Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/a15b9d6a-1975-3cad-a97b-203864f1ad5f.roa
File:                     a15b9d6a-1975-3cad-a97b-203864f1ad5f.roa (raw, json)
Hash identifier:          WR3C+Kg4XWrAgE8DYuKOvKEoapFgQAFJy2tvxxFbS3o=
Subject key identifier:   29:59:EE:E3:4E:79:09:60:17:1D:2F:35:67:A3:AB:27:5C:CB:EF:B2
Certificate issuer:       /CN=6df59181-6dce-431d-99a8-377e712796f1
Certificate serial:       010D0C9F432858476E010CAE6F342CEF78F68200
Authority key identifier: F0:C0:83:34:00:DC:AB:39:3E:FE:FB:C4:EE:A4:6F:FA:7D:26:9A:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/a15b9d6a-1975-3cad-a97b-203864f1ad5f.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     12025
IP address blocks:        69.164.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6df59181-6dce-431d-99a8-377e712796f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6df59181-6dce-431d-99a8-377e712796f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:0c:ae:6f:34:2c:ef:78:f6:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df59181-6dce-431d-99a8-377e712796f1
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=7b53bf14-d3fd-4afb-812b-ea3e8a169abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:62:6e:b3:96:a8:97:9b:c9:a3:3a:4c:50:
                    cb:d0:24:6f:1e:cf:aa:71:04:45:ad:c0:f4:c1:af:
                    78:49:d5:3c:2e:1a:f2:ba:be:70:1e:6c:a4:7e:b7:
                    c5:67:5f:17:fa:05:7b:39:16:67:64:e0:9c:e9:62:
                    49:49:73:b7:dd:88:8e:bc:60:62:38:dd:ab:9a:e4:
                    12:7c:1a:4e:29:44:40:05:ec:c1:24:0b:68:b6:27:
                    40:f6:df:7b:40:d3:15:8c:69:4f:10:86:e7:b0:a5:
                    b2:70:e9:54:7d:db:12:96:5a:35:bf:5f:af:15:0c:
                    ed:49:f3:13:07:6b:fe:9d:d1:f8:20:40:58:4d:3a:
                    0d:e3:0a:b3:77:02:3d:06:e7:23:9b:5c:54:46:86:
                    33:d6:63:33:88:b2:44:ed:7d:2c:f1:1d:02:44:84:
                    bb:9e:fe:4a:03:d2:ab:59:e3:b7:54:f7:ef:b8:7c:
                    58:dd:a7:34:2e:54:c3:36:ad:ec:38:17:a1:c2:a7:
                    7d:36:35:3f:db:1f:92:f9:b5:3f:89:a9:f9:09:a7:
                    09:f1:68:7f:48:77:dc:93:77:8b:93:bf:99:df:c0:
                    97:cd:1d:1c:ec:ce:4c:0f:6c:69:93:2c:c9:f6:a5:
                    5a:50:a2:9a:e8:b2:48:24:f4:8c:2f:84:bf:7e:24:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:EE:E3:4E:79:09:60:17:1D:2F:35:67:A3:AB:27:5C:CB:EF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/a15b9d6a-1975-3cad-a97b-203864f1ad5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1/6df59181-6dce-431d-99a8-377e712796f1.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C0:83:34:00:DC:AB:39:3E:FE:FB:C4:EE:A4:6F:FA:7D:26:9A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6df59181-6dce-431d-99a8-377e712796f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:f8:c4:92:32:b4:9d:6f:3e:60:87:7d:a3:3b:bb:6b:c4:
         03:e3:8e:8f:11:be:e0:73:83:5d:77:d4:c5:51:9a:74:dc:b5:
         3f:0b:90:c6:09:9f:4d:47:8d:39:ae:96:13:b7:c5:6b:38:c9:
         2b:56:88:cd:5a:c0:12:72:13:6b:e2:00:17:2d:74:09:d6:1f:
         0b:35:a1:83:32:48:f9:95:0e:b4:ca:b0:a2:d5:93:83:a4:1a:
         2c:fc:ca:95:89:6b:61:ab:e0:88:36:76:84:1f:6a:5d:2d:a0:
         1f:79:66:a6:87:ca:48:0d:c6:d9:f3:4f:c6:b8:e3:99:84:e3:
         f3:f4:31:bb:3a:ec:d1:d3:ba:22:44:23:f7:2a:12:57:17:b2:
         1d:b4:fc:a8:41:ce:32:75:c6:24:f5:07:e3:65:91:e7:09:8e:
         08:a9:a9:16:af:a4:26:aa:38:1a:43:49:f9:c4:30:29:40:a0:
         d2:eb:7c:a2:8c:bc:d4:0b:58:cc:3a:26:62:44:3d:2f:77:7a:
         1a:e6:a1:b9:9d:77:ad:d7:70:81:99:55:41:8c:bd:6f:50:45:
         83:5e:fe:56:a5:00:e1:09:21:61:79:cd:68:35:04:7a:10:2b:
         cf:d6:21:09:0c:8c:1e:51:c6:a0:ab:9f:bb:8f:60:7c:d0:77:
         29:83:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:27 2024 by rpki-client on console-ams.rpki-client.org