Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa
File:                     ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa (raw, json)
Hash identifier:          vXBqsUQsl43xMj4CawjdujQG1FBJ+i/kXgs81Vq0P30=
Subject key identifier:   73:11:20:0D:58:B6:4E:EC:2C:0B:12:40:F7:1C:7B:DE:9C:44:CB:62
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858477A11EF32ED1FE1D014C607C0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa
Signing time:             Tue 08 Oct 2024 20:44:42 +0000
ROA not before:           Tue 08 Oct 2024 20:44:42 +0000
ROA not after:            Mon 06 Jan 2025 21:44:42 +0000
asID:                     36344
IP address blocks:        69.168.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:11:ef:32:ed:1f:e1:d0:14:c6:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Oct  8 20:44:42 2024 GMT
            Not After : Jan  6 21:44:42 2025 GMT
        Subject: CN=4894fb93-fd0d-4e8c-8f29-45fb829e842d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:fb:ae:ae:89:99:79:18:12:27:b9:8c:51:
                    ce:6c:5b:c7:c6:5e:6c:da:77:4d:bc:d5:6c:19:cb:
                    c6:17:70:e5:dd:aa:d1:28:d0:dd:ec:c5:d6:09:d5:
                    1c:4f:0e:8f:b3:b3:a1:c8:bf:3f:07:a9:4c:71:58:
                    fe:46:8a:6c:13:11:60:c8:de:d8:c3:6c:36:71:ae:
                    8c:f9:1d:10:81:7a:98:4b:0e:d6:c3:4c:58:09:0d:
                    3e:48:4b:ea:92:e3:86:4a:26:f7:80:97:42:62:9f:
                    30:01:f9:f3:c6:9f:13:07:dc:9e:0e:cd:ad:be:15:
                    13:8d:ea:30:e3:fa:4a:a7:9d:1c:6d:71:fb:b5:f9:
                    a8:fc:53:2d:64:fb:b6:14:62:dd:ca:eb:76:64:cc:
                    66:a5:a3:c3:40:43:61:83:3a:cf:73:de:4b:88:5e:
                    54:08:ac:26:b5:12:3f:80:a7:25:ba:63:07:8c:d3:
                    ae:37:6c:cf:cb:3a:14:00:2c:06:b1:c5:fe:5b:9c:
                    c2:7e:5b:d3:a7:09:8e:9f:eb:f3:24:0b:f3:6a:9d:
                    d9:d4:76:f6:1d:86:20:0a:16:56:e0:11:78:94:fe:
                    cf:e1:c1:67:4a:79:57:0d:5e:9c:69:e3:f8:ff:47:
                    35:3c:20:75:f5:b1:51:d8:5b:01:01:d4:9d:5d:02:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:11:20:0D:58:B6:4E:EC:2C:0B:12:40:F7:1C:7B:DE:9C:44:CB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:63:1c:df:15:4a:cb:58:c8:91:9b:c7:26:e2:c6:6f:2d:33:
         e9:71:63:13:1b:20:fd:1a:4a:0f:c8:dd:e2:d5:75:0b:e7:68:
         90:3c:ab:16:3e:9a:22:b0:18:23:24:ce:7d:aa:98:09:51:87:
         d0:51:74:a4:ea:37:7f:b8:15:c6:28:44:e7:35:99:46:b1:d8:
         6c:6e:65:af:4c:b6:b5:c9:da:9f:27:2c:63:94:a9:40:ce:0e:
         d0:54:8a:75:a4:f4:28:52:a7:7e:b8:3e:4a:5a:43:26:fe:3e:
         ce:0a:ae:01:d5:ee:c9:51:da:7e:63:8b:eb:24:8b:95:be:5e:
         29:ac:df:95:31:48:9c:4f:92:eb:51:ca:20:5e:52:5a:25:6a:
         a3:aa:1a:68:a5:d2:9d:b8:5c:52:02:1e:19:09:5e:81:17:49:
         b4:42:4a:69:60:72:ee:65:b6:95:29:80:b1:9a:86:28:a4:a3:
         19:29:0c:e8:3b:0e:90:e4:88:7d:53:db:1b:4b:02:c2:6c:83:
         bd:2a:1b:7b:be:ef:bf:5f:e0:46:aa:eb:06:73:cc:ee:87:ee:
         df:66:0d:ff:83:5c:c8:56:54:b8:7b:aa:eb:1d:f7:25:6f:4f:
         7c:8e:74:8b:3d:9a:67:68:a0:65:49:10:33:35:8a:b9:85:e8:
         d3:dc:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:48 2024 by rpki-client on console-fra.rpki-client.org