Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa
File:                     0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa (raw, json)
Hash identifier:          Lh2wqz8GaCNoQzax0OZO4XVoPRIyDg1Un+yIRV3wEnk=
Subject key identifier:   98:04:67:31:97:70:90:E7:E6:4B:9B:68:C2:1C:9F:25:F6:3C:18:DD
Certificate issuer:       /CN=d197db7a-8a5a-4fd8-b323-b768b4bcca78
Certificate serial:       010D0C9F43285847E62A1D1C388B8622EB4EE080
Authority key identifier: C0:1F:36:9A:9A:ED:E3:56:43:BA:32:90:3C:BA:31:5D:D5:84:92:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     19939
IP address blocks:        69.54.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/d197db7a-8a5a-4fd8-b323-b768b4bcca78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/d197db7a-8a5a-4fd8-b323-b768b4bcca78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:1d:1c:38:8b:86:22:eb:4e:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d197db7a-8a5a-4fd8-b323-b768b4bcca78
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=62de5540-139c-4634-962c-b3cf1a989f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e6:56:93:6b:52:0b:27:d5:13:a6:bc:75:ce:
                    4d:4f:17:45:01:8f:e5:7c:2d:d9:05:1e:3d:51:c2:
                    61:ba:16:ce:3a:32:28:30:3a:58:79:ec:44:d4:58:
                    10:9e:b2:02:b8:c7:4c:48:32:cc:d2:7d:da:2f:8d:
                    ba:49:86:84:39:60:73:4a:be:db:cc:59:e1:d2:a7:
                    4b:83:29:23:8f:83:68:64:fc:fd:47:7a:fc:53:af:
                    7f:47:9f:fc:58:e9:74:5c:a7:8c:26:45:1f:62:98:
                    2a:f0:4a:25:c0:98:ea:8d:09:df:a3:1e:66:b7:67:
                    4c:5d:5d:c5:10:92:7a:6f:4c:98:00:8e:97:30:da:
                    56:6e:da:ec:f7:b6:86:31:c2:88:87:27:10:2d:1c:
                    ec:c2:b9:26:4e:46:5c:b6:ba:07:20:a6:7b:5e:6d:
                    02:e7:3c:42:1c:de:3f:7d:db:28:5a:76:f4:68:1e:
                    f0:49:c7:3c:5f:f9:45:cc:3a:6f:83:c8:7b:75:0a:
                    1c:d8:ab:7c:cf:17:58:fc:7f:a2:9c:c9:7a:da:16:
                    3d:26:73:f8:27:5c:81:dc:4e:73:da:08:70:1c:f2:
                    82:72:d6:56:89:4e:76:33:00:7c:66:50:3d:ac:67:
                    47:61:80:0c:b6:a3:a9:db:a5:f8:28:1e:67:25:e5:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:67:31:97:70:90:E7:E6:4B:9B:68:C2:1C:9F:25:F6:3C:18:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/d197db7a-8a5a-4fd8-b323-b768b4bcca78.crl

            X509v3 Authority Key Identifier:
                keyid:C0:1F:36:9A:9A:ED:E3:56:43:BA:32:90:3C:BA:31:5D:D5:84:92:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:d3:d7:55:b7:6e:55:cf:85:cf:01:c2:04:0b:5e:8e:97:
         60:29:dc:a3:a6:03:e3:65:12:8e:0e:12:39:df:ff:47:21:dc:
         54:74:74:dd:f6:7c:cd:b8:65:72:c7:8c:ed:46:fb:12:2a:21:
         12:f5:09:cc:86:99:1f:da:d0:d6:06:14:8a:15:d7:74:bc:6a:
         30:fe:02:02:88:f8:37:c6:99:52:30:49:c5:9a:5f:77:37:39:
         42:31:d8:b3:03:3c:62:16:34:e5:be:b1:d5:34:be:8d:c6:31:
         7b:4d:a2:05:7d:5d:e1:0c:88:95:aa:0e:84:d5:81:1d:ab:cf:
         78:3b:d0:d9:fc:23:45:99:04:99:b3:f6:40:d4:02:b1:d8:70:
         bb:fc:02:da:a2:6b:b4:33:b5:e5:da:98:22:6d:05:c7:62:bd:
         45:62:b6:ae:00:9e:d2:d5:9d:76:b1:c4:01:4b:8f:ae:77:97:
         62:87:83:a1:7e:ab:d6:60:1b:2c:24:c4:5b:19:a1:f9:a1:28:
         00:38:2e:2c:c1:86:87:36:a0:cc:2d:30:ce:9b:0b:aa:3e:f4:
         e4:9f:d3:ec:92:be:49:5b:45:8b:89:8d:2a:71:15:39:c9:7f:
         a5:79:68:2e:ca:1a:a4:eb:a9:5d:34:98:8f:2b:31:9e:3d:d6:
         51:19:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:46 2024 by rpki-client on console-ams.rpki-client.org