Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82b4835c-7baf-3cec-87ed-806a96f53271.roa
File:                     82b4835c-7baf-3cec-87ed-806a96f53271.roa (raw, json)
Hash identifier:          jmYEKr23hjRIv2vl4MEBC2yTViaI+JNZ67GhgNi/1/w=
Subject key identifier:   FA:A7:6F:3E:12:B5:0B:B2:EA:1D:20:7A:3B:99:E6:55:92:A8:56:6C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584709C9FF3755AF6B4ADE1D5C80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82b4835c-7baf-3cec-87ed-806a96f53271.roa
Signing time:             Thu 29 Aug 2024 15:29:13 +0000
ROA not before:           Thu 29 Aug 2024 15:29:13 +0000
ROA not after:            Wed 27 Nov 2024 16:29:13 +0000
asID:                     27176
IP address blocks:        69.171.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:09:c9:ff:37:55:af:6b:4a:de:1d:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 29 15:29:13 2024 GMT
            Not After : Nov 27 16:29:13 2024 GMT
        Subject: CN=ba5e6869-d512-4f3f-a73d-6afabe38cda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:2f:42:1b:07:23:98:d4:0a:9f:18:9d:87:
                    8e:16:9f:c1:15:42:d4:d8:ef:c6:3f:4c:16:dd:b1:
                    2b:e0:19:9b:bf:38:68:be:f2:76:3f:19:24:73:df:
                    5a:88:19:9c:2f:92:f8:40:7b:8a:11:ab:8f:49:98:
                    61:b3:0f:ea:c7:03:3a:79:6b:3f:28:ce:aa:19:fd:
                    2b:44:04:9f:ea:e6:cf:e8:88:60:c4:77:eb:c2:49:
                    85:7e:47:80:e4:e1:7a:24:7b:f1:6b:f1:14:40:07:
                    fb:e8:1a:b3:40:c8:cd:03:99:b8:00:24:1e:ff:72:
                    fb:4e:77:78:d3:43:5d:e8:c6:1d:88:e2:2a:3b:5d:
                    fa:4a:2d:e6:a7:09:ce:83:d8:71:67:ef:7b:53:34:
                    10:66:d6:a9:97:f9:ee:63:62:20:cc:ae:8f:4c:35:
                    c7:cb:dc:06:c0:a6:bc:44:ba:59:b1:75:b2:3c:de:
                    df:2f:d4:16:98:4a:3d:8e:de:50:42:16:9f:78:bb:
                    3f:81:d1:a9:c4:81:2c:e1:3b:3c:70:a9:3a:ec:75:
                    03:b5:54:4e:b3:c8:01:9d:74:d5:33:ec:05:9f:2a:
                    3e:15:7c:b7:0e:5a:61:06:99:b1:94:be:02:8d:18:
                    67:07:6f:a3:b9:36:9d:ad:7d:73:63:4f:72:d9:b1:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:6F:3E:12:B5:0B:B2:EA:1D:20:7A:3B:99:E6:55:92:A8:56:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82b4835c-7baf-3cec-87ed-806a96f53271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:46:47:1d:64:8d:03:ce:20:a5:15:78:2b:55:b4:20:60:92:
         aa:dc:cf:a0:fc:de:0a:22:30:30:e7:40:96:b9:8f:47:e0:6f:
         55:c2:bc:b2:a6:43:9e:87:ee:65:fe:b5:bf:2d:e9:6e:4d:af:
         28:60:d8:df:fd:11:5f:02:5c:3a:db:32:aa:da:87:4c:66:d2:
         3f:d4:00:ef:11:d6:49:3a:fe:d5:01:9c:99:5e:b4:a0:f3:3e:
         07:c7:01:a6:f2:02:c8:7c:29:3c:e4:78:11:2e:71:ed:b8:21:
         a1:97:6a:16:10:eb:fb:45:7d:44:e0:41:7c:ff:6e:cc:2b:dd:
         fb:93:07:d4:23:5a:b3:2e:32:5c:ef:be:16:50:d4:1a:93:08:
         dc:b7:c3:2d:3c:6a:a1:ec:33:1e:e4:5b:f7:fa:7e:bd:a9:89:
         0e:11:82:67:ed:bc:2d:93:66:e8:7a:5c:e3:4d:d9:1c:f5:69:
         46:de:1d:a0:4d:d3:71:0d:fa:1b:19:7b:8d:bf:9a:26:6d:c5:
         96:7a:4f:54:0c:ce:0f:3c:a6:7a:19:cd:7e:4d:92:02:49:00:
         f7:f2:35:b7:aa:69:41:c0:43:bd:a9:f2:58:4d:ca:33:32:ff:
         ac:b1:21:db:23:ad:b3:91:c1:41:8f:09:56:a7:07:a1:21:bd:
         f1:f9:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:19:00 2024 by rpki-client on console-ams.rpki-client.org