Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/f2a6fbb5-8a22-38be-843b-fe85c378f989.roa
File:                     f2a6fbb5-8a22-38be-843b-fe85c378f989.roa (raw, json)
Hash identifier:          IvJ4bmNiXhIZmBsZg8BN/OR/HqYF7Xjlchbz+n96F9o=
Subject key identifier:   D5:73:A2:26:CB:97:93:59:B4:FD:CB:14:70:20:94:6B:44:1E:EE:59
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584582A898C2F642A51DA6D34B80
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/f2a6fbb5-8a22-38be-843b-fe85c378f989.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     11260
IP address blocks:        24.215.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:98:c2:f6:42:a5:1d:a6:d3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=01eb1510-83ba-4f93-ae89-ac752633acf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:b5:76:9f:ac:e4:07:1c:3e:dd:4c:5b:a2:
                    2e:c0:79:da:29:37:b4:47:0c:c7:13:5f:9a:de:75:
                    a8:24:27:78:11:18:43:74:40:6c:9c:48:3c:bc:0f:
                    2a:e2:d7:08:d7:6c:ca:46:a9:84:4b:fe:56:51:0b:
                    9b:04:b1:12:04:8e:b4:26:2d:1c:8b:d4:44:d6:65:
                    a0:55:62:12:f8:d2:82:47:4e:83:32:2e:39:21:2f:
                    40:fc:cb:69:bd:fc:47:76:3e:bd:0e:e0:ed:43:16:
                    7e:b9:bc:5f:c8:5b:c9:2f:13:87:eb:1f:06:b7:38:
                    a1:2e:af:b8:af:e0:ef:5f:cf:33:9f:76:2d:d8:bb:
                    8e:d9:ea:6f:7d:db:cf:2e:bb:e0:f3:a2:47:ff:23:
                    e9:ee:7d:23:ee:aa:d6:90:72:a4:cd:97:64:20:22:
                    0d:2d:96:49:d4:4e:80:11:48:61:b7:7a:ac:d2:35:
                    ed:81:8a:5c:b1:a9:74:10:35:9f:bf:d6:6d:ee:84:
                    5c:25:c8:a6:6d:1b:8c:f8:e4:40:42:5b:9b:99:66:
                    4b:2c:a3:10:4b:b3:64:cb:0f:15:56:69:7e:e5:ea:
                    67:4b:e4:9e:aa:98:b7:2e:6a:40:ad:fe:bf:01:cd:
                    09:7f:07:c7:e4:eb:58:fa:6a:24:9a:fb:fd:96:60:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:73:A2:26:CB:97:93:59:B4:FD:CB:14:70:20:94:6B:44:1E:EE:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/f2a6fbb5-8a22-38be-843b-fe85c378f989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:60:cb:e6:c1:74:2f:fc:a1:7f:cd:0a:66:98:6d:47:ac:fb:
         2a:cd:24:4a:60:eb:c9:c9:13:d6:e6:70:ea:09:dd:44:91:8f:
         f1:02:58:7f:9d:cf:59:74:5f:45:76:a9:de:2d:49:7a:83:92:
         5e:0d:4d:04:72:4a:21:d0:dd:48:ed:16:21:c7:82:49:b9:eb:
         c3:7f:8e:04:cd:00:be:ac:4b:e3:43:ae:87:8c:e1:81:de:df:
         98:1a:26:6f:a4:fb:af:a4:58:9b:f7:49:ff:58:e9:2a:5c:f6:
         3e:2e:a1:07:99:b3:e8:7b:40:9b:9e:51:5d:8e:c4:66:9d:bd:
         70:05:6f:b3:59:81:df:a6:2b:5b:c5:39:bc:e8:eb:71:01:db:
         dc:3c:1c:02:a5:36:e8:0d:b0:1c:7e:0b:4c:e1:39:38:02:a7:
         fa:37:f1:22:6f:99:62:6f:aa:52:05:61:c2:85:e2:d9:a3:8c:
         a5:a3:c7:f5:31:76:36:93:dc:2e:57:c2:ba:8a:ad:7f:cf:5b:
         63:c4:9f:5e:17:cf:86:fd:c6:08:1f:e4:e4:ad:44:50:d5:a2:
         22:03:d1:99:ce:1f:3e:f9:95:e8:f4:e7:2b:97:93:d6:49:2c:
         63:d2:ee:fb:aa:8f:5b:16:6d:85:6e:9f:ef:b6:d2:80:13:5d:
         b3:08:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:20:23 2024 by rpki-client on console-ams.rpki-client.org