Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa
File:                     717ebdd6-4d0d-33db-ae05-66962b047c06.roa (raw, json)
Hash identifier:          RqUziUV2KLRpweh4ZAKbIrrXYwmtp8AFTf2w0PtA3f4=
Subject key identifier:   8E:BF:0B:CC:45:F2:86:BB:86:95:CD:98:DD:EF:FE:53:77:42:B2:A0
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858477A14643A9BD823934504A900
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa
Signing time:             Tue 08 Oct 2024 20:49:39 +0000
ROA not before:           Tue 08 Oct 2024 20:49:39 +0000
ROA not after:            Mon 06 Jan 2025 21:49:39 +0000
asID:                     200288
IP address blocks:        69.168.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:14:64:3a:9b:d8:23:93:45:04:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Oct  8 20:49:39 2024 GMT
            Not After : Jan  6 21:49:39 2025 GMT
        Subject: CN=f736762b-6ed2-40d8-a365-12faaffc01be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:96:35:b4:33:8b:91:3b:67:50:5a:df:b6:
                    c8:5b:47:0b:f3:7e:85:27:d5:51:09:ad:4c:d6:5e:
                    d6:8d:66:44:e8:e5:c8:4f:06:64:a7:76:3b:32:92:
                    25:9b:10:ef:f7:d2:b8:dc:03:32:8c:3a:74:56:e9:
                    48:63:3c:08:eb:7f:90:09:1c:a3:67:03:10:05:b8:
                    21:da:21:b3:bc:8d:67:21:72:50:66:df:ac:d5:6d:
                    db:d1:a1:db:73:5b:d4:68:64:a4:84:46:26:69:b8:
                    0b:d0:b4:7c:46:fd:32:dd:8a:35:ad:c1:a5:e2:2e:
                    b9:1c:ac:a1:03:0b:32:30:c3:21:b8:96:63:ba:da:
                    24:df:6e:20:e0:d3:7b:66:af:80:64:38:2a:4a:90:
                    c1:b1:5a:8f:d1:c3:f1:5c:28:4b:0f:da:59:d2:d9:
                    40:aa:43:24:ef:c3:66:69:ca:d9:28:80:c7:88:01:
                    99:a2:d7:17:13:35:3c:36:4a:c4:35:f9:19:1f:4f:
                    a1:ba:4f:5d:a4:f6:62:88:71:6d:00:f6:93:35:1b:
                    96:18:c2:50:cd:53:a8:cf:f6:e1:cb:fe:25:f2:64:
                    5c:ff:ca:ff:51:a0:2c:38:75:f9:b4:9d:87:23:57:
                    c8:43:fb:03:00:b9:98:16:4a:ba:6a:42:96:39:41:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:0B:CC:45:F2:86:BB:86:95:CD:98:DD:EF:FE:53:77:42:B2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:36:be:7b:18:f8:0c:e8:c9:c1:08:2c:82:4f:0a:d2:fd:62:
         da:3d:8e:01:a6:e6:01:03:86:2b:b6:2b:15:c6:85:34:db:cb:
         cb:25:7f:1c:bc:fc:7c:4e:8d:7b:60:83:b5:ef:9a:72:ef:25:
         28:3f:6f:f8:ba:2c:14:f5:af:e5:18:cf:9b:81:80:77:78:b2:
         29:19:61:ff:7e:e8:53:33:66:4d:3f:73:6a:38:b9:1c:48:26:
         12:80:25:8f:29:c4:c9:50:a6:dc:01:18:6f:54:4a:03:8a:d4:
         dd:1c:53:22:fa:f8:42:b6:58:51:38:76:01:d2:0b:6f:45:5e:
         42:0d:49:f1:19:65:37:85:9a:10:11:65:fc:7f:85:f0:b9:90:
         0b:7a:47:16:08:58:e1:e7:8d:f8:d6:f0:f1:c7:fe:87:b7:13:
         cd:67:01:7f:de:4e:c4:3c:9c:a3:d2:62:60:49:b8:b4:cc:bd:
         ba:0b:16:a6:9e:0b:cb:15:cb:52:91:73:2b:c9:80:d7:10:af:
         8d:5b:a6:d4:0d:f8:19:55:42:c8:5c:df:95:1c:fe:7b:07:43:
         3c:93:6c:93:a0:66:c7:bc:5e:f7:07:f6:72:32:07:56:57:b2:
         04:7e:09:39:e0:e9:ad:af:e0:97:34:23:b8:c0:c1:ba:6e:96:
         a7:9a:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:41:15 2024 by rpki-client on console-fra.rpki-client.org