Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/8a751380-1600-3926-ab79-5f979e517cfc.roa
File:                     8a751380-1600-3926-ab79-5f979e517cfc.roa (raw, json)
Hash identifier:          AtNbuulqVZo1VT9igTsDPt3hLegGkg2Q74ZA+EEgWpo=
Subject key identifier:   70:CF:45:98:65:73:78:88:B8:2B:65:6C:FF:AD:D6:2F:08:44:D4:72
Certificate issuer:       /CN=07f6990d-62ce-456e-a266-cab190ec7375
Certificate serial:       010D0C9F432858477C98AE8F8FF8DD1361AC3E00
Authority key identifier: B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/8a751380-1600-3926-ab79-5f979e517cfc.roa
Signing time:             Wed 09 Oct 2024 18:27:49 +0000
ROA not before:           Wed 09 Oct 2024 18:27:49 +0000
ROA not after:            Tue 07 Jan 2025 19:27:49 +0000
asID:                     62913
IP address blocks:        192.69.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:98:ae:8f:8f:f8:dd:13:61:ac:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f6990d-62ce-456e-a266-cab190ec7375
        Validity
            Not Before: Oct  9 18:27:49 2024 GMT
            Not After : Jan  7 19:27:49 2025 GMT
        Subject: CN=339d98ca-9dbe-4637-96a4-87fec4b57b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:2c:dc:e1:69:af:61:a4:9b:c7:87:e7:08:
                    80:9c:ad:42:6b:0d:48:da:9f:b4:8a:d8:49:90:63:
                    88:b5:88:e9:45:2a:96:f0:c4:9d:97:72:70:50:61:
                    da:68:09:3f:d0:ce:74:f5:79:25:ef:82:bf:f7:76:
                    d0:07:5d:4d:9a:5a:ce:9a:ea:15:7d:1f:b9:ea:a9:
                    ca:35:f7:11:ee:80:73:0d:d3:dd:35:d4:00:ed:12:
                    ab:ea:d7:dc:99:36:68:21:f6:e3:75:61:22:7f:5d:
                    0e:13:72:07:9d:09:9d:49:e3:8f:ce:c1:fd:f5:7f:
                    6f:89:43:2e:58:84:50:c5:f2:48:d1:58:a2:f7:96:
                    51:c1:e2:04:d8:10:33:93:fc:e2:3d:71:c1:b9:67:
                    76:57:58:12:31:c1:85:95:87:77:a7:d4:c3:66:cb:
                    07:2e:c2:d4:2d:60:c3:35:5c:13:18:fc:47:e6:7a:
                    79:4b:ce:d7:2a:32:14:17:89:28:67:67:1e:b8:02:
                    19:92:70:a6:33:94:16:87:d4:1c:ee:55:28:ea:fc:
                    f1:ec:4d:64:48:6d:f4:8b:68:c9:cb:fb:66:df:e5:
                    24:15:5f:da:27:32:31:71:d5:61:39:d0:4c:e6:d6:
                    ad:ed:f5:d2:5a:34:73:68:98:59:04:dc:61:4e:25:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CF:45:98:65:73:78:88:B8:2B:65:6C:FF:AD:D6:2F:08:44:D4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/8a751380-1600-3926-ab79-5f979e517cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375/07f6990d-62ce-456e-a266-cab190ec7375.crl

            X509v3 Authority Key Identifier:
                keyid:B3:9D:14:14:C4:C8:35:B1:A3:8E:58:24:B3:1B:E6:7D:89:21:A3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/07f6990d-62ce-456e-a266-cab190ec7375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:17:24:e3:44:94:43:63:4e:7b:8c:68:10:3e:df:6a:1d:
         53:6e:3b:b4:bf:db:5d:d2:31:b7:30:2a:02:48:ba:07:e6:98:
         f4:b0:81:e1:31:b9:95:12:81:6d:aa:7b:45:8c:11:ab:9b:9d:
         88:40:e0:bc:c2:38:2e:55:f2:b0:25:9b:5c:8e:e6:3e:74:da:
         0a:7c:73:62:21:08:a4:33:5e:fa:c0:10:e1:a7:6a:92:f5:f3:
         5e:13:60:fe:2a:8e:5d:c6:67:3c:52:90:75:e6:4d:69:2b:60:
         92:cc:18:c4:f8:a1:c1:db:c3:22:4c:60:fd:cd:e2:94:8b:af:
         26:f7:f7:04:82:24:6e:ba:06:e1:95:ea:95:73:2a:db:e4:86:
         ed:82:a2:43:e8:75:f3:f8:c2:5e:77:90:3f:e4:e2:7e:e8:83:
         e9:ec:94:9d:8f:96:74:85:68:b3:c0:af:90:73:16:c4:d7:80:
         64:b5:6f:59:59:a5:63:6a:5a:92:ef:b1:66:16:c8:f9:cf:5a:
         bb:72:e9:5f:1f:3b:7b:1a:ed:d0:1e:25:c8:1b:d7:62:07:f1:
         aa:12:cf:12:a3:e4:4f:ae:de:81:4e:f1:91:7d:b3:4b:06:8b:
         38:fe:6e:82:b3:32:1e:1e:7e:e6:e0:75:49:61:70:5e:07:0d:
         37:3f:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:48 2024 by rpki-client on console-fra.rpki-client.org