Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa
File:                     5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa (raw, json)
Hash identifier:          gfyQqZVBktpAAornzRQDV3GRM00ivJ18mHRTVaTbxMY=
Subject key identifier:   DC:DB:B7:09:27:74:E7:B3:97:45:02:3D:56:94:58:CD:DD:68:B0:4B
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F432858474420B596B43CE8F292A3FCC0
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     13845
IP address blocks:        69.165.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b5:96:b4:3c:e8:f2:92:a3:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=285b46bb-83a2-4524-893e-e2dc856b36cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:58:57:20:85:ae:ee:3d:ae:d3:0c:e2:dc:
                    8c:3a:c1:a9:88:88:b1:58:8a:46:50:5e:4d:23:02:
                    d7:67:9f:a9:0c:2c:01:52:cf:df:f1:a4:61:bb:0c:
                    eb:ca:80:04:2d:ca:d9:14:66:58:a1:e8:ae:cb:c9:
                    70:7a:85:44:ce:2b:f7:bb:90:f7:8c:4d:65:fc:15:
                    ee:c0:97:ed:a5:61:6a:35:cb:38:5e:0a:f0:cd:d2:
                    ef:9d:ea:3f:13:3a:a6:20:cb:d3:85:3d:3c:50:8e:
                    6e:2a:29:25:96:0e:4f:bf:3c:9f:92:2f:9e:4e:2f:
                    24:cd:4f:52:5f:eb:a0:3a:4e:03:88:65:a3:45:75:
                    b2:64:74:75:0b:84:6c:a9:30:d3:61:2e:88:f7:83:
                    05:b7:29:53:7d:48:94:b6:6c:ce:21:54:ce:97:cf:
                    1d:63:b5:08:90:72:d9:3e:4e:df:f5:9a:01:c6:04:
                    94:67:8f:ca:cc:3a:d1:33:0b:b8:34:b1:a7:03:c6:
                    e1:7e:82:a1:c2:41:61:ba:e5:ed:21:5a:13:00:a1:
                    fc:6e:82:1f:3b:db:bc:32:3a:14:2c:8a:76:9f:91:
                    42:b0:23:84:42:70:b9:26:7c:da:bc:2b:ab:a9:3b:
                    e3:10:54:e1:df:33:74:c5:29:0e:96:7c:80:9d:f3:
                    e8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DB:B7:09:27:74:E7:B3:97:45:02:3D:56:94:58:CD:DD:68:B0:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:4e:3c:ea:34:86:c9:2b:26:1c:8f:07:23:5d:14:a5:99:
         e4:f4:af:1b:c6:0b:1e:bb:16:d2:e3:7e:b1:3e:28:5b:7a:47:
         f1:25:80:12:a0:e8:e5:f8:db:3e:6e:1c:24:95:48:92:87:92:
         1a:d2:44:31:4f:c4:86:4c:21:c8:fc:ca:71:7b:d6:22:ca:eb:
         4f:f3:d2:d5:47:2a:7c:6d:38:97:22:7e:3f:03:96:84:38:54:
         7e:71:bc:cf:fa:77:c5:ee:c4:b4:4d:3d:5b:17:db:99:4f:f0:
         a2:ac:61:56:6a:ca:77:71:86:3e:ba:22:8e:16:02:5f:41:3f:
         57:96:dc:67:fa:44:96:e2:9c:a4:ae:85:81:f7:7d:77:96:6b:
         45:9e:65:03:40:88:f5:8a:0e:3d:e3:dc:63:51:2b:ac:44:ef:
         40:a2:04:2f:17:56:6b:d3:63:c7:69:6a:e5:37:e6:2c:68:54:
         eb:03:7e:99:ac:e7:f9:d5:0b:77:3e:2c:05:80:e1:ce:5c:ec:
         85:af:f7:a1:78:66:5d:51:61:42:18:fd:08:1e:2e:c4:a5:d4:
         d9:28:56:04:75:59:aa:76:85:85:e2:a9:28:85:7c:96:59:0f:
         80:4b:9f:53:2b:1b:2f:9f:a1:61:c7:f1:5c:b5:d5:3b:1c:40:
         e2:8b:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:58 2024 by rpki-client on console-ams.rpki-client.org