Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa
File:                     3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa (raw, json)
Hash identifier:          kY4LqNgti59bOVzDjT6bbVOWGD44Oze1F//QIwhOprc=
Subject key identifier:   AE:8E:FB:AE:FF:57:40:D2:A4:B2:D4:7E:8F:F0:31:F0:2D:A9:9D:7A
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584797E148DC1218831A2DF60400
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     63086
IP address blocks:        69.48.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:48:dc:12:18:83:1a:2d:f6:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=37d882c2-abf5-4d12-89ad-0d462373e41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:20:dc:60:3b:6a:84:97:c2:82:3e:da:ec:
                    68:42:a2:1c:ee:ed:28:75:02:55:67:e0:02:d2:18:
                    9a:1e:27:0f:f6:15:62:74:02:eb:7e:9d:6e:35:6d:
                    3b:ad:3b:4a:05:90:8b:b8:5e:1b:1d:74:eb:f5:41:
                    cf:2f:bd:9c:5b:7d:c1:f3:6b:ac:4f:5a:40:32:b7:
                    20:1d:d3:ab:f1:0f:02:62:23:c1:9a:1f:d3:08:32:
                    1f:fa:bd:ac:a8:db:89:79:a5:5c:dc:4f:cb:97:93:
                    c0:7c:a3:9c:95:09:cb:39:58:6a:53:f2:30:bb:02:
                    85:eb:e1:66:30:01:f0:96:3a:ae:d7:d7:40:1a:92:
                    0b:d7:26:12:d5:01:a8:03:fc:82:a5:50:d0:11:94:
                    20:17:63:45:d1:15:43:7f:76:12:f5:05:ff:82:7f:
                    63:0d:76:02:a4:42:74:29:9f:08:b7:94:4a:81:00:
                    78:2b:a7:cf:8e:ea:9d:87:5d:56:b8:13:90:ec:a0:
                    d0:23:56:83:5b:61:35:8a:23:5b:13:dc:3f:88:03:
                    a7:77:29:96:76:fc:b2:dd:5a:59:8f:f2:20:d2:93:
                    c9:09:2f:a4:63:34:af:1a:1f:6d:36:5a:a5:a3:2d:
                    d3:50:a5:3b:0c:3e:27:c7:be:01:11:ab:25:e7:35:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:FB:AE:FF:57:40:D2:A4:B2:D4:7E:8F:F0:31:F0:2D:A9:9D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:e2:2a:9f:b0:a2:47:9f:25:52:d9:6c:d9:4a:cd:d4:b3:
         0d:9f:ed:b8:68:17:2e:b0:e2:9d:b8:3e:16:59:55:3e:cc:f1:
         59:b2:66:86:63:ca:50:cc:06:64:6f:9f:4e:f4:71:92:94:02:
         c7:a2:ac:9f:95:29:35:b0:ef:33:41:0d:6e:65:f6:a0:e5:3f:
         7d:60:3e:95:49:14:dd:02:a2:8b:21:80:84:32:c0:24:e0:76:
         74:cc:a6:4f:9d:34:a9:90:59:65:bd:8e:ae:94:09:be:d9:9d:
         11:c7:76:10:f6:de:c8:ba:4f:ca:58:3b:2b:9d:4b:fa:d7:26:
         4a:2a:7f:c3:51:60:af:41:04:45:8e:5f:f4:41:13:ee:58:be:
         92:00:e0:25:10:4d:5d:9a:62:ce:10:65:0f:46:1a:39:e3:ea:
         df:80:22:02:d5:fe:5d:3b:95:89:dc:e0:6a:ec:8a:3b:01:c0:
         93:50:2f:9a:4b:9d:cc:59:2d:35:d8:05:84:d5:94:af:5b:f0:
         1a:e7:26:d4:87:7d:71:87:84:60:66:f7:4c:f3:b7:2f:0c:81:
         c9:e6:91:a1:3d:f4:d8:e6:1a:7f:65:73:69:b8:22:93:a7:12:
         77:63:45:5d:5d:9b:14:3b:c2:ef:12:1f:02:7b:ff:66:14:93:
         99:da:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:45 2024 by rpki-client on console-ams.rpki-client.org