Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/86db4020-aae2-3794-a2ed-02e6f659b0fc.roa
File:                     86db4020-aae2-3794-a2ed-02e6f659b0fc.roa (raw, json)
Hash identifier:          TW2re3bkhbl5KUGE0A74/APFTXY/GvW7/tvxVj1F5+g=
Subject key identifier:   C8:F1:68:5F:F5:00:8B:C5:3B:68:81:F9:24:61:04:D5:47:A4:37:7E
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F43285845549821C12F1D117F4AD0CB00
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/86db4020-aae2-3794-a2ed-02e6f659b0fc.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        69.52.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:21:c1:2f:1d:11:7f:4a:d0:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=8a79dd51-2a21-4106-87eb-3560a33f5755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:d7:de:92:7b:cc:ab:80:d4:95:22:d0:f5:
                    48:0f:ba:15:3c:00:a0:50:13:e1:23:dc:ab:f9:ef:
                    7f:2b:fd:7d:d8:b2:63:9a:0e:46:a5:37:bc:7a:1d:
                    59:29:7e:79:6f:e3:4f:57:fe:3b:b2:6f:a6:b2:6b:
                    fc:95:39:2f:0c:44:5d:62:ae:f7:ae:54:da:40:8e:
                    19:df:60:57:0c:d7:b2:fc:bf:e0:99:d3:28:5c:cf:
                    b6:8f:c1:75:22:a7:09:cd:32:1e:61:06:d1:93:b0:
                    92:88:34:6c:32:f2:78:88:a1:5c:69:dc:81:0d:cb:
                    11:4a:88:8e:86:a0:a2:44:1d:3b:65:3e:a5:b5:e0:
                    1d:ea:89:da:16:dc:50:a1:e2:2d:10:9d:cb:9b:60:
                    71:a9:1b:55:0f:27:6f:19:5e:81:38:46:e3:c0:2c:
                    27:ea:c3:b8:51:57:e4:73:45:a1:d1:75:f1:2f:10:
                    dd:c3:ff:06:f2:8e:93:f5:23:47:66:3b:6d:18:7f:
                    dd:13:5d:84:bd:ba:d3:a3:a7:01:55:b5:7d:03:36:
                    30:b3:7b:ad:38:f0:b9:2c:07:6d:d0:5d:86:69:85:
                    cc:59:39:d8:9c:b4:23:b6:fd:85:bb:b0:32:75:f9:
                    9d:a8:77:fc:4a:ca:cb:76:4b:ec:e5:6a:aa:2c:80:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F1:68:5F:F5:00:8B:C5:3B:68:81:F9:24:61:04:D5:47:A4:37:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/86db4020-aae2-3794-a2ed-02e6f659b0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3b:7c:c1:62:50:03:d7:75:01:12:2c:89:51:73:23:5c:9b:
         01:b2:89:50:80:14:38:65:d5:8c:35:ac:0b:10:de:75:d1:36:
         f4:7c:42:67:30:20:cf:4a:19:3f:05:48:d5:cf:16:11:6e:23:
         78:d0:9f:0e:6c:10:a7:c3:06:69:be:b2:f7:9d:df:76:5f:f5:
         d6:ea:aa:e6:7c:c8:f4:dd:6f:d1:4a:54:4b:80:d2:f0:b7:20:
         0e:83:3e:f8:27:b4:37:a4:ba:ac:13:96:5b:73:51:4b:56:67:
         76:26:8d:f5:5d:58:2f:8f:e7:bb:14:f8:54:96:3f:18:42:ab:
         e5:c2:a7:4e:b4:42:0e:a4:44:78:bc:ec:aa:67:c1:a8:dd:b0:
         21:4a:3d:d3:d0:8e:7d:c1:16:e2:c4:9e:b0:21:94:fb:50:c0:
         a6:f4:6d:02:00:b6:18:8e:08:a2:79:69:3f:cc:fe:e7:8a:38:
         7b:ea:22:dd:1b:39:71:0b:ef:29:7b:f9:a0:41:6c:3f:f4:c3:
         94:78:ae:6f:22:2a:86:3b:50:2f:16:eb:be:b6:7c:31:1b:af:
         fe:a7:3e:6c:cb:aa:fe:0e:2e:e0:43:a1:95:c1:60:2a:aa:98:
         9d:38:2b:b0:de:90:13:e0:e3:fc:82:de:e9:9e:7b:dd:66:c6:
         09:28:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:19 2024 by rpki-client on console-ams.rpki-client.org