Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
File:                     e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (raw, json)
Hash identifier:          LQyL4ErDf7JnlADnv3RPZZce8oz0orVeixL15xMqnFI=
Subject key identifier:   93:12:C0:B7:83:40:C1:52:CA:55:96:C5:82:FB:1B:BB:4F:D3:96:64
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F432858485E35B7C0A00C51AABF7C4B40
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        69.89.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b7:c0:a0:0c:51:aa:bf:7c:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=608c2233-0c18-4ad9-b8db-8e4a05a065ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:14:21:8f:27:ca:fb:6c:5d:cf:1c:ec:9b:
                    a4:90:c9:47:6d:db:a4:6d:59:3e:45:c1:5b:c2:98:
                    f5:70:b5:e0:0d:8b:16:84:71:f7:71:ba:2d:fd:4d:
                    83:c2:9a:e3:a7:f5:e2:13:6a:cc:af:3b:c0:80:68:
                    a9:b3:56:d0:27:79:3e:0c:2c:89:04:e6:49:dc:54:
                    1c:2b:02:f1:96:42:14:fb:fb:c0:85:89:bd:ab:e4:
                    9a:c0:6d:9a:85:88:e0:c4:1d:36:a8:ff:92:9b:86:
                    32:ac:74:65:83:c2:96:5d:1c:72:0a:5e:83:f1:fd:
                    a8:ac:76:93:e8:24:e9:35:9b:c4:a7:06:15:84:88:
                    e2:68:62:25:ec:47:ed:87:cd:04:6c:1c:62:8e:ab:
                    29:48:a2:cb:ad:da:f1:06:85:65:89:6e:c0:9e:26:
                    95:3e:72:3a:ce:31:48:3e:15:9a:30:cd:1b:e5:9c:
                    42:5d:53:95:c3:b8:9f:f8:9d:f2:b4:67:97:3b:94:
                    aa:50:63:4a:00:59:eb:d5:f6:83:5d:1c:1b:73:69:
                    28:16:fd:0a:1d:ad:d4:e9:d0:bf:fe:e5:20:84:9a:
                    8b:f7:db:65:0e:0b:39:fc:68:13:dc:3e:18:46:9f:
                    76:a0:69:44:f8:5d:fb:ab:83:1f:06:38:4d:04:bf:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:C0:B7:83:40:C1:52:CA:55:96:C5:82:FB:1B:BB:4F:D3:96:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:74:cd:dd:43:1e:09:d2:58:00:72:27:d1:6a:6d:e7:6e:b7:
         2d:0b:73:13:60:7c:0d:a0:e5:81:83:9a:fa:ec:23:03:fa:d3:
         98:ad:03:68:a3:73:e7:3b:10:b7:0c:50:27:64:f0:51:66:9d:
         7e:e3:20:27:f2:66:52:0a:9a:e6:fe:a5:9d:06:44:1f:be:1a:
         7f:98:8d:22:50:cf:f1:53:27:64:35:fc:de:df:29:28:ed:d2:
         3a:3e:fd:a4:37:92:66:f9:6e:0f:a0:9b:b4:69:56:fd:4b:f5:
         06:35:bd:f5:2f:80:4f:a4:dc:b7:2d:c8:8f:45:7d:73:e4:6d:
         eb:36:ac:09:ca:fe:c6:f1:67:03:f5:fa:06:96:3b:ef:30:0d:
         62:5c:94:e2:f8:14:c5:04:dd:4f:de:31:c2:0d:56:b6:36:ac:
         92:64:3a:a5:20:29:bf:c0:dc:1f:24:12:43:69:d5:00:d0:79:
         76:25:7e:a3:1f:d7:a6:3c:17:f5:69:95:c7:df:46:aa:b3:91:
         a5:da:60:27:9f:a6:22:f2:44:b5:c7:e0:f0:84:e1:1d:e1:36:
         46:4f:8d:ae:7a:05:69:3f:fd:bb:a9:f2:7e:36:03:f0:60:92:
         af:b8:97:e4:0e:58:ab:e4:b2:a0:2d:3c:60:7d:f9:9a:ea:1c:
         68:28:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:00 2025 by rpki-client