Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa
File:                     b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa (raw, json)
Hash identifier:          4g/slbdWPkEB5zatOSWnjnMXkvLPD1bbGEDyKvlFvF4=
Subject key identifier:   3B:7B:D4:43:B3:83:8B:30:9F:65:9B:D3:83:43:2C:75:CB:BB:93:A4
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F43285845A15E1C8C2D9B331C0B6DF7AC
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     55159
IP address blocks:        69.17.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1c:8c:2d:9b:33:1c:0b:6d:f7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=ece149c9-a035-4b35-ae80-88cc56a8a9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:1c:81:28:02:9a:cb:6b:c9:53:67:fd:8c:
                    5c:60:7f:ca:dc:f2:a8:54:61:8d:ed:3d:d4:0f:33:
                    08:7b:ab:5c:50:fb:2b:85:0d:ad:40:21:c1:b3:de:
                    03:b1:25:31:05:54:f3:23:7e:05:b4:89:5b:6a:05:
                    65:b2:00:9a:b1:08:f3:e5:90:f5:45:d6:99:26:b4:
                    0d:d0:c3:93:6b:3f:38:79:cc:df:ca:37:0e:59:b7:
                    1b:96:87:51:44:14:c1:d8:ed:ec:93:0d:ac:22:3b:
                    01:2d:7e:96:35:cb:0a:45:7e:93:4d:a0:49:88:03:
                    81:4c:f3:33:cb:aa:27:ea:d3:53:91:3e:26:f1:64:
                    01:9d:f1:67:c4:ad:df:8b:95:10:0d:e9:0c:34:e8:
                    c6:50:af:02:d6:35:c5:da:12:c3:04:5b:c5:10:b0:
                    b4:91:f2:26:87:f7:47:92:e3:6b:3a:83:bb:7e:fa:
                    bc:f7:71:b7:f0:79:a7:fa:95:0c:d6:54:e7:1f:8f:
                    94:ef:b1:39:21:47:ac:1a:8f:fb:84:0c:a1:d1:10:
                    47:bc:a7:79:e7:8b:78:84:f7:60:39:fe:45:67:cf:
                    8c:cf:e4:df:c4:48:7e:1d:f0:41:00:f7:06:d2:c8:
                    2c:fe:60:a1:4e:d8:a9:86:a6:17:a0:07:02:13:d5:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:D4:43:B3:83:8B:30:9F:65:9B:D3:83:43:2C:75:CB:BB:93:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:be:5f:03:5d:42:4b:88:3b:8b:98:77:ce:00:23:2d:95:
         c1:d2:9e:cf:b5:eb:cb:3a:4d:fa:3e:6e:af:db:19:bc:e8:b1:
         c0:9f:30:6f:ba:29:5d:5b:77:ef:6b:fb:28:48:4a:99:4c:5f:
         5f:85:02:d3:3e:c2:c2:37:b8:b2:69:37:d8:1d:6e:0d:ee:18:
         8b:a9:71:54:95:25:0f:1d:88:b5:ea:3a:49:65:4f:00:0d:3e:
         f0:a4:4f:33:03:73:40:84:ee:1d:66:fe:d9:08:49:2c:21:91:
         3d:ad:f0:0f:40:c8:4a:7a:3e:ac:ff:41:67:12:d2:d5:51:93:
         73:95:0f:a3:66:17:11:59:7a:c8:41:d6:8f:99:f7:2d:df:99:
         17:c9:01:4c:8a:6b:e1:24:65:08:5a:10:13:58:97:83:24:3e:
         52:41:91:69:01:6f:2d:95:ea:5e:10:94:9c:00:89:d4:25:82:
         bc:6a:1a:b8:4a:b4:2d:12:50:e9:ee:45:ef:69:97:7f:45:f1:
         81:f2:f7:5e:07:b9:e4:91:81:2e:2e:82:89:65:86:07:32:7f:
         fc:ea:d2:f5:10:8a:b4:40:4f:8e:5a:05:2c:89:37:23:ed:6c:
         f3:3c:2c:9a:24:0c:fc:0e:3d:3f:00:4a:28:5e:00:42:fc:34:
         b5:aa:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:35 2024 by rpki-client on console-ams.rpki-client.org