Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abd942df-1a1c-3fdd-b2c7-d2649209cb27.roa
File:                     abd942df-1a1c-3fdd-b2c7-d2649209cb27.roa (raw, json)
Hash identifier:          sKEPxZ6+P/qExfq9Jw6ZI7wh/YV6W9H+TpgnXiOYvFw=
Subject key identifier:   C3:C9:48:89:D0:91:04:77:68:E5:D9:63:3B:96:E3:86:7C:71:AD:A7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF0381800BB98E10C44A280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abd942df-1a1c-3fdd-b2c7-d2649209cb27.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397231
IP address blocks:        199.7.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:38:18:00:bb:98:e1:0c:44:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=256b3103-5e28-4233-9c00-2482a5b26eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:01:05:82:a4:6d:5f:2c:ff:fa:7b:bc:ad:
                    c7:91:4e:94:94:65:fc:eb:f7:b9:0d:82:1e:34:4a:
                    e3:70:19:b4:8e:71:96:f0:20:ae:a7:54:4c:a6:2f:
                    ea:59:fb:5a:35:d6:38:82:4e:3e:57:ed:12:51:69:
                    c5:cb:00:33:72:0b:46:00:ff:06:c4:c6:50:51:cc:
                    50:df:71:aa:97:a3:6c:06:48:5f:22:f8:c5:d1:be:
                    f6:47:84:df:eb:d1:f8:f0:8b:2b:b2:d8:5e:16:45:
                    c2:07:d6:5b:6e:57:9e:3f:09:21:23:11:c5:f3:c9:
                    c9:95:06:5d:34:71:e8:3c:b9:30:f2:3d:d8:29:26:
                    1a:cd:11:68:c1:fd:f5:19:36:53:84:4b:15:e5:ec:
                    a0:4d:30:f4:e8:d8:70:39:80:4d:ac:41:e3:c5:aa:
                    23:80:62:8b:3a:c5:93:07:76:dd:04:73:71:03:a3:
                    9d:58:e7:da:4f:fa:b2:41:5c:f7:ed:a8:bc:76:dd:
                    12:10:f8:8b:33:84:06:1d:03:4a:5c:6c:b9:01:74:
                    33:a4:a8:5c:8e:fc:c4:3b:e7:b3:19:04:b3:a7:e0:
                    16:e1:6a:7b:f2:d6:d1:5c:18:71:58:fe:c4:30:cb:
                    e4:3c:e6:d1:c7:d6:23:6d:a2:9a:ac:1f:cd:b4:ae:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:48:89:D0:91:04:77:68:E5:D9:63:3B:96:E3:86:7C:71:AD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abd942df-1a1c-3fdd-b2c7-d2649209cb27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:0e:fc:85:52:4c:1a:27:a9:92:53:c0:78:3a:86:b3:75:
         e6:9c:42:ac:03:ec:b3:4e:f0:09:b0:6d:14:13:10:53:c2:72:
         1e:37:0b:4d:33:fd:ee:f1:17:64:2d:18:39:6c:f3:2f:f2:f1:
         d2:3e:8c:77:cd:7e:53:25:91:c6:18:48:4d:4f:c4:64:c4:7a:
         1c:ab:0f:59:82:5c:b0:78:69:17:57:8d:00:d9:e5:d1:52:53:
         b7:60:c2:b9:23:6a:11:ec:0c:0e:bd:bd:5f:b6:13:86:3a:17:
         2b:38:fd:cd:a5:cf:f2:ff:d7:1f:32:23:27:05:ef:38:ed:b0:
         38:4a:4b:f6:99:1f:2c:5c:62:e7:a5:78:69:e5:7b:3f:09:4c:
         25:84:19:b6:55:66:88:92:9b:4e:96:2e:55:0f:b7:3f:b8:b0:
         48:cb:85:67:f6:46:e3:16:1f:05:94:6b:ce:8d:27:a9:93:d9:
         cd:8f:57:54:c4:46:6c:82:cc:ad:d7:d6:d7:1e:fc:67:f7:4c:
         8f:cd:74:d9:d7:4a:97:06:5d:c8:7a:c2:00:4f:4b:7b:cc:79:
         b3:3e:5b:d2:1e:a4:3f:a8:4f:3d:3e:6a:8c:87:c5:de:5d:47:
         95:02:12:fb:e4:fd:43:44:eb:c1:f1:c4:a8:0e:c8:a7:35:59:
         b7:54:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:01:15 2024 by rpki-client on console-ams.rpki-client.org