Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa
File:                     d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa (raw, json)
Hash identifier:          x2l/YkOMLrIBp/PfuOtdculTxkqIogD5p/mLdQhaGFo=
Subject key identifier:   5C:30:4B:E0:1A:B8:10:47:3E:3A:FD:57:9D:27:FC:B0:A0:17:50:36
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858479D76AF83BA83221CA7D0E280
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     62610
IP address blocks:        69.165.76.0/24 maxlen: 24
                          107.151.254.0/23 maxlen: 24
                          198.44.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:af:83:ba:83:22:1c:a7:d0:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3ce6ff17-7833-4ebb-9678-eb38442ae7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:6a:51:aa:34:c7:76:e1:6c:26:06:24:ac:
                    61:cb:61:8b:99:e5:0f:96:f4:87:1b:8e:17:bd:53:
                    cb:aa:0b:fc:a6:5a:7f:12:ad:ff:27:6f:9d:95:fc:
                    1e:e8:21:49:1c:f5:3d:cc:48:82:5c:a3:97:51:53:
                    9e:e7:a4:ee:23:9d:6f:19:c8:51:3c:aa:46:14:08:
                    3d:1c:7d:7e:09:16:7d:9f:2d:d3:6c:7c:91:85:ca:
                    cd:c7:64:1d:c0:4c:0b:f5:85:ec:8b:12:3e:65:b0:
                    1a:d3:9a:1a:52:73:e2:d5:6a:d0:ca:25:f8:61:74:
                    42:44:37:14:84:7d:4f:57:07:66:6c:fa:94:7d:9c:
                    f5:eb:6e:e1:47:af:23:55:e9:88:ee:dc:ee:7a:7d:
                    3b:a4:f2:bc:7a:d7:84:12:a3:44:34:a0:49:c0:d4:
                    ab:f8:49:75:ef:98:68:3c:a1:bd:d3:d5:f9:70:c8:
                    4a:63:b7:6a:d4:4c:28:29:c9:bd:f8:59:0c:82:39:
                    55:fc:f9:73:f2:ec:30:08:f6:f7:67:b6:05:88:fc:
                    47:32:de:e0:28:59:1c:dd:f4:69:08:6a:34:d2:dc:
                    8b:5b:9d:e4:45:08:a4:00:d9:4e:12:bc:64:20:41:
                    3f:52:e1:fa:fc:d3:52:18:f4:db:a7:9f:70:f9:95:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:4B:E0:1A:B8:10:47:3E:3A:FD:57:9D:27:FC:B0:A0:17:50:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.76.0/24
                  107.151.254.0/23
                  198.44.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:64:a9:fa:2b:a1:e1:56:65:0b:23:df:87:fa:52:0f:44:
         69:a8:77:2f:fa:91:5e:08:da:75:ae:26:5a:49:06:5c:35:23:
         f7:97:20:10:1e:58:f5:80:16:a9:50:48:96:9a:b0:b0:4b:a6:
         fb:e8:eb:14:0b:e2:c9:13:bc:7a:77:7e:ff:97:96:6c:b2:95:
         9a:1b:23:db:fd:ad:c4:f9:66:82:a5:96:0a:81:a5:db:e5:ca:
         a9:a5:0f:a7:cf:eb:2b:95:43:43:1d:8c:f8:c1:15:8f:19:0c:
         d0:28:e2:63:bd:25:ba:ad:15:66:4e:00:a1:f4:25:79:4e:c7:
         36:4f:d7:7e:43:cc:49:dc:01:54:4d:fa:08:fe:8f:18:a5:fd:
         25:04:17:c0:7a:08:a6:4f:9a:65:d2:4b:c0:86:28:5f:fb:c6:
         18:94:d0:50:61:50:34:84:6c:43:19:14:de:9c:b5:7f:bf:1d:
         fb:78:98:5a:fd:8a:8b:9a:0f:53:68:21:d4:6e:73:ab:95:ae:
         eb:da:92:f7:7d:db:ff:75:58:ea:7c:72:d3:0b:0f:b8:3e:78:
         0f:81:d3:28:31:44:98:94:f0:a1:e3:78:c8:ab:17:e4:23:99:
         6d:21:e4:24:7d:ea:17:37:53:d2:5c:15:ed:67:7c:19:d4:f0:
         fc:96:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:24 2024 by rpki-client on console-ams.rpki-client.org