Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/612a769d-12bd-3a21-be95-85e29ded5b2b.roa
File:                     612a769d-12bd-3a21-be95-85e29ded5b2b.roa (raw, json)
Hash identifier:          9FrjAuDpdnYNobiA4NiDsB/h3w4U/HZJT5jdC9WgDPU=
Subject key identifier:   AE:36:16:F1:77:DF:9E:76:EC:67:3C:5A:5E:2D:A1:78:E4:57:47:9C
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858477A1427B18C655DD712ECDD60
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/612a769d-12bd-3a21-be95-85e29ded5b2b.roa
Signing time:             Tue 08 Oct 2024 20:49:11 +0000
ROA not before:           Tue 08 Oct 2024 20:49:11 +0000
ROA not after:            Mon 06 Jan 2025 21:49:11 +0000
asID:                     200288
IP address blocks:        69.168.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:14:27:b1:8c:65:5d:d7:12:ec:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Oct  8 20:49:11 2024 GMT
            Not After : Jan  6 21:49:11 2025 GMT
        Subject: CN=f0eff525-996f-43ec-a918-3aa88f285724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:35:83:6c:cd:52:23:3a:a5:70:c1:99:16:
                    ad:96:7d:9a:ea:0d:9f:86:24:11:59:13:10:b2:53:
                    da:10:7c:06:d8:0c:74:04:6f:0b:c5:c3:d0:ea:bc:
                    72:1e:d8:1b:e7:cd:33:d7:76:c4:e4:33:0b:6a:06:
                    bb:6f:ee:d0:c4:81:64:ec:4e:e7:cb:1e:92:84:41:
                    0f:69:54:12:d5:2e:0a:93:d2:57:27:64:23:13:66:
                    96:0a:7d:cb:66:19:ee:83:08:54:99:43:dd:73:8b:
                    3a:8f:8b:79:1e:a6:27:69:3c:73:ff:04:37:bb:97:
                    1d:04:fb:e0:f2:8a:60:a2:f9:e6:a4:5b:74:b1:ee:
                    1e:51:21:34:c8:4a:6a:3c:92:18:b0:3f:f0:3b:73:
                    20:67:d3:f9:5e:e3:03:77:2f:e8:5f:70:73:2c:7e:
                    08:90:f1:7c:dd:7d:17:05:4c:52:f3:6a:63:42:03:
                    e3:8a:36:6b:45:00:08:9c:e0:0a:1d:63:0c:51:c7:
                    0d:32:66:6e:54:63:e9:35:cb:bc:41:4e:e1:88:63:
                    13:3f:e1:fe:41:11:cc:9f:d9:c8:b0:ad:bd:e7:8a:
                    9c:ea:34:b3:95:22:c3:c4:1a:3d:47:22:bc:21:47:
                    06:ec:bc:8a:28:66:f8:4b:06:0b:bb:ce:2b:f5:17:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:16:F1:77:DF:9E:76:EC:67:3C:5A:5E:2D:A1:78:E4:57:47:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/612a769d-12bd-3a21-be95-85e29ded5b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:fc:94:e4:3c:a1:ca:66:34:48:df:66:b6:8f:c8:23:20:
         7b:e7:09:89:08:ce:48:83:d3:0f:c9:2b:bc:d4:75:86:13:b0:
         3b:06:34:a4:17:7b:83:e9:c7:83:c4:a5:4a:0c:aa:f0:35:f5:
         d3:83:90:88:cb:66:7a:ba:5e:de:a6:bd:3f:5b:76:2c:b8:29:
         03:7f:44:58:24:a4:09:ec:27:cf:5e:61:c3:b4:e8:8b:9e:68:
         35:2a:83:da:1e:f8:fc:ac:96:ff:e2:cc:ca:58:e4:f7:c1:9c:
         a3:a8:f1:44:1a:35:e8:8e:c4:c8:60:2c:54:cd:cc:f2:8b:ee:
         e6:9e:99:c7:8f:44:70:61:85:1b:a6:af:de:c1:01:06:f8:64:
         3a:ed:5e:07:f3:64:cf:42:c4:e6:be:8e:9a:91:90:05:b5:35:
         00:84:9e:cd:34:a1:7a:b1:89:60:2d:c3:1c:00:2d:2c:b2:7d:
         15:c0:30:b1:20:13:5c:4f:54:76:ee:d5:85:31:2e:50:70:93:
         ce:cc:dd:22:4b:8e:b1:6b:43:e3:a2:03:0c:1e:c0:47:bf:f8:
         77:c4:4b:46:f5:74:60:f9:20:9c:17:31:ee:2c:8a:ec:4b:b0:
         fa:72:0f:a5:a4:30:43:ed:66:68:f2:00:74:6c:ef:e7:db:8d:
         1f:c4:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:24 2024 by rpki-client on console-ams.rpki-client.org