Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
File:                     50e38687-6764-3cf4-b44b-0f3741733f81.roa (raw, json)
Hash identifier:          0cJG6UZfQtDERQ0NGd2qPB6WtCq6cU0tn92goI6RL8U=
Subject key identifier:   4D:CF:BD:2C:83:8C:E9:33:2F:47:55:AA:E5:F7:F6:9D:77:97:AA:DE
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858477A148019361F346389086500
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
Signing time:             Tue 08 Oct 2024 20:49:52 +0000
ROA not before:           Tue 08 Oct 2024 20:49:52 +0000
ROA not after:            Mon 06 Jan 2025 21:49:52 +0000
asID:                     200288
IP address blocks:        69.168.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:14:80:19:36:1f:34:63:89:08:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Oct  8 20:49:52 2024 GMT
            Not After : Jan  6 21:49:52 2025 GMT
        Subject: CN=402ad7ab-3fd8-40b8-9c5f-b233e881faa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:c1:f9:b6:2b:87:91:02:fe:c3:3f:e6:92:
                    86:50:3e:a9:f2:de:08:b3:fb:5f:17:4d:b7:3d:f8:
                    be:e5:a7:1b:76:87:be:d7:d8:a8:9b:44:2f:cc:93:
                    0e:03:ba:aa:16:cd:51:41:c1:9b:9e:3c:3c:09:ab:
                    48:cd:dc:32:6a:e8:21:cc:8f:96:50:fe:42:9b:08:
                    aa:c8:ab:e9:cd:de:f9:a6:ef:11:5e:3b:97:ff:41:
                    8c:be:a2:f7:2e:f5:2f:3b:48:0d:dc:00:78:43:c7:
                    ab:37:4f:42:41:aa:e1:95:47:67:8c:84:d1:e1:bf:
                    17:a1:d6:17:4d:ec:5b:9e:57:8c:34:2e:20:f8:75:
                    19:12:13:b6:3a:5a:b2:a5:d2:24:04:79:a3:64:f8:
                    d7:ca:1c:6f:86:b1:da:66:a4:d2:16:28:92:ba:b1:
                    9e:41:b3:ae:e4:46:f0:d3:8a:41:a5:26:e8:75:63:
                    40:0c:9f:18:9e:19:9b:61:16:18:89:20:bd:33:65:
                    42:21:c7:a1:94:de:f5:93:db:53:ca:7b:1c:2b:39:
                    b7:72:2b:50:60:ba:ee:73:0b:6a:59:2b:45:fa:8e:
                    7f:51:cb:24:ca:d3:01:5d:de:c2:db:eb:e5:df:16:
                    e7:e0:d3:71:bf:34:86:ed:ea:a2:79:87:8d:68:a5:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CF:BD:2C:83:8C:E9:33:2F:47:55:AA:E5:F7:F6:9D:77:97:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:5a:75:a4:05:98:b7:6d:be:2a:76:62:cb:f8:ca:2c:a2:
         91:33:a1:ed:ff:b6:57:59:47:bc:2e:d5:4b:af:f5:37:2c:69:
         ee:e3:b9:f5:4c:a3:da:64:d4:3e:2f:60:a2:de:44:4e:3d:9e:
         84:d2:0f:88:1c:48:aa:92:bf:cc:59:72:28:a7:e8:04:71:68:
         49:75:f4:e9:f5:9e:f3:bf:3e:57:26:0c:37:c3:d0:13:1a:de:
         a6:94:74:97:fe:db:00:19:72:d2:e3:d8:f4:51:7c:29:c5:f2:
         6f:eb:8b:e7:72:37:58:ac:94:37:a2:60:d3:44:eb:6b:da:e7:
         76:d3:ce:79:ed:a4:6c:7c:0f:16:cd:d2:3b:45:a1:82:8f:c1:
         3d:b0:ad:46:8e:a8:55:b9:7e:ef:1d:be:65:91:23:04:59:b5:
         4c:97:a8:74:a3:95:b3:7a:d6:5c:be:10:69:61:79:d1:57:b0:
         38:64:83:c2:6b:33:e4:40:ce:b1:e8:32:db:c3:9d:96:a8:00:
         fd:89:61:c4:bd:49:4e:49:87:18:ce:59:1f:33:a5:54:0e:65:
         f7:95:74:6f:37:74:47:50:17:11:6b:7f:af:61:11:f9:28:3e:
         4b:13:f4:ab:4c:87:c5:4c:2e:cc:71:79:57:d6:58:44:b6:54:
         7a:1d:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:24 2024 by rpki-client on console-ams.rpki-client.org