Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9ed42023-a7b6-3499-aaa3-40a56948e4cf.roa
File:                     9ed42023-a7b6-3499-aaa3-40a56948e4cf.roa (raw, json)
Hash identifier:          lXIGB1wTVmhZkc7ZfwrWvNPbDpTvENIjCio6nRmqryc=
Subject key identifier:   17:2D:7D:01:E5:22:FF:35:CC:D4:96:23:1B:83:93:46:DF:FA:2E:6F
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858459368C82BDA5363CF2FD21100
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9ed42023-a7b6-3499-aaa3-40a56948e4cf.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     29949
IP address blocks:        69.27.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c8:2b:da:53:63:cf:2f:d2:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=943c57aa-f53e-49d7-a49e-6b21f69e891b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:5f:b2:b2:78:36:25:2b:fb:cb:19:f0:88:
                    30:d5:48:b7:b7:f7:3f:0b:9a:d7:2f:f0:a2:4c:f5:
                    31:5b:3c:2b:ff:d1:9b:a6:a9:8f:03:f8:3a:c7:e0:
                    8c:01:0f:2c:e6:50:c9:1d:2a:37:3f:73:a7:77:2f:
                    24:db:f3:13:02:43:04:65:a8:a8:a8:8b:d4:86:25:
                    40:25:c6:29:71:86:9c:47:84:9a:e5:55:b1:d0:48:
                    27:12:3a:db:4e:a9:55:e3:8d:7e:98:3e:e9:36:e1:
                    e7:54:24:4a:85:18:91:c1:da:72:7a:37:fa:ca:d2:
                    de:ae:db:d0:b1:cf:2b:b8:da:bd:3d:d3:85:e7:24:
                    b9:dc:62:eb:dc:ec:ad:c7:c1:50:5c:be:0b:0c:82:
                    ae:53:be:f9:9a:66:ee:90:87:e1:4d:dd:5b:78:ed:
                    25:14:99:bc:d8:6b:1a:73:19:28:48:44:26:87:96:
                    30:9f:ef:14:28:80:91:ec:3d:b4:0d:a7:23:21:a3:
                    f4:c6:9e:89:02:7e:dd:3e:72:9a:d3:9e:cb:55:7c:
                    74:67:b2:fd:82:4c:e7:4b:55:05:eb:99:d4:8d:b3:
                    ac:8b:fd:21:63:8f:70:1b:f2:7a:eb:ed:e7:b3:bf:
                    53:9d:97:95:9e:06:07:59:aa:be:57:e8:f4:8b:34:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:7D:01:E5:22:FF:35:CC:D4:96:23:1B:83:93:46:DF:FA:2E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9ed42023-a7b6-3499-aaa3-40a56948e4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.27.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:00:94:c8:15:1b:5f:fc:db:a2:8b:68:24:d3:6e:56:ac:69:
         f4:79:80:54:af:da:3c:72:a1:57:c3:e1:77:61:f2:8d:03:35:
         e3:53:1c:91:c7:9b:a0:5b:6b:b1:8d:fb:c4:88:fe:bb:90:51:
         69:ad:61:9b:73:75:9f:d5:4a:e9:b9:52:ad:db:5c:63:d9:53:
         d7:0a:e7:39:50:b3:8e:54:50:58:7c:3a:9a:aa:72:a0:41:0c:
         93:17:4e:c3:df:c9:0b:cf:97:18:b8:98:4b:8a:11:4f:46:7a:
         24:86:62:70:cf:e4:59:a8:75:ab:59:11:1f:18:58:65:38:13:
         84:cf:d0:03:3b:f2:c4:a8:33:27:e7:d6:f6:7a:37:42:20:a6:
         89:25:c5:97:2a:48:61:07:f1:82:9e:38:48:b4:a5:95:55:84:
         e8:99:c9:83:b1:75:84:c6:34:e0:b4:f1:46:a6:1e:33:bc:ba:
         b6:8d:38:ed:4a:c4:33:71:79:dd:be:b9:35:32:85:16:b9:4c:
         ba:1d:05:a7:c8:fb:7d:da:51:6f:67:a3:3b:a0:2d:b9:20:a0:
         9f:3c:a2:d7:73:c5:25:01:78:20:2c:98:54:8a:2d:81:21:9a:
         29:19:41:a1:58:9e:5d:ee:9b:6a:c4:47:f9:65:fb:0f:0f:b2:
         72:c3:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:01:50 2024 by rpki-client on console-ams.rpki-client.org