Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa
File:                     29db5299-ae20-3cbd-85ad-8843897ba2a8.roa (raw, json)
Hash identifier:          l4jxv/6rZYltQtqwr6Xpl/WNAAleChx797I1EIneOYE=
Subject key identifier:   45:75:EE:EC:60:FE:D2:C0:C0:7B:4F:7D:2F:A6:24:CC:AB:58:FB:D0
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584774FB92077158B5FCB175EF80
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     1706
IP address blocks:        192.12.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:92:07:71:58:b5:fc:b1:75:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=7c4c04fc-0267-4ad8-9d30-04050dd4d5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:9c:e2:98:8f:86:27:1a:2b:7d:f6:26:06:
                    06:2c:57:f1:f7:0b:c7:50:2d:b8:e1:23:73:72:34:
                    d6:b1:7c:07:04:6d:5f:0c:32:83:50:e0:3d:6c:0e:
                    9c:f2:39:a2:08:fd:d0:ae:95:e6:9e:04:56:92:8e:
                    8e:60:a0:3f:9b:6a:7a:bf:79:3a:25:5a:cb:2e:50:
                    c4:1f:1e:b2:18:dc:d0:89:97:5c:83:69:27:ec:79:
                    43:f3:c6:d1:3e:d8:dc:b8:ba:36:c2:00:85:d7:03:
                    5f:16:66:72:68:fd:a3:55:7a:d5:ca:24:1a:80:7a:
                    27:85:6d:a0:8c:dc:c7:5f:39:46:98:a4:8b:81:98:
                    aa:f1:90:8f:af:1a:c9:d8:da:42:66:43:61:50:2d:
                    91:3b:d9:00:d6:e3:d1:13:f2:ae:9d:4e:36:53:2c:
                    28:b8:7a:a4:0c:c3:d0:70:f6:44:d5:dc:9c:b8:3b:
                    7b:8b:66:e2:f1:6b:ff:7a:9e:d6:21:1f:40:00:8e:
                    e8:44:72:f3:d6:40:23:e9:26:d7:b4:53:ba:7c:37:
                    91:8a:b3:c3:e4:bc:4a:99:5c:5e:0d:38:d0:4a:8d:
                    88:e6:6a:f7:1a:0a:4c:63:40:61:cf:30:7f:e8:a9:
                    01:6b:9b:75:2c:15:64:a6:fb:58:f5:f8:29:ea:4d:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:EE:EC:60:FE:D2:C0:C0:7B:4F:7D:2F:A6:24:CC:AB:58:FB:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:04:31:dc:71:15:67:a0:cc:60:78:e0:ac:53:9f:ff:75:
         58:5f:1e:a6:8f:eb:4d:86:20:e7:fb:fd:54:95:f1:c5:21:47:
         11:56:a1:be:23:4a:7b:d7:9d:d8:0a:35:e6:68:47:e1:64:bf:
         6d:45:de:02:06:e5:39:93:df:60:76:c7:24:14:2c:16:6b:2f:
         34:9b:0c:10:80:06:48:73:dc:b0:8f:58:c5:06:33:51:89:87:
         41:1f:36:8d:c6:9b:f3:9f:8e:26:f3:e6:76:da:5d:e4:d9:45:
         72:bf:79:51:06:3b:41:93:63:93:55:96:bf:a4:28:cd:cf:61:
         80:00:17:2d:74:02:cd:a8:75:03:7f:9b:3d:66:a8:49:a6:72:
         e8:58:e5:38:2f:da:68:49:5f:4d:fd:b1:95:aa:08:74:f1:d2:
         ba:33:33:dc:87:3e:e9:49:b8:31:08:e0:a1:e1:5b:06:c2:d5:
         e7:84:12:b9:00:13:c2:69:73:aa:25:67:1a:52:bd:d4:b7:c1:
         19:a4:44:23:1a:a9:8f:9a:0c:0e:db:f7:29:24:77:f0:bf:e8:
         a8:43:05:11:2e:65:f4:66:2b:99:50:e6:27:c0:21:65:39:3c:
         5a:d4:ec:09:7f:48:c1:dc:12:59:a5:dd:0d:f7:ea:5c:74:64:
         62:7c:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org