Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa
File:                     069fb1b6-9863-39f2-9fdb-e5a64d305939.roa (raw, json)
Hash identifier:          Q4wMZCT13K7Bj1knlE4h7p8mL124oYvZVmw/wmqZLu0=
Subject key identifier:   95:5B:25:ED:D7:83:75:E2:DA:2A:A4:CC:1E:CB:BD:7E:47:D4:68:3C
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F43285847B3B979CD8C311BDFFCEACD00
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa
Signing time:             Tue 29 Oct 2024 12:23:21 +0000
ROA not before:           Tue 29 Oct 2024 12:23:21 +0000
ROA not after:            Mon 27 Jan 2025 13:23:21 +0000
asID:                     31898
IP address blocks:        143.223.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:b9:79:cd:8c:31:1b:df:fc:ea:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Oct 29 12:23:21 2024 GMT
            Not After : Jan 27 13:23:21 2025 GMT
        Subject: CN=1d56f423-879f-4c76-b42f-814ffc03359f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:92:c8:00:89:e0:07:44:12:89:a9:45:50:
                    4f:27:6c:2d:cd:e6:b8:51:9c:e3:93:59:cd:57:2a:
                    ea:33:02:4c:36:a5:08:5e:57:6f:12:82:60:08:dc:
                    d4:1a:8d:8a:a9:64:a8:08:39:da:e6:3d:85:ab:80:
                    c0:da:8f:64:e8:04:72:3d:30:16:80:63:d2:f6:fd:
                    4b:64:fb:13:bc:09:06:98:e6:69:60:fe:01:4c:db:
                    82:1e:17:68:9a:c1:88:7a:58:cb:9c:7c:a0:9e:9c:
                    ae:47:a1:64:b8:36:e5:08:71:4f:9f:6e:73:65:9b:
                    83:48:17:a8:d6:ea:9c:eb:49:22:99:b6:c0:65:1b:
                    a3:06:74:db:c8:7f:bc:dd:50:a6:cd:49:c7:24:7b:
                    74:74:0b:b8:85:98:1b:0b:f5:6a:11:2d:66:c2:c2:
                    00:a1:53:24:86:50:31:a1:3c:3f:b5:f2:7b:e4:c5:
                    11:63:eb:8c:58:e1:03:0e:51:43:12:4b:79:60:d4:
                    25:99:8c:fe:bc:59:3d:fe:93:ee:b4:05:cc:27:5b:
                    39:6e:26:22:cb:54:f5:4b:3c:9a:06:02:42:c4:ce:
                    64:7b:73:45:04:2c:9a:d1:f6:b7:5f:e3:fa:b9:d0:
                    5a:b1:76:a8:18:9f:a5:8c:36:c7:2e:15:57:6e:a9:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5B:25:ED:D7:83:75:E2:DA:2A:A4:CC:1E:CB:BD:7E:47:D4:68:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/069fb1b6-9863-39f2-9fdb-e5a64d305939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:24:21:be:77:60:bf:a3:3f:b0:b8:d0:51:f6:08:50:6b:74:
         d9:58:a7:76:55:d8:ca:60:1d:b5:f5:d4:cd:ee:32:bd:fd:40:
         47:fe:78:83:4d:06:54:0d:c0:e0:80:1c:e3:d3:72:8f:d9:ea:
         77:74:12:68:14:6a:eb:9c:48:97:cf:a3:ee:9a:eb:53:f2:6b:
         f3:8e:4e:4c:d9:6c:11:a1:55:88:c7:68:7a:b3:75:aa:da:a2:
         5a:50:70:35:e1:7a:f2:e5:93:59:3f:18:5a:5b:82:75:72:21:
         be:25:a9:d7:9e:c4:30:d6:df:f2:32:33:44:77:e9:57:02:9a:
         21:17:93:ef:53:5a:66:d1:98:8f:1a:6f:ff:68:28:3b:f2:cb:
         16:da:23:d4:38:3b:44:0a:1a:7c:e8:63:96:32:ce:02:b8:ea:
         2a:c2:7f:3a:c5:7e:ca:23:a4:39:94:db:a4:ee:92:5c:e5:96:
         8a:37:72:57:38:2b:19:20:80:69:b2:67:e2:24:29:4d:01:23:
         1b:20:d0:36:3f:e1:7e:2e:0c:3d:29:f4:b0:8e:1c:af:ab:70:
         3e:98:08:f8:4e:24:38:f1:cd:75:15:21:94:ee:22:ac:d3:5b:
         57:aa:bf:03:bd:a1:8a:67:01:b0:f9:25:79:a9:44:fc:4f:66:
         bc:e2:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org