Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa
File:                     4a5442e4-4342-3d66-a184-657b4ad68e47.roa (raw, json)
Hash identifier:          zbsIpyTJxxEQcLG64qSTeuTWRkFMnO6mST6XNrzCbLo=
Subject key identifier:   68:59:D2:B8:CF:DA:E4:6F:1D:E3:5B:AF:0F:06:88:9B:8C:4A:51:D3
Certificate issuer:       /CN=b69046d2-7700-4ec6-9370-cf52edb1555b
Certificate serial:       010D0C9F432858476170CACABCA829D69246A600
Authority key identifier: 39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     14267
IP address blocks:        132.253.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:ca:ca:bc:a8:29:d6:92:46:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69046d2-7700-4ec6-9370-cf52edb1555b
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=e88904bd-b3b0-4a12-ae82-4a931a37ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:0a:02:5e:80:ff:f1:f2:62:70:2d:9b:86:
                    46:a5:9d:c3:15:d1:04:66:00:62:82:81:ff:53:e7:
                    38:aa:98:99:4a:ae:25:98:34:c1:fe:a8:5a:3f:b8:
                    59:f4:05:f6:07:a9:8f:9c:4e:3c:f9:56:98:b6:a3:
                    dd:23:f3:3d:a3:3d:65:d9:89:58:a3:bd:b7:a2:df:
                    27:3f:31:88:d9:1a:bb:f7:8f:57:f9:67:b2:95:2d:
                    44:6d:ff:d0:68:53:0e:72:4b:22:b6:4c:71:16:8b:
                    2e:74:bb:5f:d8:e2:02:75:8a:d7:84:3f:62:a8:3c:
                    c4:3c:a8:43:ce:34:c3:58:3b:6a:a4:c0:fe:39:42:
                    47:0d:12:e0:e2:b5:dc:21:d6:95:3e:c4:51:0a:f1:
                    a6:fb:6c:2c:ae:3e:c7:f0:04:c1:8d:69:40:20:2f:
                    14:11:ad:bd:3a:fd:f3:80:46:26:c9:ea:0c:51:67:
                    da:3b:0c:23:a7:eb:81:da:8d:fc:d8:32:bc:bf:b4:
                    a3:94:a2:41:54:e1:85:ce:4f:d5:9c:ab:2f:6f:8d:
                    87:b9:24:b3:18:e5:b7:34:3f:76:59:87:8b:e5:9e:
                    f1:59:13:63:88:b4:3e:e6:c0:b6:2f:bc:25:65:2a:
                    ce:d7:8e:e4:a7:60:a8:6e:f3:79:00:cc:60:c1:38:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:59:D2:B8:CF:DA:E4:6F:1D:E3:5B:AF:0F:06:88:9B:8C:4A:51:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.crl

            X509v3 Authority Key Identifier:
                keyid:39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:17:fe:ff:e1:51:86:bc:e5:1a:fc:6a:81:d6:4a:3e:15:
         6d:95:71:58:51:ae:b1:92:f0:1c:2a:34:33:22:31:16:62:e4:
         dd:97:58:0f:fd:3c:e6:21:fd:9a:97:86:c0:43:04:32:0a:8b:
         98:9f:7c:e8:53:42:c1:80:d8:3a:24:dc:67:fb:9c:7d:41:eb:
         8d:81:bc:66:b5:64:4f:83:b0:ec:d6:76:62:df:2a:fa:5f:32:
         88:98:a0:cc:b9:1f:a8:bd:df:ba:b9:16:0c:e3:dd:ab:6e:95:
         09:83:d2:58:94:e2:a5:0e:2d:48:f2:4a:5e:9d:96:ef:a8:88:
         3a:51:51:2b:97:95:71:cb:76:56:30:78:69:6f:17:eb:4b:92:
         0f:14:4b:0f:18:7d:18:fe:53:fd:d8:62:a1:5e:02:11:4d:e2:
         b1:6d:a8:e9:e2:8b:7f:cf:8b:78:4f:2f:a7:d8:f0:25:75:0d:
         d0:28:3e:7c:ac:a6:0c:49:c8:c7:f1:57:7d:3d:3b:91:72:d1:
         7d:24:cf:6d:fb:f9:ff:17:f5:a9:8e:13:ed:de:63:91:d0:f6:
         55:dc:4a:e9:24:a5:d3:5c:5d:48:06:77:56:fd:34:a6:e5:1a:
         fd:93:d7:99:e8:68:3c:a1:6b:d0:eb:d2:8e:b5:ec:93:23:4c:
         68:4d:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org