Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
File:                     a91f6701-0585-395e-ad18-03c9b663d0f6.roa (raw, json)
Hash identifier:          Zj4CDfrpc7NKYUToXnN6AhFRphA/y5IEwQF7lvd7d+k=
Subject key identifier:   46:9B:4E:C0:30:D7:30:57:2C:5E:F9:F8:7D:7D:55:38:C7:BC:6E:8C
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F43285844DF75264CA458E7DC02AA02A0
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
Signing time:             Tue 13 Feb 2024 02:00:25 +0000
ROA not before:           Tue 13 Feb 2024 02:00:25 +0000
ROA not after:            Mon 13 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        69.89.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:75:26:4c:a4:58:e7:dc:02:aa:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Feb 13 02:00:25 2024 GMT
            Not After : May 13 01:00:25 2024 GMT
        Subject: CN=b3a55c08-7589-45bf-af5a-b0ac65f120da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:88:71:1b:8f:1b:1e:29:e5:47:ec:55:f4:
                    9a:be:b9:6f:15:1c:48:52:31:83:3d:61:28:35:3b:
                    cc:ee:3f:5e:d2:a9:35:2a:e4:6a:ff:9d:18:82:aa:
                    60:79:df:05:64:8e:0c:93:8c:72:1c:af:d4:03:ba:
                    00:07:59:28:6c:27:46:7f:4a:df:cf:48:4d:5e:22:
                    7f:0a:01:88:b6:a3:c8:d1:41:ad:eb:05:4d:86:44:
                    a7:3b:14:a5:4f:48:b8:40:bf:fc:21:3b:cf:8d:41:
                    f4:ff:ef:86:d7:04:ec:4f:16:de:aa:72:3c:ba:01:
                    e1:86:14:dc:a1:70:71:a9:b1:c4:e6:20:bf:7a:34:
                    64:a3:4c:ea:37:ba:44:a1:dd:fd:97:c6:4e:37:d2:
                    0e:71:2a:63:77:9a:81:9f:0e:a6:40:f8:0a:3d:8c:
                    7e:b3:9c:7a:dc:1d:d4:69:20:0a:72:c3:6f:c1:22:
                    34:0c:1d:52:28:a3:68:e6:66:ed:98:97:a2:6b:fe:
                    b5:91:6e:82:74:3d:ab:b9:63:40:69:41:04:44:eb:
                    66:3f:aa:1b:bd:6a:a2:0f:2e:d8:f4:99:9b:19:12:
                    05:52:c4:a7:7a:a0:de:65:24:43:02:63:e2:04:bd:
                    ac:7e:83:5e:d4:ae:1d:d4:dd:a6:76:4e:7c:28:54:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9B:4E:C0:30:D7:30:57:2C:5E:F9:F8:7D:7D:55:38:C7:BC:6E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:93:74:4c:e6:9d:c6:a7:27:8d:97:94:66:ef:d3:5d:0f:
         a2:10:2f:67:a8:29:0a:7b:3e:e3:d3:61:bc:c3:cc:a1:67:b7:
         d3:99:e3:59:65:4e:9a:60:fc:5e:dc:f5:8a:18:1e:ce:ad:ac:
         49:6c:4e:74:60:c0:8c:e0:a9:97:4a:3b:e7:49:47:eb:01:0c:
         2b:ea:d5:6f:2b:6e:f4:b4:7a:1d:22:c5:4c:5a:4d:e4:f3:15:
         f0:04:e2:cb:13:b6:aa:06:16:47:ff:b6:2a:cb:dd:ad:e2:5c:
         6c:ed:76:a3:5b:11:6f:89:4b:94:37:84:fd:84:95:2d:74:e3:
         8f:83:85:6b:7c:bc:89:a8:99:5e:b0:17:16:7b:44:c6:28:b9:
         51:49:35:66:c2:e8:3b:9a:fa:8d:c2:f6:d5:60:02:42:87:23:
         a1:28:ea:bf:b2:de:a4:9c:35:fb:36:d4:56:e8:bc:db:94:00:
         83:62:22:52:3e:b9:7b:d7:3c:55:0d:ec:b2:6e:13:ed:11:c9:
         1a:9c:fb:28:dd:da:8c:d1:2f:0c:80:c4:80:7f:a8:10:18:7a:
         27:9d:49:76:de:25:72:50:f6:f5:82:80:9f:9c:1c:7d:dc:93:
         d3:df:e2:d0:dc:3b:f3:f5:bc:0f:69:c2:46:18:23:da:d4:a0:
         34:56:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:46 2024 by rpki-client on console-ams.rpki-client.org