Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/0d23d361-24ed-3696-810d-4939900a135f.roa
File:                     0d23d361-24ed-3696-810d-4939900a135f.roa (raw, json)
Hash identifier:          15AYDFlXgRtjywj7HdG9V7OO0fNUlAPfm3LVYY1vRMg=
Subject key identifier:   A2:E4:6D:B6:CA:22:E1:EF:A0:05:8B:4D:3C:8E:66:9C:90:C7:8D:F2
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F432858473360A1DE5852A197198909C0
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/0d23d361-24ed-3696-810d-4939900a135f.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     35874
IP address blocks:        69.58.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a1:de:58:52:a1:97:19:89:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=38f703db-50cf-4891-af04-6a444f00eccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:49:1a:72:a7:b9:0b:7b:f1:8f:cf:25:d4:
                    5d:c3:b8:af:de:46:97:b0:6c:56:48:5b:f5:c1:46:
                    8a:cb:0d:7e:19:c2:97:15:27:df:75:07:5d:b4:17:
                    5b:b8:26:97:d2:a4:52:3f:89:cc:1c:37:ea:f3:32:
                    b1:43:5e:2f:fc:7b:06:2e:36:8c:92:c8:81:e5:e0:
                    9a:7b:22:ef:bf:60:20:1a:fa:61:59:43:93:94:39:
                    dd:7b:f5:ba:11:c9:8d:de:2a:ee:dd:f6:8b:fc:8d:
                    56:1d:47:7e:55:89:f9:1b:c1:71:2a:55:06:61:91:
                    d8:84:b2:5d:c4:ca:d2:cb:ce:f7:97:25:e9:59:d8:
                    1b:68:01:77:37:fe:6d:68:85:c7:88:f4:04:9c:54:
                    1e:e3:65:8d:66:cc:83:b9:fa:e7:37:be:55:dd:f7:
                    e7:65:b2:43:5e:7a:96:81:3c:30:b7:63:bc:5b:72:
                    ec:31:17:0a:87:2e:20:d8:37:08:74:d7:22:f8:e6:
                    a6:f7:62:4e:f3:30:3b:32:4f:6f:a8:26:5c:57:18:
                    50:47:76:97:35:26:65:c5:1f:a1:97:25:b4:68:1a:
                    48:50:4b:f4:31:af:6f:2d:a5:48:c1:51:89:51:b9:
                    b2:f9:48:c8:b0:b4:f1:a8:55:e2:c1:19:97:29:af:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E4:6D:B6:CA:22:E1:EF:A0:05:8B:4D:3C:8E:66:9C:90:C7:8D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/0d23d361-24ed-3696-810d-4939900a135f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:15:0b:43:5e:e1:c9:1a:15:e6:e4:1d:15:b6:ae:fd:33:
         f2:b8:76:dc:fe:bb:e6:67:9c:03:21:d5:ca:87:1f:9c:cd:d6:
         6d:fb:5e:06:70:50:6f:97:16:81:8d:53:c8:6c:4f:e3:e8:15:
         3d:47:30:12:e2:16:c8:77:1f:19:29:d3:7f:ff:30:68:51:09:
         14:55:49:e9:6f:6a:2d:ff:cc:84:10:02:72:9c:86:b3:0a:24:
         24:da:ed:9e:00:e5:97:8a:87:99:4a:10:a2:fe:26:fa:31:cc:
         2b:76:61:1e:45:3c:48:8b:b7:dd:2e:d4:67:e6:5d:fb:d8:1a:
         bb:44:21:7e:e1:be:15:ed:a6:05:3c:0c:08:44:83:44:e9:44:
         a8:92:7e:41:9a:98:35:9b:b1:7d:2e:65:61:6a:15:bd:0d:38:
         26:a0:75:e2:cd:40:98:f6:45:7b:40:6b:86:e7:2e:68:f7:b3:
         72:90:46:6d:b5:f0:d2:78:ab:7f:e7:ed:a0:d0:39:d2:47:b3:
         10:b7:4d:6f:bc:8a:f7:a2:1c:86:07:ea:af:2d:8f:be:fb:27:
         9e:15:30:3c:77:22:26:91:30:b1:4d:cd:c2:3a:17:b0:42:eb:
         88:d7:a8:ef:00:c8:14:97:46:92:23:f6:2d:21:b8:43:a2:4b:
         4b:f4:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:07 2024 by rpki-client on console-ams.rpki-client.org