Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa
File:                     b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa (raw, json)
Hash identifier:          9Cwxi1UQnZd8xJ1T/1tT3n9qADXzAOhHBILYfmLsqiQ=
Subject key identifier:   C2:61:32:BC:8C:09:5B:DF:6A:22:50:29:7B:25:6E:CD:F9:C7:A0:1C
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F43285847CFD4D582B9F6FAFA77DDD2C0
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        69.52.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d5:82:b9:f6:fa:fa:77:dd:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=d99ad8fc-6148-4b32-a042-1644ab818408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:6e:d4:b4:56:f1:32:84:de:94:54:48:d1:
                    1c:ff:42:8e:ca:b7:32:50:4b:25:c8:96:92:8d:ff:
                    9c:aa:af:cd:2a:ef:4f:5d:87:7f:13:b9:91:fa:16:
                    15:14:ae:47:b9:b5:7b:dc:db:02:35:22:ad:2b:ec:
                    77:44:a3:7a:11:56:a3:17:41:0c:e8:a2:7e:ca:90:
                    51:06:9d:96:8e:9a:3f:68:97:d8:05:cb:cc:a0:c4:
                    e8:a1:e3:cb:35:a3:1f:3d:4c:f7:6b:b4:29:71:61:
                    62:90:fd:55:24:ef:97:31:c3:e8:72:64:9d:ed:f2:
                    40:3c:10:62:8f:23:47:5d:a8:51:fb:09:f1:b4:19:
                    fa:98:54:ce:ef:a8:c3:ca:6b:5e:8e:32:b5:9d:3c:
                    d4:94:c5:e6:4b:23:18:6c:03:9d:60:4e:67:de:f1:
                    c4:d5:6d:63:23:8a:16:23:d6:d8:93:b7:14:ae:5c:
                    ee:02:ef:3a:bf:11:94:a0:74:6f:df:1a:84:81:1a:
                    c0:c1:a0:01:b4:7a:b3:54:3d:da:04:3b:b2:70:1a:
                    01:86:92:17:63:11:87:58:e1:75:e4:0b:61:ba:b0:
                    a9:ab:42:98:3e:8e:97:11:08:8b:9b:00:de:c0:48:
                    d1:7c:b4:9f:fe:e6:bb:60:ed:04:d7:d4:32:08:ac:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:32:BC:8C:09:5B:DF:6A:22:50:29:7B:25:6E:CD:F9:C7:A0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:b6:cc:13:a0:b6:90:17:16:76:6b:28:e7:47:81:ea:d1:
         09:28:ac:49:11:3d:7e:47:c1:f2:d0:de:60:16:17:5d:49:ba:
         a7:df:92:46:3d:60:e6:03:ff:6d:8a:aa:bf:68:cb:ff:f8:7c:
         dc:81:d8:fe:72:b1:39:35:e3:97:86:24:8b:40:6e:ee:e3:5c:
         07:10:c3:a0:5c:5d:c5:67:a5:a0:82:3c:bd:5b:de:cc:d8:26:
         d9:98:34:8c:ae:32:49:19:50:3a:af:e8:8e:52:71:cc:16:9c:
         11:a8:33:ed:5f:46:a3:47:e2:7c:f4:19:11:46:d0:44:64:44:
         7f:76:00:35:7e:ba:a3:ab:69:19:5e:61:9c:e5:f9:0c:4e:ac:
         b3:5b:c5:07:96:3c:23:c0:20:29:8f:04:04:db:76:85:8c:f8:
         ae:40:85:20:7f:fc:e4:5e:57:b7:ac:e9:db:48:34:81:01:e0:
         cb:9a:2b:cd:f9:ab:f8:7b:d3:40:25:1b:0c:96:57:36:0c:dc:
         8d:9e:b7:c9:30:41:e2:82:b1:f4:8f:28:6e:91:0d:90:f6:2d:
         50:46:7a:d4:69:b9:e1:f1:ed:8f:94:9b:fb:70:d6:50:5b:cc:
         49:51:ac:bc:2a:33:64:3f:37:c8:69:2c:21:12:cc:f5:b6:20:
         92:5f:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:33 2024 by rpki-client on console-fra.rpki-client.org