Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa
File:                     3ac777d8-9723-3223-9b37-799691f764af.roa (raw, json)
Hash identifier:          ewD4gjOovU2+6wolGlmvju3ZpHpqPdCCsSEI0bYGimE=
Subject key identifier:   3B:FD:36:DA:25:96:18:8A:7C:2B:3E:8A:79:A4:7E:8E:FC:D4:E0:B7
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584742BB4A541663E42142460980
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     22393
IP address blocks:        71.7.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:4a:54:16:63:e4:21:42:46:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=cf454f18-7f48-425c-8dba-e135c691ccfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:d0:96:95:c1:8a:9e:16:04:b8:54:1d:c4:
                    95:e5:38:cd:77:b2:61:37:d6:8d:0b:48:e7:9d:2a:
                    53:ae:a7:6f:72:88:f3:89:12:cf:00:75:72:62:8d:
                    44:0a:9d:81:38:59:6f:2a:3a:d2:f6:a6:5a:2c:06:
                    32:ab:6e:fb:4c:01:6a:d3:2a:f6:1a:45:c9:a6:0b:
                    43:78:c0:05:7a:fd:7e:8d:27:56:a5:06:24:bd:7a:
                    45:1f:9a:a2:4b:aa:4f:1c:32:4a:8f:f3:df:25:4b:
                    06:78:6c:94:aa:6b:6b:ab:de:f4:3a:d9:b1:75:a7:
                    c0:30:48:aa:56:55:b8:8b:e4:99:52:e4:97:8e:b4:
                    69:ee:ea:5d:bd:71:33:a9:06:f8:85:65:db:62:4a:
                    dd:a6:0d:04:95:03:02:47:b7:99:63:39:bc:ea:ac:
                    c2:77:90:59:e9:d4:c6:1f:09:ff:3a:c2:8f:e6:00:
                    7a:e4:3c:45:5b:3c:76:31:66:17:cd:97:59:03:4e:
                    d5:26:98:3b:56:4f:5b:18:48:71:4a:ee:1a:7e:37:
                    fe:01:5e:a1:00:d9:c5:e5:c7:60:86:4e:c9:52:95:
                    8a:dc:48:a8:8e:37:7f:b1:53:48:f6:07:1e:86:3a:
                    eb:bc:31:d4:34:ef:48:6e:71:d2:71:56:d4:1f:5c:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FD:36:DA:25:96:18:8A:7C:2B:3E:8A:79:A4:7E:8E:FC:D4:E0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:99:33:85:c5:ba:fd:94:38:0a:6d:34:87:dd:fe:d2:d5:84:
         a5:81:2f:c8:d1:bd:d9:a2:53:7a:88:e7:bb:9f:ae:cd:af:4e:
         06:59:83:3d:e6:8b:e4:83:ad:d4:90:04:68:63:9f:87:cb:ed:
         6b:dc:9e:9a:f3:3e:4e:a7:60:c6:b5:c7:ed:a5:14:da:d8:f9:
         d6:9d:38:a3:27:17:83:be:85:ce:f0:c5:4d:f8:78:bc:03:63:
         d0:88:65:1f:87:ac:9b:7f:4a:d2:7a:31:53:9a:8a:70:29:d1:
         97:8f:ee:41:e5:32:40:39:82:f3:2e:88:68:a0:d6:08:00:fd:
         51:0a:b8:05:26:c5:9f:0d:df:11:ef:8b:78:10:07:a2:a4:d2:
         39:de:62:0e:50:f4:ea:1f:f5:c2:e2:a2:93:33:65:8e:98:e7:
         3f:a4:f4:85:e0:9a:5a:9e:c2:cf:7d:fd:b7:91:ac:c0:25:e6:
         3d:66:48:50:48:4c:42:dc:50:d8:4f:00:60:df:f4:77:48:1f:
         fa:88:03:f5:81:21:77:8e:62:54:44:da:a5:84:e7:0b:0e:9b:
         06:09:7f:57:f0:26:31:31:4e:00:d2:0f:4e:81:20:7c:7f:c7:
         2b:cf:fb:b9:5c:4d:e3:b0:23:3f:15:f7:48:2b:2f:07:d8:55:
         47:83:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org