Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa
File:                     453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa (raw, json)
Hash identifier:          YZRvqUagcb2qXLtUdE0+8I4VaEBtoY9GVTqGLLWtaCQ=
Subject key identifier:   19:CA:2E:EB:7A:DA:61:3C:58:99:F4:A3:2A:71:55:85:BC:F1:1C:18
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858484AAAE00AF6E415BB63ED2C80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     7018
IP address blocks:        69.58.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e0:0a:f6:e4:15:bb:63:ed:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=9d1faa02-9e6f-4c48-b4df-1d61f8b8c70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:31:c0:cf:b1:60:16:0e:37:19:cd:4b:03:
                    b9:05:e2:e3:91:91:13:27:e7:69:68:67:63:8d:a9:
                    41:79:85:32:9b:74:80:fd:81:d0:d1:b3:26:f8:1f:
                    a9:1b:1f:cf:a7:47:30:10:24:7c:09:cd:b8:fa:a2:
                    a9:87:b5:d0:47:60:1d:fe:7d:22:02:ed:66:a4:39:
                    9f:5d:35:fa:56:68:38:fd:42:bf:73:8f:93:34:37:
                    53:a6:72:4e:3a:4a:af:82:d6:8a:74:17:16:d6:f7:
                    a2:db:37:a0:8a:62:64:54:eb:eb:94:c2:42:a7:20:
                    53:30:93:da:95:38:10:a5:05:94:3c:f4:40:0b:82:
                    f6:28:8a:fb:b7:ef:78:60:48:6d:3c:e7:03:db:9c:
                    03:4e:8e:12:80:cc:74:f6:4c:a7:a1:8e:bd:9b:1f:
                    6a:c0:ea:8c:fe:92:a7:13:45:4a:62:d2:c2:5c:92:
                    d2:43:c5:d3:a3:7c:d6:95:7f:40:58:e9:31:a8:53:
                    28:a4:bd:db:5f:01:17:b9:b3:59:67:8f:7b:b4:0d:
                    b2:54:56:99:6a:42:70:e6:83:6a:5f:8a:3a:f5:75:
                    2e:8d:36:9c:a7:ff:21:12:9d:ca:8b:8b:1a:8b:61:
                    44:15:0a:68:40:e6:ff:c0:0a:0c:aa:83:15:6a:f4:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CA:2E:EB:7A:DA:61:3C:58:99:F4:A3:2A:71:55:85:BC:F1:1C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:bb:83:38:50:b0:79:32:39:ef:36:6e:95:f2:b4:d7:b0:
         aa:3b:36:73:88:01:30:66:98:0f:22:10:1e:e6:7a:a1:b7:30:
         83:de:3e:bd:8d:25:cb:ed:b8:19:c7:86:4a:52:ef:d7:8c:f5:
         12:7b:d9:43:5c:c9:c2:bc:fd:e2:f7:36:d5:fd:b8:ba:ce:5a:
         19:e8:cf:bb:3e:a0:d9:33:1e:99:56:2e:c3:f2:ad:03:4f:0b:
         1a:80:0e:b6:ae:4b:7e:78:e5:5e:c5:86:22:d4:19:b9:af:46:
         a2:2b:19:bf:fa:36:6d:23:9e:20:e0:a8:81:d4:27:67:2d:c8:
         9f:9d:30:4e:d8:c5:ee:58:89:7d:32:34:cb:30:fa:aa:04:01:
         0c:54:64:89:13:80:a1:0b:a5:93:e3:7b:f8:49:5e:81:9e:98:
         c5:d1:de:91:ef:f0:df:55:98:7f:d7:99:6e:28:a0:be:4d:3f:
         6e:ec:69:7e:dc:d3:20:72:33:4a:b3:cc:a2:fa:64:23:b4:b9:
         69:62:11:5c:28:e9:1d:be:42:67:5c:53:1e:cb:a7:67:92:a6:
         47:84:43:f2:ca:6e:f3:13:80:6a:cb:b9:05:0e:2e:c0:ab:1a:
         b4:a5:8e:a6:8b:1f:da:bc:2b:83:8d:9d:7a:5c:88:81:ac:2d:
         d2:61:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:09 2025 by rpki-client