Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa
File:                     d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa (raw, json)
Hash identifier:          N6DP+WWTefvayOpWmk7MSTAyuEjef/6O+WXlgQw2/gA=
Subject key identifier:   EA:49:36:31:1F:59:D7:1F:E1:37:D1:09:98:40:99:63:86:0F:F9:FC
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285844CEB51381C326A19E2CE58200
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa
Signing time:             Wed 07 Feb 2024 02:00:24 +0000
ROA not before:           Wed 07 Feb 2024 02:00:24 +0000
ROA not after:            Tue 07 May 2024 01:00:24 +0000
asID:                     21859
IP address blocks:        128.14.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ce:b5:13:81:c3:26:a1:9e:2c:e5:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb  7 02:00:24 2024 GMT
            Not After : May  7 01:00:24 2024 GMT
        Subject: CN=84abdab9-0410-496d-a5d0-1ebd9a6e6a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:2a:c0:f3:4f:88:c9:fb:f5:10:48:03:01:
                    90:43:4c:3f:19:6d:6c:40:a6:27:3c:f5:d8:54:b0:
                    11:84:a9:ae:d2:23:47:18:b6:38:9d:35:6d:93:13:
                    72:e4:3c:96:33:b5:9e:a2:35:8b:f8:74:c5:54:78:
                    21:5e:a2:65:82:fb:05:0a:61:32:e8:25:0c:af:74:
                    1c:e8:58:b3:f4:f4:c8:34:3f:73:aa:d9:7d:92:ec:
                    52:26:65:c7:9c:13:f1:41:29:64:37:1e:8c:b0:75:
                    50:c2:16:0c:ef:af:cc:e5:93:20:56:c2:92:9c:76:
                    1f:b0:25:c6:31:8b:1e:31:66:6d:49:73:06:12:69:
                    b8:d4:12:20:af:4f:60:0f:a6:4b:54:55:ab:ce:b6:
                    b0:05:b4:95:d4:b9:cf:67:f1:a6:00:5a:ad:4e:c8:
                    29:87:c3:da:a1:ae:e7:54:12:c6:71:e3:06:e7:4b:
                    a4:f5:2d:89:d1:1f:9f:a4:a9:c8:39:1e:ea:32:54:
                    96:d3:ee:ac:52:aa:b0:98:af:d1:fc:f6:ae:47:5b:
                    6c:0f:f7:0a:22:38:54:d1:17:63:8e:63:d6:d9:56:
                    2d:6e:33:70:95:4f:e2:59:8b:7f:3d:9d:c9:f1:39:
                    bb:ac:75:d5:fa:9b:59:ab:64:89:a0:6b:82:3e:cc:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:49:36:31:1F:59:D7:1F:E1:37:D1:09:98:40:99:63:86:0F:F9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:39:91:97:59:82:de:56:f7:da:66:6e:fb:54:a1:cf:e5:d8:
         6a:28:2f:8d:10:15:60:b7:0b:9c:f6:c4:82:a5:75:ee:4c:c2:
         fd:c9:9e:94:5a:33:76:c8:55:56:21:e1:00:6d:6e:9d:dc:bc:
         9e:af:9f:ec:20:e9:8a:18:8f:6a:de:6c:ee:3e:7f:52:1d:8d:
         e3:96:38:57:42:67:ad:31:32:8d:a3:ff:6c:42:fc:56:a6:63:
         40:f9:92:b0:e1:bd:2c:e0:99:4f:14:d4:4b:8d:e3:fe:c5:db:
         eb:8d:37:a0:30:64:7a:b1:0a:13:e0:1b:18:db:66:3c:ed:55:
         f7:08:1b:e1:8c:10:e1:cb:44:c3:bd:3b:e4:96:75:1d:5b:74:
         cb:d2:56:67:74:66:4e:b0:a3:ee:d7:8b:d7:70:e7:1c:3d:a0:
         45:f1:8b:b2:cb:10:cd:37:a2:09:9c:ab:d1:cc:d6:be:54:a9:
         5d:ec:de:0d:e8:26:73:f5:8f:8b:c5:cf:b4:61:ea:e1:71:62:
         22:2a:cb:2f:95:a4:45:f9:14:dc:52:3f:a1:64:fc:28:a3:f8:
         76:50:09:28:6a:1f:ac:e2:fb:b0:bc:b2:71:b9:c5:83:14:a9:
         99:e2:9f:d4:6e:83:6c:ce:d4:8b:69:84:72:3e:2f:59:08:b6:
         a4:1d:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:31:31 2024 by rpki-client on console-fra.rpki-client.org