Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/a8fd4b58-ccfe-343c-b690-183d696a43e9.roa
File:                     a8fd4b58-ccfe-343c-b690-183d696a43e9.roa (raw, json)
Hash identifier:          d3YyjeF7l8H1TDuzQPW2xNK92IDtNi7Etk6XT5X++ak=
Subject key identifier:   08:5E:8E:B3:23:6B:E2:2B:F6:4D:EB:0A:47:89:52:F9:AA:6F:76:BA
Certificate issuer:       /CN=6172d736-c698-4515-a8d5-e8f599b88b89
Certificate serial:       010D0C9F432858477D00629DE038FF258D7A1098
Authority key identifier: 3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/a8fd4b58-ccfe-343c-b690-183d696a43e9.roa
Signing time:             Wed 09 Oct 2024 21:56:46 +0000
ROA not before:           Wed 09 Oct 2024 21:56:46 +0000
ROA not after:            Tue 07 Jan 2025 22:56:46 +0000
asID:                     55108
IP address blocks:        69.67.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:00:62:9d:e0:38:ff:25:8d:7a:10:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6172d736-c698-4515-a8d5-e8f599b88b89
        Validity
            Not Before: Oct  9 21:56:46 2024 GMT
            Not After : Jan  7 22:56:46 2025 GMT
        Subject: CN=2b1d9000-1893-419f-b2be-64851220f92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:e2:49:3d:08:19:c5:64:58:65:27:07:93:
                    7f:90:2d:6e:d2:fe:12:7b:ac:18:aa:55:8d:19:e7:
                    0a:4f:2b:a7:0d:55:2a:3f:e5:f1:01:b2:74:cc:13:
                    8e:a5:fb:a0:b3:b9:77:e1:4a:82:87:06:11:af:65:
                    67:e0:49:f0:f6:99:3f:bf:c8:4e:01:e3:be:e2:c5:
                    65:00:3f:cc:b6:3d:46:2f:2e:f7:fc:1f:9e:c0:96:
                    33:91:1c:d0:3d:9f:5e:45:35:f9:26:34:1f:65:9e:
                    58:18:9c:a4:c4:d8:62:b4:17:e3:07:7f:bd:7b:38:
                    c3:f2:ca:2e:10:8c:26:cb:de:21:64:19:0d:67:d1:
                    00:02:4d:82:ae:fa:fe:df:90:e9:da:da:ea:a7:02:
                    3d:20:a8:5c:6b:38:70:30:e6:ef:9b:0d:c7:50:de:
                    03:2b:f2:fa:4b:65:a9:dd:6c:ba:e5:20:e0:52:cb:
                    5c:6a:38:7e:6a:5b:d6:2d:91:05:b6:db:6c:cf:56:
                    5f:65:18:db:ea:69:25:e0:2b:85:af:e2:94:93:d1:
                    3f:0c:8a:56:f6:63:7e:6f:64:df:c5:00:6c:b9:fc:
                    2e:93:17:bb:f2:3d:41:c6:3e:a7:6c:54:e2:50:eb:
                    5e:e5:7a:4f:d1:12:50:e0:5d:9f:e8:ae:46:bf:82:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:8E:B3:23:6B:E2:2B:F6:4D:EB:0A:47:89:52:F9:AA:6F:76:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/a8fd4b58-ccfe-343c-b690-183d696a43e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl

            X509v3 Authority Key Identifier:
                keyid:3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:f9:41:5b:3f:35:51:d5:5a:5c:5e:fd:bf:99:c0:7e:40:
         1f:46:4f:fa:41:eb:0c:2d:57:8a:7f:7d:14:73:e1:b0:97:46:
         b3:46:6f:22:f8:1e:b5:42:be:0f:de:c6:00:33:b9:b3:c9:75:
         43:96:8a:90:d0:b5:3b:79:87:0a:df:d6:60:f7:88:98:3f:a8:
         da:a6:89:f1:fb:59:d8:f6:e3:77:16:73:a0:50:08:45:90:e5:
         28:9f:8b:0f:7a:5f:7b:e7:f8:6c:ce:71:07:ce:97:18:73:d5:
         74:cb:52:66:7e:1c:5d:a2:46:17:71:cf:4f:ca:be:a9:7a:c6:
         13:d1:bd:64:26:34:5d:31:8f:74:4d:11:05:35:24:34:cf:ec:
         e3:77:b7:3c:c0:c8:d5:b0:96:8a:3c:ff:55:bf:e5:fa:80:d7:
         c7:7e:e9:b6:27:ab:d3:c3:4b:b0:8f:09:0c:73:ab:3b:5e:f3:
         ad:4f:8d:d1:16:0f:d4:44:87:a6:ee:68:a9:06:ba:20:93:ec:
         61:11:dc:a5:f0:80:0b:69:a8:d7:f9:48:0d:4f:06:1d:94:78:
         4c:fb:75:87:e9:b6:f0:2a:05:07:76:69:50:54:43:e2:e9:c6:
         87:49:66:78:02:d4:56:39:6b:79:0d:14:e0:63:8a:a3:17:de:
         0b:c7:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:59:57 2024 by rpki-client on console-fra.rpki-client.org