Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6e11da94-e4a6-3b2c-bac6-ad4755a87ef8.roa
File:                     6e11da94-e4a6-3b2c-bac6-ad4755a87ef8.roa (raw, json)
Hash identifier:          a/yUSSL+PM9m0jVqCyuyCL3//61SQTgliBgiBROfwMA=
Subject key identifier:   AE:04:E9:ED:54:4E:67:1E:5D:5C:0A:47:0E:93:C6:F4:01:B3:C8:36
Certificate issuer:       /CN=6df59181-6dce-431d-99a8-377e712796f1
Certificate serial:       010D0C9F43285848E0065BD5722E359886176270
Authority key identifier: F0:C0:83:34:00:DC:AB:39:3E:FE:FB:C4:EE:A4:6F:FA:7D:26:9A:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6e11da94-e4a6-3b2c-bac6-ad4755a87ef8.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        69.164.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6df59181-6dce-431d-99a8-377e712796f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6df59181-6dce-431d-99a8-377e712796f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5b:d5:72:2e:35:98:86:17:62:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df59181-6dce-431d-99a8-377e712796f1
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=2376b67f-aa4b-457e-8720-ebe8bcadb07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:b9:ae:92:3f:a5:33:9d:31:f3:3f:40:41:
                    71:50:35:67:3b:c1:b7:49:af:1f:6d:13:7d:ff:9b:
                    16:d0:46:8b:fd:90:fb:50:20:5d:18:17:55:2a:ce:
                    8c:47:8b:e9:6d:5b:29:13:c3:79:46:cf:0a:07:fa:
                    b9:f3:f5:3e:53:30:c8:71:f6:12:78:fd:f6:54:5f:
                    90:7a:d4:78:80:21:e4:20:c2:4b:2e:81:f0:3b:df:
                    eb:28:31:31:20:11:a2:24:de:c6:6f:cf:e1:01:37:
                    c5:be:0c:1e:de:fe:00:d6:2b:01:af:b8:f6:e3:25:
                    d5:60:cd:bc:f3:c0:9a:28:3f:d6:bc:19:62:d0:1b:
                    ab:ff:ee:99:58:35:82:b2:5c:c7:8e:4c:cd:96:4d:
                    a0:96:4c:7a:74:c1:11:a6:c4:69:56:70:c4:41:a6:
                    ab:b0:64:c3:0e:6a:62:6b:16:a2:5b:b6:a4:1c:b9:
                    cb:74:60:ba:ee:19:70:89:4d:43:d8:0b:40:99:b8:
                    75:2e:cc:20:c0:df:36:15:b9:89:87:b2:7b:d3:0d:
                    34:22:a8:30:3f:9f:c0:96:44:0c:86:fe:da:bc:47:
                    89:e7:3b:ee:33:cd:c8:66:dd:01:89:73:2a:ec:6d:
                    17:e9:0d:0b:94:7f:a5:f3:3d:38:43:8d:fb:9d:16:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:E9:ED:54:4E:67:1E:5D:5C:0A:47:0E:93:C6:F4:01:B3:C8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6e11da94-e4a6-3b2c-bac6-ad4755a87ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6df59181-6dce-431d-99a8-377e712796f1.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C0:83:34:00:DC:AB:39:3E:FE:FB:C4:EE:A4:6F:FA:7D:26:9A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:3d:a1:59:13:cb:ed:88:f4:51:32:63:32:00:ed:76:3f:
         df:30:ee:e2:7a:a6:aa:be:f0:a8:42:57:54:69:57:0a:6a:04:
         0e:34:77:14:f5:35:55:8a:69:b1:b6:7a:80:44:eb:f5:95:71:
         74:e1:71:62:c9:4b:ce:d6:e3:0c:4e:57:f1:b6:2e:83:cf:c4:
         7e:67:4a:09:d1:6b:b7:f0:f9:eb:b5:4c:c6:f2:5f:09:72:32:
         40:8e:99:3a:1b:90:cf:2c:32:e7:28:4d:32:d5:92:ae:ef:72:
         be:b5:92:ec:cd:35:63:fd:f4:e5:65:a7:89:23:fe:19:99:dd:
         1a:3d:e0:ab:c3:27:d6:39:8f:ca:53:85:ab:d4:99:9b:76:cd:
         7f:89:05:27:a3:14:d8:c4:c9:ca:c4:98:13:94:6d:a8:dd:dc:
         96:85:6a:b2:0d:ff:78:2c:66:c1:4f:df:bf:96:c3:89:bf:3e:
         ec:a4:5f:35:47:00:80:ce:1a:6e:29:24:b3:68:63:52:41:26:
         44:84:6e:71:08:72:3a:b4:a7:51:d3:a3:15:fc:5e:61:b2:12:
         b1:58:1a:05:7a:8e:c5:7d:42:78:70:93:a0:0b:86:58:6a:76:
         71:bb:86:18:73:62:b2:cf:83:e7:d4:c5:ec:4e:ea:6b:5c:18:
         1f:93:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:30 2025 by rpki-client