Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa
File:                     a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa (raw, json)
Hash identifier:          yVbU/fjLwehMyGYfCGsyaH491YXaZZzOYH94kpXz5jA=
Subject key identifier:   2E:6B:12:8E:49:BB:4F:EC:F4:CD:59:CD:C0:5F:DD:A9:66:AA:07:23
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584505257670991D36270C8F4A00
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        69.7.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:76:70:99:1d:36:27:0c:8f:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=4fa3b229-0cae-4c47-8c4c-c45cfe15c2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:ce:b2:be:51:58:5e:86:4f:ec:d9:d9:02:
                    15:2b:7d:32:38:00:fa:a5:e9:52:e8:c7:97:48:10:
                    1d:a2:01:a3:59:66:10:a3:37:ef:a9:bd:8e:f7:87:
                    c2:cb:03:1f:35:15:db:e8:c0:81:a7:bc:59:37:99:
                    d3:c8:5b:0c:ab:5f:98:e2:04:b1:ff:74:52:11:2a:
                    de:50:e1:6c:15:b4:5f:6a:79:68:bb:7a:c8:02:3b:
                    f9:4f:79:35:09:8e:2c:9f:6e:01:c9:3d:e5:bc:4a:
                    8d:71:08:d0:a4:dc:94:17:3b:17:8d:b3:99:12:ed:
                    aa:53:ad:7a:f1:e9:3d:0f:f7:1d:74:de:3d:55:df:
                    78:a8:ec:c3:57:d6:11:27:8a:f5:a5:24:ae:e0:ae:
                    45:e2:fb:40:ec:17:8a:8a:be:ef:05:c0:c3:36:e7:
                    fc:36:ca:55:23:32:86:1f:d8:83:59:13:4b:d1:40:
                    9a:1d:b4:3c:15:d6:25:fb:5e:6f:77:e7:52:08:f9:
                    55:c8:c2:25:f9:7e:b8:70:af:a3:21:96:ed:21:fa:
                    69:73:87:92:19:62:48:06:30:1a:21:6c:7f:7c:f9:
                    02:2a:a0:82:34:a3:0a:39:7f:cd:68:09:25:f2:9f:
                    1b:2a:d6:2f:a0:b0:31:a7:a9:f6:cc:f1:c3:f1:43:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:12:8E:49:BB:4F:EC:F4:CD:59:CD:C0:5F:DD:A9:66:AA:07:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:38:ba:63:ab:2e:82:5f:ed:a9:88:63:e5:a5:ae:fd:08:ed:
         c1:4d:7a:0e:96:18:c4:18:c4:70:e9:8f:1c:a9:0d:32:1a:c3:
         63:2d:c2:00:69:ee:97:12:b3:05:31:1e:32:84:3f:b3:62:f8:
         97:c1:b2:49:b1:5b:7e:ec:a9:7c:58:68:26:dc:60:e8:72:11:
         3c:92:bf:1b:53:aa:9c:c0:f6:e0:94:50:85:a2:d0:21:66:8c:
         91:2a:99:0a:d0:ca:05:4d:e2:c1:99:bb:51:d2:79:0f:01:d8:
         fb:08:29:f9:87:a3:5a:c2:de:b4:4f:19:f4:d5:33:93:be:fc:
         ec:23:65:f6:92:ab:26:9d:75:10:db:40:b3:e5:d2:38:43:42:
         c6:10:25:16:60:ee:ff:27:7a:55:5b:63:3d:6c:d7:7f:7f:ab:
         bc:58:a2:17:80:57:96:79:1a:b0:9c:84:f5:a3:92:8a:98:c7:
         8f:cd:56:9d:e4:a2:d4:f3:af:9e:34:61:3c:cb:59:18:ed:55:
         6e:c8:91:4f:1b:ba:36:b4:98:66:d5:4f:60:08:14:c6:24:cf:
         65:a1:88:49:63:5b:02:08:72:92:62:10:d2:69:a9:67:46:d7:
         81:a0:5c:76:d4:3c:ae:c6:e5:ae:31:54:22:a8:a5:ba:0d:82:
         0a:f3:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:32:33 2024 by rpki-client on console-fra.rpki-client.org