Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa
File:                     333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa (raw, json)
Hash identifier:          zc9X0mIU6etuWA+y8gZbzhANxDSDP0c4egjR79bNlOo=
Subject key identifier:   BC:A5:03:94:FE:14:0F:28:C3:DD:43:D4:17:DE:4B:5E:92:4E:09:EB
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F43285847872135A3A51655FE1098F260
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     6954
IP address blocks:        69.4.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:35:a3:a5:16:55:fe:10:98:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=0cc1d2ab-ead0-45ad-aab0-a638954bf1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:ce:6f:eb:e3:ab:e5:24:11:e3:9c:2b:dc:
                    0c:a0:63:54:04:86:78:80:e7:aa:43:28:51:c9:98:
                    e1:d5:eb:15:9d:0f:64:e6:0d:45:2a:dd:3d:2d:2f:
                    24:56:e2:1c:b3:f2:67:d6:e0:56:a7:12:aa:ab:e8:
                    87:e1:a9:57:1b:1b:55:6f:f4:37:5a:6a:14:c5:cb:
                    52:02:d8:ee:2a:25:bd:e0:2e:8b:c3:1a:52:57:9d:
                    9e:32:dc:13:79:b0:1b:33:d8:4c:c7:85:94:60:9f:
                    da:58:20:78:68:51:a1:8d:61:5b:98:ee:da:7c:28:
                    43:29:46:44:a7:8f:2c:91:cf:47:91:71:a3:45:69:
                    a6:e2:38:2b:ab:77:c3:9e:ac:bd:cc:00:a0:98:3c:
                    ea:cf:fb:ac:1e:7e:7f:a0:17:50:11:76:8d:97:11:
                    a3:7b:b8:81:81:f9:81:4b:6a:d9:07:bd:8a:d0:6b:
                    e8:b0:f1:6e:42:fc:b6:15:5c:42:49:d5:cf:c6:e5:
                    e3:45:ca:b5:17:a8:d8:d2:96:11:ed:07:7c:d8:e1:
                    7e:e7:e0:5b:77:b8:c9:5d:f9:d1:71:77:fb:5c:0d:
                    16:55:75:e4:10:ff:3f:4a:5c:18:a5:34:8e:5b:1f:
                    cb:70:d2:7c:60:69:4f:3f:64:7a:12:c0:fe:45:35:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:03:94:FE:14:0F:28:C3:DD:43:D4:17:DE:4B:5E:92:4E:09:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:96:25:6d:dd:0a:a2:5d:fd:c3:c9:08:f4:a0:45:eb:b4:26:
         cb:10:4f:d5:3f:45:26:c5:a8:71:64:5f:ce:57:10:d6:67:37:
         d3:c7:76:02:0f:7d:fa:17:38:f8:8e:52:8b:4d:93:72:5d:c2:
         d1:71:08:2a:c0:89:07:99:3c:10:3b:4d:7d:a1:c6:a3:f6:47:
         39:7b:dd:1b:ef:33:53:09:61:ff:1c:83:00:5c:4c:00:c2:a0:
         c3:d2:0c:26:33:1e:9f:48:26:24:0e:3e:c2:dc:7a:e4:1c:ce:
         31:c9:9e:02:7d:33:39:ba:50:d6:74:31:4c:a3:0e:a0:26:2f:
         d2:2b:57:bd:21:82:89:76:74:57:9f:97:33:78:68:96:e2:15:
         e3:06:42:da:f5:41:76:9b:fe:b1:17:40:47:c9:cc:c5:2a:20:
         28:80:05:da:35:17:d0:53:8b:b0:09:d3:9a:62:96:1b:19:fb:
         f3:82:11:13:8c:a4:b4:ca:8c:55:2e:59:15:ef:e7:cc:21:69:
         2e:e7:dd:98:3e:3a:38:33:22:6b:41:5a:b3:a4:97:88:a3:4a:
         b1:28:ce:15:01:e7:b9:52:86:47:27:56:cb:99:25:3b:95:3e:
         29:b3:a4:a0:a5:4f:a0:96:9b:27:18:f0:8e:28:54:98:e6:22:
         62:9f:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org