Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/608cae8c-13d9-3110-b8d8-3db08c5e256a.roa
File:                     608cae8c-13d9-3110-b8d8-3db08c5e256a.roa (raw, json)
Hash identifier:          +97gFwnbTOZExJXkCV9tlnrzrMo3hPe2t9pRD+BTs8A=
Subject key identifier:   15:A4:3C:FB:27:6B:EA:8C:3E:DA:15:3C:6E:06:F2:4C:72:04:84:F0
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584734C8856B7E994284E931ED40
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/608cae8c-13d9-3110-b8d8-3db08c5e256a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     11273
IP address blocks:        69.51.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:85:6b:7e:99:42:84:e9:31:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=02e587d2-313b-49ed-8044-6bde0d29cada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:ee:79:c6:42:38:5a:be:e5:46:77:64:f7:
                    de:1c:97:89:de:e2:f5:92:2c:b6:53:75:20:74:c8:
                    0b:2a:a2:0c:73:a1:b1:9a:7b:3c:90:5d:ca:1d:7e:
                    19:b9:ad:33:96:ee:70:76:01:69:0e:78:b3:66:41:
                    92:59:09:dc:ec:b4:e9:01:13:7c:57:20:86:58:e9:
                    b1:82:ff:37:e8:bf:fc:2c:f2:ef:dc:28:b9:28:f6:
                    1b:36:a7:80:21:1f:0b:28:3c:b8:16:15:96:7e:4b:
                    3a:21:21:9e:7e:d5:ab:a9:c7:0a:3b:b3:58:e3:76:
                    b1:f3:aa:da:3b:0f:ae:be:56:ea:95:c3:a2:e4:2b:
                    43:40:86:47:91:fa:db:d5:aa:77:ba:33:71:dc:c6:
                    05:98:d3:3b:55:43:43:da:94:e9:06:6b:a2:63:a0:
                    8b:03:f4:a3:ec:3b:b3:92:6f:77:02:c5:24:eb:ab:
                    91:7a:78:11:d4:18:a1:97:35:06:7a:88:49:25:7d:
                    eb:1f:a5:a2:36:65:d2:35:3b:16:d1:3c:0e:d4:fe:
                    28:46:1b:e4:18:aa:7a:d9:2f:53:b9:41:ae:df:00:
                    19:88:c4:69:f7:36:43:97:00:f5:70:ff:ad:32:70:
                    6d:7d:23:05:77:0f:75:f0:42:cd:13:83:9b:7a:f9:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A4:3C:FB:27:6B:EA:8C:3E:DA:15:3C:6E:06:F2:4C:72:04:84:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/608cae8c-13d9-3110-b8d8-3db08c5e256a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:dc:4c:72:05:85:e7:7b:e1:e6:50:41:7a:a8:6e:52:25:65:
         9d:46:b1:75:b4:30:b1:70:4d:50:dc:c9:61:57:63:e2:ee:3f:
         3b:29:6d:e1:14:64:d6:ee:f0:68:fa:b3:e3:8b:75:40:71:3b:
         94:ca:9e:51:2c:ce:93:55:70:0c:79:3d:99:a9:db:2e:e0:a1:
         06:ad:11:ed:8e:ed:66:86:39:28:e0:fb:c1:18:17:c6:dd:1f:
         9b:cd:55:99:59:cf:3b:9a:97:a6:1d:25:dc:85:8f:7e:be:e0:
         0c:d0:f4:c2:aa:e0:0f:1c:0a:ad:ad:e5:63:cd:2c:06:a2:57:
         33:a4:b3:da:4d:88:e6:bc:e8:e3:31:b0:70:cf:40:77:5d:de:
         96:06:64:07:d1:e5:b7:a7:87:0c:d8:e4:37:9b:ac:31:11:c5:
         16:32:bd:8b:e8:7a:20:a6:d2:0c:45:46:a7:04:64:44:bf:ce:
         e3:c9:c7:88:3f:dd:a9:22:e3:d5:d2:9b:32:3b:54:87:d2:e1:
         85:02:e2:d0:d2:01:c7:a0:48:8b:cc:66:49:ee:98:a9:21:0a:
         a6:89:c3:11:2f:6a:96:31:95:f9:a6:0a:e2:0a:6f:32:bd:ac:
         03:a0:1f:83:4d:79:3b:c6:05:55:93:a6:0f:fe:9f:d2:68:f5:
         18:5c:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:02 2024 by rpki-client on console-ams.rpki-client.org