Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
File:                     c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa (raw, json)
Hash identifier:          k0xtlIs+ID+9EPIRmfMBNMvfjH6EG+njSJODUQG8aUs=
Subject key identifier:   0A:BF:62:5A:60:68:0D:EF:CF:D0:8C:58:90:FD:DF:A9:66:7D:7C:3E
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584774FB91E54704AA5F78892580
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     1706
IP address blocks:        128.196.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:91:e5:47:04:aa:5f:78:89:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=8265e0cb-1c4b-4f21-a29a-c4e1acbdd063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:27:de:46:47:60:84:8e:f6:4d:c7:34:12:
                    f3:b4:86:ab:e9:24:c9:76:5d:a4:ed:25:0a:a7:13:
                    cd:5f:b3:d6:f3:6b:9a:f3:2d:e2:33:a9:92:21:92:
                    03:94:65:7e:23:97:ab:bd:53:e9:72:73:d9:bc:f1:
                    de:29:d8:44:55:65:f4:d2:1c:ca:12:ea:7c:ad:29:
                    f5:db:ab:9f:7a:ca:36:f4:1d:e3:1d:d8:c7:d4:a2:
                    3f:66:83:41:ab:38:af:fe:fc:9f:45:8c:08:7f:c6:
                    14:4d:0a:23:44:5c:53:b2:fb:64:2f:ec:b2:70:37:
                    6c:f2:bc:5f:4c:d2:fa:70:1b:a1:f1:9a:41:bc:8e:
                    9a:13:e1:5f:2c:3a:28:33:50:c8:15:7e:0d:b9:05:
                    27:4b:9f:b3:7f:bd:d1:5e:8e:5b:0d:79:e4:2d:76:
                    a2:49:56:0b:a7:a5:8b:4e:8a:19:8d:15:81:a0:de:
                    22:25:cf:36:44:40:d3:7d:d6:f4:e4:f0:b7:c9:41:
                    3f:ee:0d:38:33:6b:5f:6a:3b:7c:e5:a1:b6:a9:3b:
                    9d:a9:a9:84:49:2e:fd:bd:58:45:3d:1e:51:da:bb:
                    bb:5e:88:b6:ca:58:9e:99:d5:96:41:f9:06:7c:17:
                    8d:b3:15:b5:b5:f6:0f:77:0c:5d:96:7a:5f:3f:dc:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:62:5A:60:68:0D:EF:CF:D0:8C:58:90:FD:DF:A9:66:7D:7C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:00:89:df:72:1f:f1:77:3e:e0:60:0a:c1:00:32:0b:0e:b5:
         22:4d:16:bb:74:ec:f0:7b:df:5e:84:a0:03:7f:b2:d5:a4:79:
         2b:55:47:5f:e4:80:99:0b:39:35:4c:95:d6:eb:25:0e:3e:15:
         0d:59:23:4d:7b:35:e7:ab:73:a4:d9:48:7d:7e:2f:da:3d:ec:
         90:6a:14:e7:ea:ba:9c:64:ea:f4:4a:8d:7a:67:ca:f9:9b:31:
         75:10:c2:f1:ae:ec:e7:8d:82:14:cc:b9:b6:53:1f:ac:51:b9:
         46:46:11:9f:8b:03:43:ca:24:01:f0:2e:82:78:95:fd:8d:29:
         99:f5:18:eb:75:e0:ff:e1:1c:01:8e:73:96:b5:0d:9c:1c:76:
         50:36:bc:75:37:99:01:13:63:27:3e:63:e8:2d:cc:4b:9b:89:
         fd:67:85:40:df:15:55:e1:f4:f0:06:71:06:af:52:af:67:59:
         2c:5c:26:95:ef:ec:cd:5f:0e:03:98:ba:a5:45:17:bf:b6:b8:
         bd:e8:41:d7:05:92:ed:ce:51:05:f6:97:e3:dc:9c:70:2a:df:
         e3:c3:9d:1d:86:93:14:8c:70:bb:92:f1:cd:54:f3:e5:6d:c2:
         a2:79:b1:23:1a:e8:40:73:3c:c1:20:ba:8b:23:ec:82:ac:d7:
         cb:ad:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:08:13 2024 by rpki-client on console-fra.rpki-client.org