:7b:54:63:4b:a6:cd:
                    59:2c:34:e0:fe:de:33:81:ab:4b:e3:8b:5c:fd:5f:
                    eb:2f:d9:f8:c5:23:62:dc:54:f2:55:1b:87:f3:e3:
                    06:28:3a:80:8d:ea:ac:4e:fa:18:46:3f:67:ee:54:
                    f2:b7:92:24:4a:30:0b:6e:87:11:7f:2f:99:2b:fd:
                    96:8a:57:57:68:67:69:74:95:b9:df:bc:c7:40:a0:
                    2e:27:3e:1c:a2:4e:73:94:53:84:f3:c1:21:82:b5:
                    16:b7:8c:57:fd:04:89:25:55:c4:a2:cd:71:3d:d5:
                    c2:e5:be:5c:48:58:e9:26:13:29:84:5c:89:37:45:
                    6d:99:28:5d:79:88:10:f0:a1:ad:e1:e8:73:19:5b:
                    93:ed:26:f3:bd:93:74:a4:34:3d:a0:6b:d7:c6:fb:
                    d0:1e:aa:3f:63:dd:86:52:e8:d1:cc:10:f7:6a:5c:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:D2:B3:21:E5:75:AF:14:9F:C0:85:26:02:25:C1:2D:BF:F9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:22:a0:25:cf:bc:bf:f6:75:bb:19:99:88:92:3e:c2:2b:7b:
         1b:d8:c1:c2:14:12:e0:25:09:3d:39:d4:5f:82:c0:25:f9:28:
         53:1c:0d:0a:da:52:78:dd:9b:9e:1e:3a:87:38:ab:e4:07:3b:
         06:9f:8e:45:46:cd:17:6a:bd:f6:99:62:59:7a:12:fb:7a:c4:
         3a:81:b1:dc:fd:0b:7c:65:88:a2:50:9b:98:9c:9d:58:b5:1a:
         18:d6:99:0c:c6:0e:3f:5e:1c:a8:0e:c8:8e:6c:f9:db:98:b8:
         2a:09:10:0d:6d:30:37:2e:35:be:71:e6:e3:83:50:1c:58:7c:
         8d:bd:09:51:f1:47:76:95:c0:f8:40:90:64:48:3f:7b:d3:1e:
         c1:50:72:a5:02:24:80:da:06:d2:28:7a:15:33:7c:e7:ec:e1:
         b4:fe:62:8e:1f:52:d7:38:6b:06:68:72:e0:ab:9a:ab:b0:6c:
         34:c8:b2:92:e3:09:4e:c8:52:fa:b6:7f:17:28:dd:6a:d8:2d:
         37:8e:40:c1:03:32:2d:78:f4:49:dd:73:fb:d9:5a:d1:bf:c1:
         d3:ff:ff:c6:bc:7b:01:12:bc:bd:da:82:1f:e4:8d:41:11:07:
         cb:ae:b9:85:c5:10:cb:f0:10:1e:d0:98:07:88:a4:a0:85:63:
         79:ed:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:01:09 2024 by rpki-client on console-ams.rpki-client.org