Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa
File:                     a50b5022-2980-3c8b-9135-ef6ad61f4658.roa (raw, json)
Hash identifier:          zInpGk8tXAkey5e33T+Z5Zq8QVTBnDBT7BgIgcF//5M=
Subject key identifier:   D3:2E:A7:82:C5:F2:5C:1A:D5:B7:7A:94:FD:29:F6:FF:D9:90:EF:46
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858478CB68A30E0375A6E5E6F8840
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        209.237.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8a:30:e0:37:5a:6e:5e:6f:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=7490c427-418c-4edf-baa0-c4e9a97bb0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:45:69:c6:ff:02:e8:6f:24:95:d5:72:0b:
                    74:5e:db:5b:d7:96:c4:03:ed:a3:df:60:2f:9c:9e:
                    f2:2b:03:6a:f4:72:97:2e:53:f4:da:32:c1:2d:c6:
                    35:06:1d:4e:2b:9c:3d:b2:43:69:d4:f2:d9:e7:46:
                    da:72:47:3a:d0:c9:42:06:5a:f8:c7:25:76:70:bf:
                    ad:5c:79:0f:76:57:6b:f0:dd:01:cf:8d:1a:a9:cc:
                    2e:e0:ee:f9:84:fd:2a:72:c8:98:3c:04:08:eb:f4:
                    2d:c4:0e:b9:b3:09:e4:2e:e2:8c:c7:8d:db:58:81:
                    d7:75:d4:d3:ba:63:bf:d6:aa:44:73:8b:05:cc:70:
                    f0:59:96:26:c0:8c:87:98:0b:d1:71:2b:1b:82:47:
                    74:c7:98:f5:00:6a:f4:c8:ea:4d:23:a6:76:ba:15:
                    98:c0:88:77:bb:6a:48:11:0e:6b:1e:a0:48:dc:2f:
                    57:ac:45:f6:41:7f:75:45:33:8d:79:c7:2a:9b:c7:
                    2e:55:b0:ff:72:e1:e7:0a:77:74:9e:0b:cd:24:74:
                    74:63:ff:9d:03:94:c9:e1:d3:28:6d:86:7f:e8:a8:
                    cc:3a:8e:df:30:65:ef:98:41:51:e5:0a:8d:5c:d5:
                    3f:6e:6b:e8:fb:d2:34:c8:9f:cb:2e:da:f3:ef:4a:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2E:A7:82:C5:F2:5C:1A:D5:B7:7A:94:FD:29:F6:FF:D9:90:EF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:1c:b5:79:9c:34:31:43:70:ed:4b:a3:60:fb:10:bd:a7:
         4a:1f:b2:c0:02:2f:7c:6b:50:26:4d:fc:60:45:a1:9d:b2:a2:
         7f:44:70:c9:7b:65:cd:d9:83:d0:43:08:f5:13:47:46:85:0f:
         03:bd:8e:b8:20:43:17:6d:a0:e8:97:05:13:16:18:37:1b:bb:
         f5:e7:34:01:85:33:5c:56:a6:63:0b:30:9b:5f:00:ff:f3:64:
         cb:98:24:f4:f8:b1:d1:8e:79:3e:de:30:13:9c:52:0d:86:c9:
         f2:b0:59:a0:ec:95:35:73:da:1f:13:99:71:14:e6:26:14:03:
         b7:48:9e:ee:c3:44:ee:6e:99:88:dd:d1:b1:56:4a:b2:f1:c2:
         60:41:78:ba:24:53:d4:e1:05:dd:a7:00:cf:cd:b1:9f:a6:8c:
         f6:1e:93:0b:0f:c4:e6:41:17:3d:2b:bc:f8:f0:c4:aa:1f:61:
         9a:bb:e1:18:d8:6c:bf:f6:d4:05:b5:60:ca:fa:82:d8:50:38:
         2e:76:71:34:95:33:82:1f:3e:df:51:52:14:56:78:bf:7b:66:
         b7:ff:a0:0d:53:70:38:e9:09:55:cd:1b:bf:c0:88:17:06:67:
         46:73:75:59:ab:47:9b:3d:77:0d:06:1d:fe:85:23:92:f5:5c:
         66:e2:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org