Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/0dc7c05e-58bd-33c3-ab60-3f78c718f0e9.roa
File:                     0dc7c05e-58bd-33c3-ab60-3f78c718f0e9.roa (raw, json)
Hash identifier:          2dfCsV+G5NhgTZBI8GTxXDNbm1OK8CVLzvqaoERNdT8=
Subject key identifier:   EE:BF:8B:E6:2B:1F:4F:77:31:58:98:35:72:54:EE:FC:85:55:9B:B5
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F43285847E78F5FFA3D1F5E46B5ED7A1A
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/0dc7c05e-58bd-33c3-ab60-3f78c718f0e9.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     14618
IP address blocks:        69.52.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5f:fa:3d:1f:5e:46:b5:ed:7a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=755b48b1-c36f-4700-b2e8-d68cf3bd0de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:fb:f9:f0:d7:7e:bc:5d:d3:7c:1b:b3:4a:
                    cc:c2:a3:bc:18:da:4c:c1:c0:af:93:66:46:dc:1d:
                    39:69:7a:c6:31:d5:f3:35:0c:ab:bc:96:69:21:4b:
                    33:f8:97:cd:17:cf:19:5a:63:f0:50:29:e7:06:07:
                    7c:7b:12:4c:76:75:78:56:a7:76:09:b2:68:11:92:
                    2c:47:3b:08:81:06:aa:2e:bd:fe:5e:00:69:cc:7b:
                    14:08:32:05:00:b3:4d:87:39:c4:5a:52:5d:c6:37:
                    a6:6b:1c:f7:b3:34:ff:0c:a6:a0:7b:c0:57:49:b4:
                    f6:bf:3a:76:32:65:b5:45:10:6a:46:8e:d4:3c:b5:
                    fa:5d:66:40:7b:16:f3:c4:c7:05:f6:7c:ee:a7:d5:
                    0f:8c:66:bd:46:2b:ad:6d:e1:a5:21:cf:c3:f8:34:
                    9f:a2:f3:2b:bb:68:64:26:48:fe:e0:c2:c9:1e:39:
                    4f:b6:80:eb:12:43:b9:f9:14:4d:c9:7b:d8:5f:5e:
                    cb:d1:0c:65:71:1e:30:81:6a:eb:07:68:08:39:59:
                    85:54:a3:60:04:13:d4:5e:8c:c0:e2:f1:f6:9c:24:
                    45:dd:3e:89:2c:0a:82:0c:62:00:4b:9e:bd:fb:c4:
                    f7:ba:22:16:d4:a7:1c:97:0b:69:46:10:cc:06:b5:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:8B:E6:2B:1F:4F:77:31:58:98:35:72:54:EE:FC:85:55:9B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/0dc7c05e-58bd-33c3-ab60-3f78c718f0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:95:82:8b:9f:b4:18:9c:8b:ba:7d:75:9c:74:b0:15:09:
         f3:60:bc:31:93:cf:5c:7b:a4:84:bf:20:53:75:0c:d7:c7:16:
         0f:36:39:0c:90:16:58:8b:c4:4e:8b:b4:ac:03:49:4b:0d:de:
         9c:a0:c3:ac:f6:01:2b:cc:15:55:31:c3:18:20:88:e4:e5:64:
         d1:79:4b:4a:3c:94:67:a3:58:ab:0a:9a:ce:0d:86:09:29:33:
         13:15:30:cd:cd:4a:84:50:ae:25:ec:0e:1e:40:e9:5f:c0:89:
         0b:b0:80:d2:06:a6:83:59:63:f6:79:fd:fd:87:95:33:bc:e6:
         ba:27:54:04:99:8e:1d:c5:b1:54:6c:a3:84:0c:fc:20:95:c5:
         dc:d5:55:a8:d5:ba:54:d8:5e:32:73:2c:9f:a7:a6:9e:fb:cc:
         b4:58:e5:10:60:b7:d5:dd:12:27:47:35:cf:db:d3:a4:b0:93:
         46:a7:9e:e1:59:de:f8:8e:a5:aa:ce:55:81:89:ee:bc:02:df:
         ac:10:64:45:b9:52:7a:31:f2:24:31:c6:4f:4d:f6:2f:97:e8:
         73:52:6b:6f:53:a0:01:36:4c:c3:8c:a9:1e:bd:0e:56:18:92:
         ad:2f:e2:c5:d6:01:21:75:9c:65:f3:0d:ed:7b:cc:92:c3:b1:
         0f:51:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:33 2024 by rpki-client on console-fra.rpki-client.org