Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/6dcf7fe0-7c5f-30ae-8781-eaada8e88ed6.roa
File:                     6dcf7fe0-7c5f-30ae-8781-eaada8e88ed6.roa (raw, json)
Hash identifier:          sJWTT1qyctKlvqb9PlbMYegpKBGtMYDHwIc3WQThfOg=
Subject key identifier:   49:E3:C0:8A:FF:D2:07:E7:34:39:B0:8B:02:8F:83:4B:D3:A1:5F:E1
Certificate issuer:       /CN=77a14fd5-2a53-4594-81f4-ea694254c36f
Certificate serial:       010D0C9F43285847EE8A2C91AF70DA5AF4F0E540
Authority key identifier: 1E:A1:64:80:57:A3:9C:6A:BF:A1:D3:AE:CC:2C:22:50:5E:97:90:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/6dcf7fe0-7c5f-30ae-8781-eaada8e88ed6.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     6327
IP address blocks:        69.12.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2c:91:af:70:da:5a:f4:f0:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a14fd5-2a53-4594-81f4-ea694254c36f
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=9b20c8e6-3fa1-4269-abf6-051e7c57a75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:e5:34:b8:5c:cf:73:46:9d:a3:94:da:2e:
                    d2:cc:bd:5c:4a:b9:0e:86:b3:10:01:0c:77:12:8f:
                    aa:39:c2:b3:46:96:ff:f1:34:13:fd:30:e5:3a:1d:
                    b1:45:d3:eb:09:87:ad:52:ff:2d:bd:03:54:f0:91:
                    86:86:97:c5:89:5c:ff:74:e6:43:85:26:ef:82:c0:
                    9b:e2:40:32:3f:ae:c1:68:c8:6e:a6:19:bd:c5:77:
                    4a:c1:5d:8f:ec:22:a0:91:db:e2:5c:57:e5:7c:3a:
                    eb:1a:59:f7:2f:fd:4b:7d:99:13:29:1e:64:35:3f:
                    c3:1c:09:41:6a:50:84:62:e1:13:84:73:b4:08:67:
                    c6:66:ce:28:95:e6:4f:fa:fc:80:cf:fe:71:ab:a3:
                    a4:dd:ac:15:8d:10:b3:4f:f8:6b:45:96:58:2f:8c:
                    f7:08:8e:80:f2:91:87:08:0f:25:b7:8d:77:56:78:
                    13:ef:00:3a:4d:22:b3:97:7c:2a:4c:2e:2f:10:2e:
                    2c:d9:dc:72:9b:e6:df:72:bf:2f:c0:5e:dc:a1:10:
                    27:da:ff:99:ab:b1:3f:fe:4c:dd:16:c0:a2:75:ec:
                    87:e1:bf:af:1a:a3:e7:35:0a:d0:13:26:c5:86:74:
                    52:2a:13:3f:93:25:95:c2:8f:57:de:79:28:9c:ee:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E3:C0:8A:FF:D2:07:E7:34:39:B0:8B:02:8F:83:4B:D3:A1:5F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/6dcf7fe0-7c5f-30ae-8781-eaada8e88ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:A1:64:80:57:A3:9C:6A:BF:A1:D3:AE:CC:2C:22:50:5E:97:90:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:a1:38:5f:f6:8b:86:8c:0f:5e:00:a4:f6:75:b0:47:df:
         45:51:68:ee:d5:bd:6c:6b:c2:44:29:19:d9:fa:0d:82:d2:5b:
         19:0d:f2:ac:64:96:e0:ff:77:2c:85:7b:02:fb:4e:4c:0f:65:
         b1:5e:8c:ae:9c:bc:85:0c:34:3d:3d:59:9d:a6:15:f3:64:43:
         bd:80:88:97:e1:af:d3:3f:26:ac:6d:21:29:b6:56:d2:ce:73:
         c8:12:0d:be:09:30:0a:f1:01:84:d4:38:18:12:02:ce:db:b6:
         9c:70:dd:f8:df:f2:f4:98:50:18:e9:9c:44:c5:1d:f0:54:c1:
         4a:f7:86:a3:4d:8d:6f:04:9e:d7:49:6f:1e:b8:b9:1e:2d:c2:
         0d:e0:5f:13:89:bd:4b:c4:50:8f:6d:fa:e6:d3:1e:2b:42:10:
         52:3e:f3:31:89:cd:75:5b:4e:f0:4b:a9:3c:51:a9:de:e2:0c:
         c0:05:90:cb:4b:37:a6:79:72:41:62:87:bb:0f:13:14:c7:38:
         78:67:f3:55:3a:fa:66:0d:eb:2e:f7:a2:69:84:bd:8f:37:17:
         1d:24:df:9f:df:c4:3c:80:a2:60:07:4a:1c:af:f8:7e:61:a4:
         64:43:52:8b:6c:1b:b4:c1:a4:16:fe:60:34:00:29:f7:57:e1:
         89:9d:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org