Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa
File:                     7227acb3-123f-331a-8f3b-2f0488de64a2.roa (raw, json)
Hash identifier:          kY5pmRnv5X83Mh+iQpTNgjL2W17f2/HsdKNoGj0P9gs=
Subject key identifier:   E1:F4:31:99:D2:B1:E5:AE:B8:2F:1A:68:4D:28:1A:D0:1A:58:DF:15
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285847299B2773354E982D58EE70C0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     394391
IP address blocks:        69.56.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:27:73:35:4e:98:2d:58:ee:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=0f877c09-9bad-4b82-91a3-93c2878782e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:c6:7e:0e:41:c7:6b:52:8a:85:a2:76:c9:
                    5a:59:05:a9:ca:e6:2b:a2:06:c7:39:86:84:fd:e9:
                    ab:5d:3d:9b:03:ae:a1:54:55:0e:44:4e:d9:f4:41:
                    16:9e:8a:83:79:61:58:30:68:96:e7:46:24:31:4a:
                    71:b6:03:2d:db:59:1f:98:4f:c6:33:12:2b:41:77:
                    5f:ae:41:af:29:ba:b9:29:05:58:cd:40:75:c6:e6:
                    de:a2:0d:46:50:63:06:79:44:f5:a3:5c:59:95:55:
                    13:7f:da:38:97:e0:a0:59:f1:d3:a9:6d:40:03:03:
                    ed:d9:b8:ae:b8:d0:8e:97:19:65:60:50:66:06:3a:
                    be:e6:8c:3b:ed:fa:a9:78:9a:15:4e:13:a4:72:6c:
                    a5:d9:ab:19:b8:22:b6:1d:4c:23:f0:5e:2a:83:68:
                    74:74:15:37:dc:bf:03:ff:ed:6a:47:da:30:93:d5:
                    c2:50:d4:7e:a9:1b:62:b0:22:ee:e7:27:25:50:39:
                    cc:cb:9f:d1:ac:d9:44:9a:d4:d5:8a:20:35:e8:21:
                    2d:6a:8d:df:47:2d:85:7a:32:56:2e:91:82:70:6f:
                    57:d2:50:a9:be:a8:49:4d:1c:97:2e:29:f8:bd:e2:
                    5f:a2:85:e0:cd:cf:e5:d3:28:a9:2a:b0:73:88:0e:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F4:31:99:D2:B1:E5:AE:B8:2F:1A:68:4D:28:1A:D0:1A:58:DF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:44:e6:e0:61:8b:2e:a8:71:b1:f8:f2:f0:0c:97:66:39:41:
         d4:63:ad:e7:ae:66:1e:d6:aa:73:07:30:f1:b6:88:cb:54:24:
         f5:da:0c:43:12:08:9e:e4:da:58:c0:e5:65:9b:40:5f:0d:78:
         ef:2a:d8:ca:6d:4b:62:8a:a2:71:b8:1d:ad:5d:bc:ec:4a:0a:
         ee:9f:1c:72:3f:3d:17:de:9c:5e:10:6a:79:3c:d6:57:7a:23:
         fb:31:69:56:b8:52:fc:d3:fd:e5:04:ec:ab:e0:9b:aa:6a:79:
         cc:a3:f7:24:58:47:fb:32:28:d9:14:ba:cb:95:e2:5b:02:21:
         e0:9d:65:bf:b4:53:cc:b9:7d:6b:12:51:f5:c8:70:1d:f9:f7:
         7c:c5:2d:b4:e8:40:31:af:15:7b:86:fd:57:dc:b1:15:aa:06:
         fc:c3:01:49:98:03:fc:c6:09:dd:b3:40:e4:a6:ab:89:bd:be:
         ed:c3:86:7e:97:58:3e:ef:68:97:90:d9:07:e6:3c:2b:19:dc:
         9a:35:49:1b:ec:5c:2d:da:26:28:75:3b:87:29:6f:12:15:76:
         4f:63:d3:41:e4:0f:a4:8a:ca:22:9a:d2:8c:9e:14:95:44:01:
         cc:04:83:7e:90:1a:9f:fa:df:61:16:87:89:c0:f7:59:6c:21:
         aa:cd:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:35 2024 by rpki-client on console-fra.rpki-client.org