Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/606fde17-63fb-3c77-ac2f-22a9d73547cb.roa
File:                     606fde17-63fb-3c77-ac2f-22a9d73547cb.roa (raw, json)
Hash identifier:          bBDuaaDw17Rl/+bxbPJSmphIJxofwnl7zYh/8Z5iwXk=
Subject key identifier:   00:56:21:32:1C:CF:47:AC:CD:EC:B9:49:8C:43:B7:A8:2E:0E:86:61
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F432858473360A2C1853F590ADAFFF680
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/606fde17-63fb-3c77-ac2f-22a9d73547cb.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     35874
IP address blocks:        69.58.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a2:c1:85:3f:59:0a:da:ff:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=5cf6bea3-7187-4eb5-aa63-20a6752c728e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:93:fd:3a:a1:16:d0:63:b1:0b:06:d6:df:
                    ca:f5:4e:76:99:84:8c:56:7c:43:9b:fe:13:6a:92:
                    6d:79:8a:11:ee:8d:85:1d:42:29:8d:b9:21:53:c6:
                    68:2a:f4:35:ba:b8:8f:17:ab:f6:6c:6d:68:88:a8:
                    aa:87:6d:8c:c1:8d:8b:c5:19:12:51:33:23:1e:89:
                    f8:60:31:dc:4a:be:51:5e:1f:6d:c7:d0:22:14:bd:
                    c6:63:42:75:e1:3b:d9:56:cc:4f:a0:26:c7:d5:f0:
                    06:0f:d1:56:21:b3:27:3c:0f:16:7c:f6:f9:a4:e5:
                    0a:b0:5d:22:8a:58:88:c5:dc:a5:9c:92:03:7e:69:
                    34:c0:97:5f:d7:d8:39:01:c8:4f:4c:77:63:94:dc:
                    eb:2b:72:ab:ce:7d:91:59:8e:25:84:85:9e:a2:a2:
                    73:c2:1d:af:03:8c:33:4d:d2:ad:a4:a1:28:d3:89:
                    c1:24:2f:b2:8c:86:3e:10:02:8c:3c:4f:5d:4e:a9:
                    21:62:46:a0:51:46:9f:e6:eb:a2:62:37:87:6d:06:
                    b2:39:a8:93:6e:3a:14:8d:83:84:06:e8:af:37:7e:
                    bc:4d:6f:aa:ca:67:07:5e:63:ad:4b:3e:c1:3a:ee:
                    bb:45:c0:1e:6a:bc:8a:a8:d0:72:69:64:28:a5:7d:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:56:21:32:1C:CF:47:AC:CD:EC:B9:49:8C:43:B7:A8:2E:0E:86:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/606fde17-63fb-3c77-ac2f-22a9d73547cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:7c:89:c6:32:24:df:7f:cd:7d:b9:67:66:ee:7e:d1:7a:
         39:7d:93:0f:85:24:a9:e6:21:da:92:84:b4:4e:55:89:7c:0a:
         f9:40:8c:9d:05:db:a4:4a:cb:c3:55:e8:5b:a7:c8:de:7e:a2:
         7d:69:82:77:cb:3a:75:2f:74:58:d9:5c:5a:0f:cd:79:11:cb:
         45:1c:51:d2:df:d9:ae:c2:fe:ed:d8:d8:e0:23:aa:de:58:6e:
         fb:c1:db:45:11:28:35:ac:a0:24:f3:81:c8:17:fa:ff:bf:ed:
         d8:ff:98:cc:a5:a4:bd:64:3a:6d:d3:03:cf:54:f5:5e:f5:76:
         fc:e3:dd:b9:8a:94:ab:f9:4e:36:01:f8:20:44:0f:84:6d:85:
         03:ca:5c:5d:94:d9:aa:e3:a5:03:13:37:f5:68:5c:79:60:57:
         ba:f7:cf:ec:50:80:71:4c:9c:07:22:80:67:05:d2:2a:41:1c:
         63:f7:b4:d1:16:38:d0:3e:f0:ad:ee:3d:05:d0:8c:f6:1e:fd:
         c6:32:f0:0b:74:f2:67:79:5b:63:a9:e3:22:9e:ff:0f:6a:67:
         e6:5a:57:cd:dd:99:20:10:9a:6a:b4:e0:a4:e1:24:1f:b5:e3:
         90:fb:db:22:d9:1e:a6:5a:58:37:b0:61:74:db:08:ab:c9:17:
         32:8d:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:02 2024 by rpki-client on console-fra.rpki-client.org