Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
File:                     ce268d52-bc78-36a5-a64e-f76a492c0e21.roa (raw, json)
Hash identifier:          1o4ACXHf+oOewJIw1b2nneyio0AXsh+OQTMJTvi7MU0=
Subject key identifier:   6C:AC:02:0F:D1:14:39:11:FD:A2:2F:27:7B:FB:3C:DB:2E:C1:B7:A2
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584787213582102D6B35D1D96480
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     6954
IP address blocks:        69.4.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:35:82:10:2d:6b:35:d1:d9:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=14d24913-03f5-4d31-ac5d-01ba32f0f6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:e3:20:c8:b8:34:c9:11:30:92:fc:b7:7d:
                    0a:90:f6:2f:e3:a6:ef:78:d2:f3:86:04:a1:10:1f:
                    35:9f:fd:3a:7d:0e:19:d2:2c:d3:61:8c:4f:fc:5c:
                    b3:1b:f2:56:f4:f4:86:43:43:e9:1c:01:3e:b5:24:
                    59:b5:3a:46:35:77:91:68:7a:60:91:33:8d:84:6c:
                    8d:f9:35:c8:e5:6c:ed:b2:d2:5e:ef:3a:f8:28:d1:
                    c1:5d:e9:34:80:81:d4:06:52:bf:b6:ca:28:a1:c9:
                    5f:3d:d1:cc:7e:67:aa:b8:6b:b1:a3:01:db:ed:f7:
                    d2:ee:34:20:24:3d:ed:ea:3d:2f:ae:da:94:27:e9:
                    3c:51:22:1c:1e:22:ba:08:6c:f8:71:4c:30:96:21:
                    55:a6:0d:9f:2a:cb:31:da:11:3b:a7:62:b0:12:af:
                    1d:a8:65:f7:b4:c1:5c:05:b6:46:5d:d6:be:ad:4f:
                    5c:6b:a9:14:0f:aa:cf:a9:95:e4:2e:af:f4:44:bc:
                    3f:50:6c:ad:4c:65:7b:46:ae:a7:ad:fb:33:fd:3c:
                    96:1d:ce:3d:cd:94:9f:79:82:90:40:94:da:55:41:
                    03:ed:e2:bf:4c:6e:01:9c:18:6b:3b:19:09:67:dd:
                    ce:77:43:7e:cd:33:58:35:87:b0:88:97:7b:e4:2b:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:02:0F:D1:14:39:11:FD:A2:2F:27:7B:FB:3C:DB:2E:C1:B7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:1a:d8:9f:20:f8:2a:c2:a9:61:a8:ed:81:81:6c:ca:a8:
         79:4f:42:d3:78:92:e3:b7:3c:f9:06:1a:ae:fb:5a:55:f5:d7:
         21:de:76:2a:e1:e3:9e:8e:b8:f4:12:ea:da:e4:7e:6f:a0:58:
         ec:27:0d:b3:8d:d4:7a:09:92:1e:cf:86:6f:a7:00:80:b3:43:
         10:7e:a3:b5:b2:30:d4:39:19:51:00:a1:37:bb:c2:ad:77:3e:
         b8:b2:3e:b5:3f:43:cb:be:26:de:3e:65:f3:30:3c:07:7a:29:
         86:d9:a4:04:15:57:0a:7a:b4:08:30:32:ba:89:b2:68:c9:35:
         47:cb:03:24:ae:87:ce:3d:60:d3:7c:a3:dc:df:9e:29:99:b3:
         aa:84:e5:06:cb:63:dd:bb:6b:94:28:59:b6:89:e2:ba:33:45:
         f2:91:a6:08:fb:a8:3c:a6:74:d7:d5:ef:02:a2:1a:53:d6:d4:
         ba:19:2d:82:96:24:ad:e6:48:5c:f0:d1:0b:21:10:b0:c0:c8:
         da:ab:95:3d:be:86:f3:99:fb:a7:46:68:84:62:8c:74:e9:64:
         bb:10:02:02:ed:25:96:89:49:60:21:af:1e:54:4b:71:68:8c:
         92:e6:13:96:da:fb:ec:1e:fd:ff:cf:54:f5:8e:e3:a1:98:ef:
         35:7b:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org