Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa
File:                     966134d8-1fc4-30cd-a882-fabc6c02c9af.roa (raw, json)
Hash identifier:          90JdtnddsXaIxDyhhv5cY4db5Kv30IzPxAzmHKRAOI4=
Subject key identifier:   1E:E4:14:6B:D3:41:70:87:92:2F:B0:4E:B4:FB:98:FA:83:06:89:F4
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858478CB681976438D350A4421C80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        209.237.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:81:97:64:38:d3:50:a4:42:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=8d255ff0-0c11-4c53-ac2a-2742592cc0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:e8:48:72:ce:00:64:a5:36:2f:c3:89:04:
                    d7:c3:27:e9:8b:d3:13:e4:41:cf:a9:53:bf:03:53:
                    36:d6:5a:38:87:f9:be:58:c9:20:d9:b2:e3:a8:3f:
                    99:54:18:f8:09:b6:f0:6a:9a:c7:99:fd:75:89:84:
                    50:0f:4c:8a:b6:13:54:17:70:bd:c9:8f:40:ad:20:
                    3d:12:db:24:1f:fe:36:0e:9e:7c:2e:bd:32:1b:15:
                    27:6c:72:27:00:15:35:0c:16:b1:2c:3e:72:9c:02:
                    a0:77:ca:7e:ac:dd:3c:02:0a:26:64:f7:0e:1b:b8:
                    21:53:49:03:ff:c1:2c:6d:e5:da:41:29:18:3b:2e:
                    eb:7c:9e:db:37:2a:34:39:a2:f8:6f:04:4e:4c:13:
                    93:e0:04:bd:8b:a9:06:ac:e9:60:2f:a6:c2:fa:c7:
                    82:1d:1b:44:3e:41:66:61:ba:17:46:da:57:94:dd:
                    56:4e:44:36:c2:38:b0:80:79:ef:79:c1:49:38:03:
                    b7:7f:46:96:e3:ad:2b:24:f2:8a:52:78:37:0a:e1:
                    c3:4b:51:cd:68:c5:bd:96:27:7c:d0:2a:9b:73:78:
                    25:16:74:96:93:ac:47:f2:ac:0d:e7:46:a7:9f:ad:
                    e3:1a:58:7a:65:86:aa:8b:d5:83:bb:55:be:13:53:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:14:6B:D3:41:70:87:92:2F:B0:4E:B4:FB:98:FA:83:06:89:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:01:8d:da:41:62:fb:68:90:50:ea:c6:7a:e3:fa:46:d0:
         3e:ed:24:dd:ac:b0:3f:de:4a:b2:5e:a1:ab:19:6a:a4:00:55:
         b2:de:8d:60:e7:17:92:b7:d9:7d:76:1b:2b:77:48:54:aa:aa:
         cf:c5:5c:f6:6e:3e:6b:4f:f8:9e:51:7c:4a:d7:fd:0e:81:e7:
         b0:70:25:dd:a3:9d:6a:04:4e:3c:7e:a3:30:0b:ef:c2:92:62:
         5f:81:3d:21:2f:00:dd:3f:89:3a:cd:ab:0f:64:bc:02:00:ca:
         4b:fa:98:25:af:14:0c:b4:aa:8a:f6:8b:36:fe:c5:36:01:c1:
         40:d5:7f:5c:59:54:a6:e3:23:75:f3:f7:0d:0e:db:23:be:90:
         a3:f5:61:65:42:cb:97:23:84:25:b3:d9:b8:a7:08:35:ff:35:
         c7:f2:d0:5b:20:c4:32:a3:37:44:29:8b:19:64:48:81:5f:30:
         61:67:63:3a:92:b2:a6:9d:82:79:f7:00:e5:31:18:0e:4f:e0:
         e9:6b:28:bc:1f:86:89:0e:b8:44:7f:84:40:15:5c:fa:ff:66:
         97:ef:13:92:05:56:c9:90:20:98:50:34:35:0c:24:61:f1:e6:
         df:e7:48:b9:4e:05:34:00:eb:8f:a0:46:e6:dd:49:62:78:59:
         29:c4:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org