Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa
File:                     558b5f3a-e791-3748-9943-fce0204ed7a7.roa (raw, json)
Hash identifier:          ET8u6uj+GUC1jr3zweTyS+EAVX0x5YV/+a0WT9J/pqI=
Subject key identifier:   DD:A7:E4:8A:2B:F0:95:EC:9D:8E:EA:E8:0E:F4:ED:BD:AB:3C:D7:33
Certificate issuer:       /CN=410cdbf9-164e-4f04-8897-d002dc917140
Certificate serial:       010D0C9F43285844FF901CADD740627C26959280
Authority key identifier: 1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     393717
IP address blocks:        192.69.65.69/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:1c:ad:d7:40:62:7c:26:95:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410cdbf9-164e-4f04-8897-d002dc917140
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=52797080-1c0c-4869-b367-e0234707655c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:17:ee:52:49:be:5e:7e:f6:ae:0e:c7:a6:
                    1a:0c:b6:3a:45:88:1f:fb:a8:8d:04:9a:29:24:99:
                    9b:d2:e7:50:68:42:15:4b:e1:9d:a0:1d:6d:e8:23:
                    b4:3a:5d:37:a8:22:f2:68:b3:2f:81:9a:33:dd:2b:
                    a0:b4:e1:6b:be:70:78:54:0e:47:d6:95:fd:6d:60:
                    d3:1c:aa:93:a3:e6:7e:64:d8:c5:e4:73:47:24:ef:
                    54:ca:ef:b6:f6:7e:24:50:e2:55:70:e9:1a:56:83:
                    9b:7f:75:40:81:b0:d9:b2:35:49:64:20:29:25:b9:
                    c2:e7:51:92:34:91:4e:5a:2d:9d:16:af:a3:89:55:
                    10:42:ba:24:e5:91:75:e8:a3:6f:34:7a:39:d2:75:
                    a5:79:f3:45:bc:96:45:3b:d4:b1:01:8b:df:ea:78:
                    6f:3c:7f:11:f6:69:12:ac:a0:ff:cc:7a:6c:d7:22:
                    59:df:e6:e3:af:47:55:a7:c2:5a:eb:8c:b7:7b:0a:
                    85:ac:38:6a:b6:9c:67:4a:01:5b:48:2d:27:ea:f7:
                    e0:fe:3f:87:6e:4f:d8:3d:84:c2:f3:10:7c:3c:21:
                    64:64:cb:70:64:58:09:cf:4c:de:d2:ed:1a:d8:f0:
                    10:92:42:71:7e:78:21:77:9a:9d:2c:2f:5f:f8:43:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A7:E4:8A:2B:F0:95:EC:9D:8E:EA:E8:0E:F4:ED:BD:AB:3C:D7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl

            X509v3 Authority Key Identifier:
                keyid:1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.65.69/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:05:66:d9:a9:c8:c2:38:80:c3:e9:f5:9a:8a:0a:b9:fb:
         d6:cd:de:90:66:f5:aa:be:76:45:09:a2:53:03:1e:53:39:96:
         9c:a1:66:e1:f2:8e:17:4a:5c:c0:31:49:b7:db:b1:a3:be:60:
         eb:92:e4:33:53:ac:b3:a1:d7:67:bd:57:65:0f:dd:35:a1:fa:
         9e:08:2b:a6:23:cd:15:93:22:af:1b:ba:29:af:f9:b0:ea:34:
         d0:4b:9b:c2:d6:1d:ad:c3:d5:c3:68:18:55:f9:d2:88:db:7f:
         1d:4c:41:68:ad:7d:19:2c:5a:d8:ce:ce:7a:f9:e5:f5:c2:62:
         6b:a3:52:22:1a:a9:3d:00:9b:18:62:3c:b9:ea:76:ac:fb:5c:
         37:5c:2e:29:b2:bc:ec:44:bc:5d:4d:9f:88:df:02:11:cb:ee:
         ba:a8:e8:a5:e9:ee:c3:20:06:39:ec:95:3e:3b:e9:cd:65:2e:
         cf:fb:21:e6:b4:8f:62:cd:ba:9b:6b:f8:7f:89:00:36:8c:a4:
         1f:34:28:e2:ae:7d:25:d4:7b:67:75:dc:34:90:7b:8a:a6:78:
         39:46:24:3f:63:4d:d5:62:c7:38:b3:92:78:a4:5e:bd:07:0a:
         1e:6f:4f:45:9f:91:80:e7:32:23:00:14:b4:f8:9d:c6:05:f3:
         17:63:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:56:06 2024 by rpki-client on console-ams.rpki-client.org