Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
File:                     fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json)
Hash identifier:          DnwgbayyeJjnwOYPVblEMU7L9HgqYjqg1x/TbXW59Ps=
Subject key identifier:   31:D9:73:25:E6:D8:14:25:8B:F2:12:AC:19:37:C0:83:1B:A1:09:F2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF80644D63BE83531CC800
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        200.69.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:80:64:4d:63:be:83:53:1c:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=cdcf6c1d-402f-4d0f-8c40-2a5d626b4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:3c:0f:6a:81:c9:15:7f:d3:1c:af:a6:fd:
                    6e:24:da:e5:16:c5:02:3b:33:3c:da:ab:89:84:ae:
                    9f:36:75:72:41:36:e4:f7:9f:68:b5:fe:41:90:35:
                    3a:00:d8:8d:b4:62:d5:32:db:f7:46:cd:2c:48:10:
                    52:2b:30:21:4e:f8:42:3d:ec:02:e4:10:01:22:d4:
                    f7:57:46:7c:48:b0:9c:aa:fb:75:97:b5:4f:e5:df:
                    22:4f:d2:1d:51:25:6d:63:c3:6b:44:b3:05:76:6e:
                    5d:65:20:e2:02:76:50:68:cb:ee:be:5b:e7:f9:f4:
                    ef:93:29:e4:eb:8f:18:16:bd:91:06:90:5c:2d:f6:
                    35:aa:e5:ea:c0:d1:f3:42:35:42:4a:93:6f:96:40:
                    06:c2:f2:d8:d3:e1:25:f6:07:d5:16:0b:25:aa:d4:
                    da:b5:07:b5:76:16:ab:ef:8f:2e:3d:9e:d0:9e:86:
                    56:93:c4:72:d0:9f:86:d3:86:54:30:b2:12:be:32:
                    c9:16:59:9a:e3:5d:b3:ce:22:45:10:db:d2:58:b5:
                    ff:a1:9b:ad:a4:89:81:80:30:0d:8f:83:fe:5a:63:
                    97:6a:f7:09:2c:e1:20:b5:95:e9:dc:b8:e8:53:99:
                    44:b6:2a:b7:1d:5f:8e:4f:e3:e1:db:f2:91:20:b0:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D9:73:25:E6:D8:14:25:8B:F2:12:AC:19:37:C0:83:1B:A1:09:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:53:73:07:10:b4:fb:09:f3:51:d1:0c:65:c5:fb:a3:19:
         d3:2b:12:8f:56:6b:8e:13:85:6e:73:73:3e:73:c1:57:7a:a7:
         47:2e:18:ff:c5:a4:85:19:ec:53:2e:9b:8a:0f:a2:9c:41:68:
         58:90:9e:07:ea:6c:60:b2:47:be:65:06:61:18:a4:c7:ce:1a:
         44:5e:ea:e9:c4:bc:2f:4c:32:4d:0d:34:6e:38:c9:75:d8:70:
         13:9e:01:a5:8a:4e:ba:53:dc:bf:6e:10:2b:26:49:fc:3b:93:
         a3:82:99:99:d4:17:72:3c:db:b0:11:30:ee:26:07:da:14:b9:
         e3:b4:1d:8a:42:60:06:3f:5e:c1:90:5a:31:df:1a:6d:88:b8:
         3f:93:87:ba:a5:8c:41:6e:b3:df:fb:7f:94:a4:9b:f6:13:e8:
         6d:3e:a2:81:36:64:2d:a2:1b:de:07:80:06:a6:a6:c3:a9:26:
         f4:01:25:d2:7e:bf:5a:7e:44:7b:d8:63:72:34:7d:8a:b7:c8:
         c0:73:ff:3e:0f:a7:2d:49:f8:b4:2d:a1:7b:e7:0f:04:cc:da:
         b2:b3:33:a8:3a:e4:17:d3:f8:97:c4:4c:4a:3d:17:e8:b0:c2:
         06:0f:2f:3a:39:f4:1d:66:66:fe:76:c3:4f:3b:65:3e:a8:91:
         38:d5:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org