Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa
File:                     8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa (raw, json)
Hash identifier:          P8vD1Kr32mmkHvtrmMp3mqn+ZVUKY8jqYyq+fZPaTA4=
Subject key identifier:   69:52:92:C2:5C:2C:E0:05:41:A2:A0:E2:18:CD:0E:90:F8:E0:13:16
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F432858474420B3F6579AD2A9CB580488
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     11269
IP address blocks:        69.17.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b3:f6:57:9a:d2:a9:cb:58:04:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=9182e425-07da-4ddf-8401-51a9bcad12c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:12:07:96:06:36:25:07:71:cc:44:45:f5:
                    2f:88:c9:f4:9f:37:2d:82:da:12:f0:e8:e1:d3:dd:
                    ba:b2:4d:57:87:1a:86:54:af:b6:18:7e:05:f1:2f:
                    69:59:67:67:f3:6c:b4:06:62:51:07:50:6b:e5:95:
                    f7:90:aa:4f:ad:d2:f1:f9:26:bc:ef:26:3e:39:0f:
                    58:53:4f:f1:63:19:58:79:b8:7e:b1:fe:72:76:79:
                    6a:fb:c2:d4:f2:39:d7:75:9a:ab:e6:3d:42:5a:8e:
                    99:e6:74:4a:49:76:40:1c:3b:b9:b1:21:b0:c2:96:
                    d1:3b:68:95:0e:98:51:69:f5:53:a0:fb:73:76:cc:
                    ec:d0:3b:7e:d2:6d:42:ab:9e:4b:0d:b5:9d:a1:3b:
                    49:21:6f:e6:00:85:4d:4b:24:52:94:01:1c:ac:43:
                    13:34:d7:02:fc:9f:5d:c6:95:20:1c:00:6e:d5:c0:
                    83:dc:ba:3f:33:09:3c:f5:1d:e6:15:6b:d7:41:29:
                    fe:9a:ad:38:7a:65:96:a6:f3:56:e3:d5:a5:42:83:
                    3d:18:2c:0c:cb:9e:2c:85:42:da:e6:d5:0c:df:1d:
                    f5:13:e3:66:03:f5:a5:28:ad:47:49:4d:83:70:b8:
                    78:33:54:1e:41:41:7f:75:b9:5f:2c:18:4e:de:a0:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:92:C2:5C:2C:E0:05:41:A2:A0:E2:18:CD:0E:90:F8:E0:13:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:13:9b:84:66:6a:99:9c:18:3b:3f:00:77:f1:08:94:d7:ea:
         7d:90:eb:4b:87:93:a0:b8:04:c6:39:6e:bd:3b:f0:69:c3:e1:
         63:78:28:4e:de:9c:32:06:ed:51:94:a5:08:f2:ee:69:63:0a:
         c1:c1:0d:41:a3:04:69:89:f0:c3:c3:4a:4c:a4:60:3b:4c:ae:
         c5:e7:e9:b6:66:52:7b:91:a8:24:8d:e7:73:e9:16:26:35:02:
         e4:42:ba:11:40:77:17:9e:0a:e2:1c:be:18:02:80:f2:24:b0:
         3c:15:7a:a1:3d:39:db:fb:b7:84:16:da:69:92:15:94:02:aa:
         f9:48:8d:11:04:83:56:6b:01:b5:61:b9:6e:f5:ad:60:7f:cc:
         b5:c6:e3:36:46:e3:70:63:7e:86:d1:bf:5b:2d:b8:d6:c3:1b:
         6a:94:d9:7a:65:e5:f1:a1:b8:bc:86:03:06:b7:86:b1:55:dd:
         97:e7:62:9d:ca:fc:7b:59:cb:8f:f5:43:05:d3:e6:7e:75:1a:
         53:6b:5a:c4:8e:02:dd:40:16:8e:60:90:de:58:ec:ab:4d:e0:
         a0:93:0e:c6:54:a9:31:d0:89:ec:b8:bb:8b:a8:15:66:91:48:
         bd:1b:b2:83:ec:9f:33:2f:6c:75:0f:3c:ba:5e:f3:8f:68:d6:
         71:8c:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org