Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/bdbde690-27ad-358a-9786-ef9a1aaf6d1a.roa
File:                     bdbde690-27ad-358a-9786-ef9a1aaf6d1a.roa (raw, json)
Hash identifier:          KFg31j4p9GwYZDr5w3/PHbulE2kcnecu2qHrC8IDvmI=
Subject key identifier:   AD:18:01:DE:DE:A2:02:C1:AC:B7:39:A8:D0:AA:1D:E7:4A:EC:EF:7F
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F432858474F4B7668AEE56A69490BF800
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/bdbde690-27ad-358a-9786-ef9a1aaf6d1a.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     11924
IP address blocks:        69.163.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:76:68:ae:e5:6a:69:49:0b:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=b4a81eb6-df42-4744-9a48-c702b9565691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:49:66:eb:1e:2f:cd:fe:5b:66:d9:ac:98:
                    87:2c:dd:21:57:94:15:fa:0f:12:2d:b0:3d:8d:46:
                    f9:11:f4:d8:57:3e:42:7c:a0:82:9e:cd:3a:d4:63:
                    71:0b:fb:b7:0a:da:96:d5:7e:2d:55:ff:b8:5b:56:
                    13:04:33:71:a2:41:ac:40:47:1d:5e:ce:48:ea:2e:
                    55:bc:da:05:49:dd:55:38:9b:45:95:02:3f:60:d1:
                    f1:67:8e:78:d1:ce:26:17:c8:57:53:e7:16:e5:6d:
                    12:0a:7b:6e:f5:ca:58:47:70:c8:21:f2:b9:8a:85:
                    c4:39:1a:91:ea:62:2f:95:63:70:57:04:e3:dc:0b:
                    06:31:31:e6:04:68:11:c1:62:38:35:d9:a8:24:a1:
                    76:79:fb:a6:d5:d1:22:51:46:9a:2a:11:89:93:5b:
                    c1:e5:c7:01:91:05:d8:e8:6f:50:34:48:83:ac:f1:
                    14:0e:4b:72:77:11:c9:49:ff:67:43:e1:ad:9f:23:
                    fa:d5:14:d6:ab:79:90:0c:91:45:92:db:0a:ce:6f:
                    98:46:33:27:93:cc:76:b3:3e:a0:60:3c:a8:e3:48:
                    d1:c4:fa:90:a3:b3:ac:02:11:93:6c:ae:1d:ed:69:
                    ec:99:03:69:9d:ec:72:4c:9a:bc:56:4a:12:56:34:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:18:01:DE:DE:A2:02:C1:AC:B7:39:A8:D0:AA:1D:E7:4A:EC:EF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/bdbde690-27ad-358a-9786-ef9a1aaf6d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:70:66:c5:48:aa:39:58:7e:3d:94:87:99:5d:ac:a2:d8:6a:
         6a:2c:b5:53:2a:98:4d:8f:72:cd:6a:ce:76:29:20:84:aa:f6:
         9e:27:35:de:5e:e7:da:f1:95:e5:d0:18:25:e3:9f:bb:bc:33:
         3f:b0:38:d9:2b:15:b3:fd:d1:05:6d:dc:d2:41:f9:3f:13:1e:
         e6:65:cd:2e:cf:a3:cc:f2:b5:bf:1c:4d:2b:31:86:cb:44:af:
         0e:68:92:83:68:57:2e:a0:09:84:8c:29:03:a9:07:31:96:ae:
         d5:d3:8f:44:89:6a:3b:0f:9a:a6:e8:26:80:6e:f1:62:24:88:
         84:93:e2:dc:31:a0:d8:d3:dd:e9:c3:a6:36:5c:6b:92:b9:1f:
         02:d9:5c:97:fb:ce:9c:ba:6f:43:79:2f:f9:92:6c:56:c8:38:
         97:7d:9f:07:49:88:76:6f:44:60:06:9f:48:4e:40:01:21:e0:
         65:e9:83:59:a7:ee:b5:46:8b:e5:ee:b1:17:12:17:54:97:bd:
         6a:84:c3:af:69:5f:cb:0b:78:9d:2d:c8:f7:23:9d:91:0f:e4:
         ec:e4:2c:06:cb:68:6d:34:c5:17:d3:2d:f9:95:c1:bd:9a:bb:
         86:af:20:b0:d6:9b:ea:0e:7b:7e:7c:78:27:5e:1e:f0:4e:7e:
         a0:7d:59:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org