Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa
File:                     8de3435f-e6ea-387d-ae03-f28b14654e4a.roa (raw, json)
Hash identifier:          aHeNAZFxb5lu5k8rVdwUAcQ+9JwdAYVLuZxEveKDbhw=
Subject key identifier:   23:A1:3E:98:8D:B6:FA:7A:80:C7:D3:A9:57:A5:DB:D8:AE:44:B8:A3
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F432858479D76B5308BD6C60CDBAE1E00
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     401307
IP address blocks:        69.58.58.0/23 maxlen: 24
                          69.58.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b5:30:8b:d6:c6:0c:db:ae:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5b6e3c5b-becd-49f0-85c9-64d78e4daea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:d6:e1:d5:a2:95:5a:1b:cc:57:b9:bc:b6:
                    e6:d6:1a:39:45:01:ff:48:87:f6:77:a3:e9:ac:29:
                    75:3e:4d:7a:31:ed:56:55:29:52:66:68:77:63:f5:
                    5e:b4:2e:96:92:ed:c3:18:23:19:d1:ee:29:39:d3:
                    9d:15:3e:1c:6e:cd:9f:d0:e3:e1:4d:50:1d:dc:d7:
                    06:ce:ab:95:31:0b:d1:95:50:2c:c9:83:6b:8b:96:
                    b7:91:fd:7a:c1:88:5a:fb:cd:47:a1:a7:c2:50:4a:
                    dd:7b:20:c2:fb:88:b1:70:17:7a:b4:cd:59:44:f4:
                    cd:d4:c9:36:79:74:f8:54:72:81:74:08:5d:31:7d:
                    a9:ea:02:d3:0b:a2:85:8f:35:b5:62:bf:d3:71:01:
                    42:ef:8c:31:67:55:63:6f:ee:95:4c:c8:5f:bf:fb:
                    29:d5:e7:75:04:80:5a:5a:81:fb:1b:a0:d8:93:f9:
                    72:86:72:d4:ee:2c:b3:80:e2:f4:eb:bf:fe:6c:9d:
                    9d:e9:4d:a5:6c:03:10:17:b1:e8:00:c2:9e:89:f3:
                    20:d0:b5:c8:53:9f:b1:0b:e5:09:34:31:fa:64:0e:
                    19:b3:64:9f:36:d0:9a:60:a8:4f:43:14:a1:01:4e:
                    2e:31:58:69:db:69:95:e2:04:32:5b:b0:58:00:61:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A1:3E:98:8D:B6:FA:7A:80:C7:D3:A9:57:A5:DB:D8:AE:44:B8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.58.0-69.58.60.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:a6:fc:49:a5:f7:d1:7d:4c:43:21:3d:c2:d3:54:ad:9c:
         90:3a:19:6a:5f:61:76:a9:af:d5:03:02:c0:4c:1f:c3:47:f6:
         d6:3c:b7:b9:39:39:44:87:a9:d7:a2:35:b6:08:cc:ad:68:bf:
         05:7e:2d:f5:6f:72:3c:44:38:16:06:bf:d0:4f:e8:54:3a:f3:
         88:7c:9e:78:3e:c2:7c:46:ac:59:9b:d4:43:29:57:88:12:32:
         d1:63:6b:55:be:c5:65:29:e7:3e:09:cb:49:2e:d1:2a:e0:d2:
         14:7f:9f:82:40:a8:74:5e:ac:e1:48:a5:79:72:af:0b:ce:33:
         95:09:e6:9d:a9:9f:2d:6f:19:4f:35:8f:4f:2c:37:4d:0f:dc:
         9c:c0:f2:63:9b:53:6a:d7:57:9d:77:81:05:1b:0c:3a:a9:d8:
         16:2e:54:b7:2f:37:06:f1:4c:95:c6:ce:d2:fb:9b:6e:85:dd:
         96:71:8c:92:83:90:36:60:89:80:77:fe:ae:04:12:7c:69:81:
         a7:91:26:cc:2d:29:a8:89:08:76:fb:b0:f8:dd:6e:b6:c6:0f:
         3d:b2:72:0f:82:ee:4a:37:1d:f2:53:de:3e:39:13:30:91:aa:
         29:43:c1:8a:57:7a:a2:72:e0:96:a5:34:10:f7:48:6c:3d:36:
         3e:c8:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:07 2024 by rpki-client on console-ams.rpki-client.org