Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa
File:                     edb4852e-2acb-3ef9-b789-dceddea23eee.roa (raw, json)
Hash identifier:          xFJPiPY2Vn+hAzU5x6sw4pXQhanDbrCA7ex3nKPGH9I=
Subject key identifier:   3C:F2:A7:1F:A8:25:68:9F:E2:B3:FA:65:61:35:5F:F1:6E:E5:BF:DA
Certificate issuer:       /CN=69ae5b34-c59f-40db-9452-6e21ecb81731
Certificate serial:       010D0C9F432858473A5B2E3CF42D23694CB99B80
Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     32748
IP address blocks:        208.66.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:2e:3c:f4:2d:23:69:4c:b9:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=64620392-49f1-47a2-bd4e-db00c4115441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:89:20:7e:43:70:3d:d0:43:11:0f:f7:61:89:
                    45:70:24:79:2e:aa:e1:dc:d4:68:db:61:25:de:64:
                    ba:57:b3:df:5d:4c:54:ac:cf:1f:dd:63:17:29:cd:
                    6d:43:74:ea:99:e3:67:ef:07:00:0e:1a:54:32:44:
                    c9:87:8a:2c:b5:23:74:90:81:76:9a:bf:f7:6e:d1:
                    59:1c:4f:3d:a7:b7:b4:f7:c4:e5:24:ee:4a:fa:ec:
                    c4:d8:03:56:a6:f9:2f:c6:f5:ae:13:5b:b0:21:1d:
                    0f:c8:07:91:ca:fe:8f:c3:25:c7:92:53:d0:de:9f:
                    c3:c2:5d:c9:ee:3a:5c:54:74:3b:c7:4c:35:5c:12:
                    fd:d0:1b:cd:e1:b9:2e:5e:fd:c5:e0:5e:03:48:21:
                    3b:51:38:9f:bd:e4:44:ac:da:35:ad:a5:56:42:dc:
                    98:8f:d7:8d:b0:5c:6b:92:52:00:3a:23:28:f9:05:
                    15:9f:57:ab:d4:78:de:c8:d4:ee:5c:da:a5:04:55:
                    d4:55:25:74:b1:8d:b2:17:3f:61:7d:09:23:5c:d4:
                    ce:f2:e6:03:75:1b:4d:65:c4:4d:ff:67:b9:56:e7:
                    27:69:e0:0c:67:61:fb:aa:67:64:64:fa:a5:70:03:
                    44:46:26:f5:93:02:45:bc:07:85:e3:20:bf:fe:3e:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:A7:1F:A8:25:68:9F:E2:B3:FA:65:61:35:5F:F1:6E:E5:BF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl

            X509v3 Authority Key Identifier:
                keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:66:10:01:73:16:9c:93:36:f9:73:5e:03:37:66:d6:d9:ba:
         55:30:45:57:97:b0:ad:25:ec:59:3c:54:53:65:a0:b6:3b:f1:
         bc:f8:d4:0a:ed:15:7b:16:aa:f8:9e:db:76:d7:fe:a0:c0:52:
         04:e9:0c:55:6c:c5:fc:e1:48:65:91:19:be:cb:18:97:35:8b:
         8c:66:ca:20:17:e9:e7:32:a5:05:8b:60:1f:fa:2b:cf:c1:a4:
         56:73:48:e1:9a:7e:d9:8b:e3:c0:a6:85:17:9c:2a:13:52:6a:
         06:97:22:7d:d7:1f:44:81:98:6d:56:b6:66:0b:8d:f0:f5:4a:
         3f:72:cb:47:25:25:54:03:e6:19:b5:46:3a:2d:53:9c:67:01:
         4d:ce:25:4b:1b:2e:14:5d:c3:c2:bd:2c:86:dd:4c:3c:1c:4f:
         1b:c8:9c:1f:e9:83:c2:e5:31:0e:d0:cc:a4:55:eb:12:da:9b:
         aa:56:59:1c:1e:56:51:1a:ab:b2:f9:2e:ed:ec:02:98:aa:a4:
         dd:91:aa:5c:35:4a:ad:0a:99:69:5f:01:a3:e0:b8:ce:12:60:
         cd:29:23:ea:db:bb:d1:88:83:e8:d3:eb:51:ff:5a:38:7e:73:
         e9:2b:1d:04:57:d3:9f:29:76:af:33:60:23:b9:82:08:7c:e7:
         ab:90:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:41 2024 by rpki-client on console-fra.rpki-client.org