Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa
File:                     5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa (raw, json)
Hash identifier:          e76M2gT9AhymrY4vrv4PsBDtpMhH7Put9vYLL95Wgyo=
Subject key identifier:   78:A3:D9:CC:AB:23:F8:39:E1:38:A9:21:BF:5E:AE:3C:9F:E1:21:33
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584742BB4AD404067156934B6C80
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     11260
IP address blocks:        199.255.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:4a:d4:04:06:71:56:93:4b:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=c5b87875-f19c-4856-bdc1-7e64f6ab88d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:93:59:bb:b7:b3:d8:79:d3:96:36:e3:4c:
                    27:88:3d:c8:ab:67:f9:71:87:b4:a3:7e:ae:e0:df:
                    fa:26:9d:8b:2e:7b:d9:23:37:a1:a1:af:85:80:5a:
                    e8:32:99:98:cc:be:1e:fb:fa:07:c9:07:68:b6:7f:
                    ff:3f:bc:ee:50:f7:63:16:1e:46:04:bf:80:72:a8:
                    92:d3:cd:9e:a4:c8:06:78:91:7e:6d:ba:3b:e3:70:
                    bd:eb:01:c8:11:ac:8c:01:a4:e4:a3:03:fa:76:ee:
                    73:a0:06:a2:df:34:a3:2b:33:9a:11:1d:86:3d:ed:
                    0e:23:1e:9f:d8:17:9d:06:ce:06:6a:b2:a8:20:0d:
                    0d:d9:1b:9c:8d:dd:6b:e7:bb:2b:37:64:93:4e:51:
                    10:fe:7a:64:dd:d4:e3:9c:eb:3a:1d:d6:9d:8b:14:
                    0c:16:41:0b:e9:5a:e3:1b:5c:38:9a:28:d2:30:f5:
                    7a:2f:fa:ef:48:0e:4b:48:49:47:4c:f4:30:a5:96:
                    1e:d3:14:a8:63:fd:1d:7e:56:29:80:a6:9b:37:dc:
                    83:63:c3:b9:62:c4:68:54:e6:96:10:46:71:48:44:
                    f9:e0:1f:88:df:42:5d:e8:c1:0f:e0:2d:49:ff:b7:
                    4d:81:72:06:b0:f5:48:fb:04:78:a1:50:24:cc:f1:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:D9:CC:AB:23:F8:39:E1:38:A9:21:BF:5E:AE:3C:9F:E1:21:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:50:e8:c9:81:d0:01:03:47:f9:2a:50:d4:b6:c1:21:90:
         3f:a7:4f:9e:b5:66:69:20:c8:f2:18:d6:87:12:84:a2:fd:b3:
         1d:31:64:fa:bc:b3:8b:dd:ed:d7:bb:fb:c9:9d:c3:c9:eb:3a:
         cb:27:92:f1:23:64:38:dc:4c:a5:d2:3b:d9:d0:06:bd:02:a5:
         68:38:22:63:cc:b1:ba:d1:52:bf:18:46:13:a0:6d:75:33:a4:
         27:d8:d8:09:28:6a:65:4c:19:33:17:6b:26:f8:9e:b5:eb:fc:
         53:be:18:8b:a7:76:a5:81:c2:98:88:b8:73:dd:99:89:e3:d6:
         1c:89:55:17:48:3a:f6:7e:c3:c0:20:df:a4:ee:39:bc:b6:90:
         e9:98:67:e3:d9:c3:d8:3c:bc:ac:54:96:b7:50:71:81:8d:3c:
         73:94:6e:45:d9:88:eb:68:cd:44:24:f6:9e:c5:ae:05:3e:18:
         c2:80:fa:64:92:b1:ca:04:c8:7f:29:bb:4e:58:45:5f:9a:ac:
         a1:a6:62:a8:65:e0:e5:10:7f:62:67:7a:0e:4f:2a:24:73:3b:
         80:2b:45:51:df:15:89:37:ed:2a:a5:d0:c7:7e:98:f1:cf:a7:
         1b:3a:20:c0:57:60:40:cb:1e:34:fd:ef:22:9d:0d:54:58:a9:
         0a:b1:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:27 2024 by rpki-client on console-ams.rpki-client.org