Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
File:                     ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa (raw, json)
Hash identifier:          5mCmOT2VHJ+LoG20/KaALNEjmP1kSa6LrqxtsPmdr8o=
Subject key identifier:   76:14:E8:4F:61:C8:34:1E:C2:2C:72:05:69:A0:6A:16:61:7F:35:62
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF0382B7FC4DB5A3067F140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397232
IP address blocks:        199.7.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:38:2b:7f:c4:db:5a:30:67:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=c36d681c-c2fa-4e38-9ba5-d9a15108528b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:82:b2:6c:71:1b:3d:74:b0:32:d4:3f:74:
                    14:dd:28:5b:85:bb:75:0c:15:6c:f0:f2:14:b2:2d:
                    70:45:63:5c:07:1f:43:7d:7b:28:07:ea:c7:ab:05:
                    e7:7a:d8:5e:5d:b5:1f:d6:01:27:05:f9:b4:51:f9:
                    02:0e:18:fe:45:23:96:00:70:52:cf:ee:64:f5:a2:
                    8f:a9:a1:7a:8f:fd:c5:c3:42:e1:aa:54:6d:8e:26:
                    61:ff:fa:61:b3:1c:18:1a:cb:99:a3:55:1f:1f:39:
                    74:3d:0a:8d:f8:e0:ef:47:50:18:69:73:17:b3:a0:
                    57:b1:83:29:d2:01:60:3d:67:ce:fc:f9:b0:f7:ee:
                    2a:ae:c7:88:72:e7:52:84:5b:97:c6:12:2f:c6:11:
                    f2:cc:41:85:8e:31:75:93:d9:b0:90:3e:6f:8c:5a:
                    4f:fe:9c:25:e3:80:01:18:b0:ba:f4:1f:29:a6:01:
                    81:44:65:d7:f4:a3:e4:56:fd:a3:c0:94:6c:ff:f6:
                    b7:9a:02:c8:22:76:8c:73:d3:f5:45:09:4e:7a:31:
                    a2:35:58:58:1f:4f:85:1b:8c:24:f8:8c:01:74:eb:
                    a6:96:3a:32:f6:bf:6e:00:bf:47:ef:9b:21:aa:ed:
                    66:92:bf:44:a4:cc:1f:43:ff:a9:e5:33:12:e3:c3:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:E8:4F:61:C8:34:1E:C2:2C:72:05:69:A0:6A:16:61:7F:35:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:e2:62:b7:5c:b1:78:9d:2d:09:1a:b0:b7:07:bb:e4:91:
         fc:e4:08:f3:4e:df:ef:81:d8:79:81:c7:94:2d:be:c9:4c:27:
         d1:e9:a9:8b:f0:f6:b1:88:06:7e:1a:fa:97:a8:5d:eb:a8:2f:
         41:3a:5f:c4:18:1b:ce:09:b8:60:f7:44:3b:e6:c0:21:22:d6:
         7c:d5:f2:b2:3e:fc:d8:2f:da:b0:dd:89:d3:4c:a9:7e:c2:6d:
         f7:c6:52:c6:a5:9c:81:de:14:cd:3d:2f:52:d9:ca:b7:07:67:
         1f:06:f5:99:20:11:4c:f3:b2:68:fd:a3:8f:81:94:e6:22:34:
         79:ca:50:1d:92:08:4c:19:66:b5:d1:71:3a:8d:a3:cb:62:9b:
         8a:c3:de:93:52:13:b6:48:65:89:63:33:93:45:bb:1f:7c:7b:
         13:30:20:a0:c1:7d:e1:25:b6:65:7d:04:7e:af:a0:74:c4:4b:
         c6:52:9a:47:1d:d1:a0:ac:14:f9:d7:44:a6:c9:3a:c2:8d:d9:
         97:df:03:83:29:ae:d9:b2:d8:12:a3:b1:55:21:d4:01:b7:39:
         4c:41:43:c5:33:6f:5b:53:86:6a:de:1f:44:c4:df:fe:2b:94:
         d1:a9:5f:1e:d3:cc:e9:c7:14:ac:ae:05:80:6c:ef:05:b3:04:
         95:28:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:39 2024 by rpki-client on console-fra.rpki-client.org