Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/cb8c4c0d-b95d-388d-928e-47e505374174.roa
File:                     cb8c4c0d-b95d-388d-928e-47e505374174.roa (raw, json)
Hash identifier:          n3cjD599zZnUeIQjIwUdog9fL6T23NHtsnPAXeDBTCY=
Subject key identifier:   66:11:98:D7:4F:46:B3:A5:22:A2:C0:A8:04:9D:C5:AA:4F:D7:D1:2A
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F4328584793B118CAD232D323DC97D580
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/cb8c4c0d-b95d-388d-928e-47e505374174.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     8075
IP address blocks:        69.52.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:18:ca:d2:32:d3:23:dc:97:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=f3c84839-eb08-471c-82ae-e35b8de06a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:ed:13:db:67:92:4c:e9:47:48:97:5b:7e:
                    e6:82:d4:d7:0b:8e:4f:fb:3b:fb:2d:77:d7:2c:f0:
                    a0:fa:61:10:06:d0:4f:63:77:04:1e:ef:bf:a3:7f:
                    86:1b:0e:72:9d:60:53:fa:db:b9:07:b8:da:30:5a:
                    b9:be:0b:b1:12:b9:27:3f:bb:fb:ef:22:9e:2b:d3:
                    17:aa:5f:52:d1:b8:e9:af:5d:64:b9:28:9e:a3:58:
                    ac:6a:ea:e9:ae:36:8c:5e:e1:5b:01:b6:dd:9c:63:
                    06:24:3b:bf:9f:6a:b7:f0:ff:ab:61:8a:36:4a:9a:
                    fe:77:77:8d:3b:1c:d8:ac:e9:92:65:23:61:57:7d:
                    fb:a8:88:8d:53:ae:c7:ee:d0:61:80:c4:3c:0b:1b:
                    f4:00:db:63:35:e9:fb:73:c6:1f:66:9b:3b:1e:95:
                    c8:f5:f7:fe:e6:42:c5:2f:e0:f9:2d:30:a7:a7:29:
                    2b:ce:c2:f0:db:86:5c:04:0e:08:c5:7c:a8:a7:35:
                    57:6d:94:09:f1:a9:49:c0:d1:96:1a:dc:06:f2:c9:
                    34:75:ac:a4:1e:22:ec:3a:d3:93:93:2c:7d:69:05:
                    a1:b1:ea:fc:9d:dc:cd:27:ea:2b:6f:86:02:98:7a:
                    1d:ec:43:ed:6c:dd:57:c6:63:d5:64:21:43:0c:b3:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:98:D7:4F:46:B3:A5:22:A2:C0:A8:04:9D:C5:AA:4F:D7:D1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/cb8c4c0d-b95d-388d-928e-47e505374174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:06:91:3c:6c:70:08:22:ad:97:83:bd:32:de:b7:d4:13:
         f6:10:5c:a2:f5:d7:05:1a:db:cf:2a:75:cc:44:60:db:d9:1b:
         bd:38:cd:d9:f7:aa:4b:4d:81:47:90:34:3c:34:36:73:72:5d:
         5a:2f:7d:2c:47:04:a4:e5:72:36:f2:9d:ff:e3:95:29:b0:68:
         09:7e:38:03:78:3a:02:46:8e:79:0a:8d:bc:a1:6e:bf:7d:e3:
         8e:7d:9a:2a:0d:7a:ba:c1:b5:9c:9a:dc:11:33:4f:26:4c:ac:
         b8:71:9f:1f:67:cd:7b:aa:93:13:1c:17:b7:2a:87:0b:66:0c:
         39:f9:67:26:60:01:a7:7f:b8:92:ee:76:c2:53:0f:7f:b8:6a:
         43:c5:3b:bb:53:8b:58:98:8d:8e:58:7b:2a:d7:b6:f4:6f:de:
         4f:04:04:10:dc:18:b5:69:1c:47:95:9e:06:65:37:05:08:b6:
         87:02:b2:e1:5f:2b:f1:ba:fc:85:d7:7a:34:20:a8:4a:92:57:
         9b:a4:e3:c1:8a:8e:9f:ec:aa:44:90:b3:48:16:20:fd:bc:d4:
         c0:b7:06:38:38:32:1d:73:af:b7:95:f0:02:87:6b:38:0b:48:
         ba:8a:a7:bf:b5:4b:37:cb:e0:f5:13:66:a7:f2:37:71:82:35:
         9e:58:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:23 2024 by rpki-client on console-ams.rpki-client.org