Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa
File:                     91f0db5a-4400-3591-af55-e22c5016a52d.roa (raw, json)
Hash identifier:          Aih9xXpGT55SmCnlQJzdZwh8oSgw1xf2aMUMInwOz80=
Subject key identifier:   1A:26:6F:5B:01:5F:31:17:17:9A:66:DF:8A:4A:8C:0E:E5:87:3D:8D
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858478CB681B39BEC7841C5A44980
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        209.237.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:81:b3:9b:ec:78:41:c5:a4:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=2948fb15-7538-4f6e-8b4d-7b914da6a6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dd:f3:80:90:13:96:dc:3c:80:cd:61:cc:d9:
                    b9:28:f5:ba:15:f0:a2:9f:77:8e:00:bb:ad:75:73:
                    3d:3d:e8:e7:8c:8e:cf:60:f0:63:6a:38:36:0c:aa:
                    cb:94:66:59:60:3d:1f:92:5f:b5:77:2d:02:ad:36:
                    a7:67:0e:b8:1d:a9:b5:c3:76:6a:52:fe:53:44:70:
                    02:fd:7e:2b:40:67:8c:89:44:e7:86:06:3c:7c:97:
                    c3:76:d8:05:fc:61:8d:ff:71:34:9f:a2:8d:40:70:
                    1f:85:f6:08:11:5d:e2:ce:da:a3:3d:7c:9f:56:88:
                    de:4f:0e:b8:73:57:8d:26:0b:0a:40:f4:7b:e3:ea:
                    2f:ae:f0:0b:51:db:fa:f0:2b:ad:51:58:ab:04:ff:
                    91:c3:95:83:dc:2a:78:43:a8:95:05:3e:85:30:d9:
                    25:86:27:e0:0e:a8:7a:25:aa:94:6d:eb:85:b0:86:
                    c9:29:bd:7b:48:00:42:4f:fc:c1:d1:e4:37:68:2e:
                    2d:c7:1e:7a:3d:8f:8e:12:b5:96:32:44:32:6d:9f:
                    5c:ef:5a:f5:82:47:57:1c:e8:39:d0:08:18:e2:2d:
                    2c:3d:85:06:6a:36:3d:1a:80:da:79:34:d0:a0:ed:
                    43:59:a4:7c:a0:c6:3f:ac:0a:93:8b:06:51:1a:0b:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:26:6F:5B:01:5F:31:17:17:9A:66:DF:8A:4A:8C:0E:E5:87:3D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4e:2c:8b:2c:26:bc:dc:5f:94:27:fe:14:2b:b7:31:88:68:
         4f:1d:d3:2b:18:c0:7f:f8:a7:18:54:74:c3:87:85:ec:73:b4:
         12:0e:3c:fd:f9:26:f2:a5:00:f3:b1:a3:47:56:7d:20:8f:32:
         a8:0d:5c:d8:7a:33:2a:31:a9:45:9c:d3:ca:74:79:83:78:f1:
         5d:1c:58:51:6c:02:93:73:b5:7b:b8:01:60:31:71:d0:6f:8c:
         ba:f7:4b:6d:a5:cc:5d:61:ef:24:df:10:0f:29:10:c1:37:5b:
         fe:99:b2:fe:3c:a6:87:73:48:98:b2:13:fa:50:cb:f2:b6:20:
         bf:61:fc:0a:2f:88:23:07:33:79:b7:e3:59:c8:44:bd:ef:6b:
         99:93:0c:11:2e:ac:89:27:6c:6d:77:1f:8a:be:f9:57:33:98:
         4b:11:38:39:75:11:59:83:6e:f8:c1:32:8b:7f:38:9a:de:f5:
         c1:31:16:c1:78:88:7a:9f:cc:73:46:48:b8:9e:84:6b:45:e0:
         e8:e1:6d:dd:9d:00:ad:0f:5a:97:ca:35:50:59:f0:5d:05:93:
         e5:20:fd:f4:ac:7b:08:4f:09:da:8e:76:6c:6d:7b:79:0f:ab:
         7d:8c:21:84:9d:fa:12:67:cc:f7:86:7e:84:2a:6d:92:3e:e3:
         cd:dd:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org