Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
File:                     c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa (raw, json)
Hash identifier:          yTAQCd4ii9+XwXNhl3tLYkVR0xX8D7rceMFy+7F9cSU=
Subject key identifier:   10:EB:C9:4F:BC:1E:16:B7:85:64:52:64:60:F4:35:AF:E1:47:3F:59
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584582A8994CA6D03E8743B45800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     11260
IP address blocks:        173.252.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:99:4c:a6:d0:3e:87:43:b4:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=bc6982d8-6ae8-4e28-8fb0-d5616331719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:1e:da:20:a8:29:5c:e3:60:f4:51:9a:3b:
                    9d:ab:56:bc:68:a8:1b:57:78:07:19:2d:48:7c:7b:
                    a0:a4:f3:3a:d1:36:3a:15:54:89:04:17:60:c1:da:
                    4f:68:0a:9c:76:08:76:a6:d5:e0:a4:27:03:e5:4a:
                    c0:6b:b5:9b:a1:5b:14:ee:96:1a:62:cf:66:da:2c:
                    ce:68:64:06:64:37:a7:7d:a2:7d:fa:6b:30:d6:35:
                    2b:fa:b1:91:39:7e:19:66:bc:28:9f:69:91:ee:4f:
                    0a:bb:dc:75:7b:1a:0c:58:11:c3:17:2e:0f:e1:89:
                    0e:ab:a9:0e:b9:93:93:88:28:47:91:43:a0:22:c8:
                    44:44:75:23:8f:4c:b8:89:9f:d6:17:b6:ea:76:c0:
                    e8:67:04:6c:ac:ff:39:0e:d2:a5:b5:16:7e:d6:b4:
                    2a:61:7a:29:b5:92:c3:f1:04:eb:8d:fd:bf:2c:46:
                    66:25:28:9c:e7:55:66:2a:fe:4b:f3:2c:24:40:78:
                    00:1e:07:d2:e3:dd:e7:cf:d4:be:8f:07:0f:97:d7:
                    a5:c1:a8:9c:22:14:f0:58:03:40:14:bc:14:64:8a:
                    93:57:c2:8f:07:9d:3e:1d:54:07:d1:e6:24:f8:7e:
                    ac:72:db:f3:bd:b1:54:0f:fd:bc:e3:d4:66:79:1b:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:C9:4F:BC:1E:16:B7:85:64:52:64:60:F4:35:AF:E1:47:3F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:27:dd:51:09:16:d3:7f:79:50:53:37:f3:78:dc:ad:03:
         a1:a8:81:45:d2:9a:8f:d5:40:b7:25:ff:8a:d7:a3:89:96:0e:
         84:ce:b0:15:ad:61:1a:0e:77:ea:7b:72:2f:43:60:73:11:5f:
         18:2e:58:31:df:d9:58:4c:d6:3f:c7:f1:e0:56:87:14:38:6b:
         6e:af:5c:68:f2:2a:63:74:c6:0e:b3:c1:2c:a4:3e:0e:80:f9:
         fe:f8:81:96:63:e8:91:d9:30:ef:00:c4:0a:1d:9c:bc:02:16:
         44:29:7e:1c:9c:d0:04:3d:6b:fd:5d:84:c8:5a:16:24:5e:f3:
         87:28:e0:61:c7:bd:b6:c9:37:ea:32:03:b8:1a:7a:20:c8:c2:
         69:73:a5:f2:6e:28:99:6f:06:4e:f1:d0:00:8e:03:9f:c2:81:
         4c:df:e1:18:06:bd:38:91:10:65:51:9a:05:18:3c:a6:1b:2f:
         12:71:24:58:af:23:68:4f:02:44:63:81:20:67:a6:e9:71:16:
         d8:8c:1d:06:2b:e8:7a:7a:cc:ba:43:4c:e7:ea:27:4c:76:ee:
         2f:14:6d:0e:bd:44:d4:15:18:3d:e2:fe:52:81:29:3b:69:92:
         36:57:40:6a:67:0a:1d:8b:93:31:a4:a9:62:26:85:f9:fe:b2:
         36:bb:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:14:03 2024 by rpki-client on console-ams.rpki-client.org