Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
File:                     99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa (raw, json)
Hash identifier:          4SMbHngI61IZGoF0Fntb68VxRC23t0o2FHzIjQtKtv8=
Subject key identifier:   56:2A:68:BD:A3:92:4D:D0:15:C5:8E:D0:C6:DC:72:8B:6A:D8:75:8E
Certificate issuer:       /CN=fa73dcdd-8c93-40af-8405-b4fb0f23224b
Certificate serial:       010D0C9F432858476170E7C9B9DC584A757499C0
Authority key identifier: 86:A7:04:EA:0D:4F:45:83:9D:E5:EA:E4:75:A0:DD:FC:42:08:4C:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     20436
IP address blocks:        69.4.192.0/20 maxlen: 24
                          74.51.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:70:e7:c9:b9:dc:58:4a:75:74:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa73dcdd-8c93-40af-8405-b4fb0f23224b
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=f81d125f-b74a-43fe-aeef-0254782bf805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:a3:0e:5b:11:26:5e:a4:a9:bd:54:18:f3:
                    71:02:31:a3:42:71:6c:70:da:03:fe:96:b2:08:1a:
                    a2:30:96:43:9e:ea:96:f5:ea:6c:f7:6c:44:99:81:
                    25:6c:bf:cb:b0:11:d8:2b:2a:53:b3:92:f0:51:52:
                    3b:e0:2b:f6:0d:cd:57:80:d8:f0:83:a0:ee:03:a2:
                    e3:6f:c8:01:d9:85:5b:43:86:34:77:ea:a8:66:d6:
                    7d:54:d8:02:79:9c:5b:48:18:7d:d0:8b:83:cf:74:
                    fd:4c:89:08:09:03:51:dc:f2:fb:89:ee:d5:f9:4f:
                    ce:11:02:33:ec:7f:37:35:f4:19:ee:a3:36:0c:c8:
                    a3:f1:73:d5:7b:4a:8f:9e:0d:03:5c:dc:ca:01:ae:
                    f1:b9:f7:a2:4e:6a:b0:e4:9d:2a:84:98:6c:30:d7:
                    90:60:7e:21:78:af:90:94:83:1e:09:0e:55:6d:45:
                    6c:36:7c:0e:94:67:4b:23:8d:4c:e6:a2:a4:57:41:
                    a3:a9:e4:70:75:b7:d7:6d:16:66:4e:65:80:25:55:
                    23:a1:0e:88:93:50:7e:bc:06:36:11:4e:c1:b5:03:
                    e5:11:1f:4b:86:0d:9c:ce:e5:eb:ec:e9:9f:6d:e8:
                    2a:90:eb:59:5f:db:80:3e:50:b1:98:89:b5:c4:af:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2A:68:BD:A3:92:4D:D0:15:C5:8E:D0:C6:DC:72:8B:6A:D8:75:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A7:04:EA:0D:4F:45:83:9D:E5:EA:E4:75:A0:DD:FC:42:08:4C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.192.0/20
                  74.51.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:8f:37:0d:82:d1:67:3f:bb:62:98:d2:eb:42:bc:cd:ef:
         be:e0:ee:ee:23:8c:05:b4:23:6c:80:33:7f:f6:6c:95:e1:63:
         93:7e:c6:37:b1:7d:40:18:d3:20:d6:d5:30:74:d5:cb:42:9c:
         39:cd:b9:87:a2:93:40:3b:2a:e1:98:bc:04:c4:90:01:74:6a:
         f8:ac:50:68:9b:d8:55:b2:49:03:c5:10:10:b9:11:a5:f3:5c:
         7d:80:b4:bf:0b:ff:97:b0:68:a7:ca:56:13:a0:06:b2:f8:82:
         a5:2a:c4:de:47:37:eb:7a:5c:06:93:00:76:bd:24:7a:20:b4:
         38:05:cb:82:a6:75:fc:dd:f5:6b:29:61:ab:7c:71:41:15:f4:
         7f:e4:d9:f6:a5:72:f9:c9:45:a5:36:f4:dd:37:44:33:8a:58:
         8b:24:82:c7:f3:4e:6b:5c:fe:ca:92:87:f7:c2:92:7c:03:07:
         db:d4:2b:27:28:1a:cd:44:36:21:3a:40:66:22:d3:d2:98:e6:
         b3:b8:5e:aa:07:25:e9:4f:3a:ee:b7:b2:69:e1:67:8c:bf:0a:
         cb:25:31:09:05:49:95:c6:bf:b3:60:1b:f1:1a:02:85:64:02:
         30:a7:cd:4e:31:ce:52:ec:67:a7:ef:44:ca:e4:be:09:f4:10:
         29:b9:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:46 2024 by rpki-client on console-fra.rpki-client.org