Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/b770c0c1-0b91-3630-b1b6-95ae9724bd34.roa
File:                     b770c0c1-0b91-3630-b1b6-95ae9724bd34.roa (raw, json)
Hash identifier:          jFfJ8JIQanDPJMsl8RPFpT0PnI0thHMypS7LAUy2LfQ=
Subject key identifier:   72:35:56:E5:5A:D8:21:77:4D:0D:B8:58:2D:3D:17:98:22:9B:05:9A
Certificate issuer:       /CN=20326331-2c67-41aa-8ed3-7667815d240c
Certificate serial:       010D0C9F43285845777DB8EDF152F46CCED25380
Authority key identifier: CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/b770c0c1-0b91-3630-b1b6-95ae9724bd34.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        69.56.0.0/21 maxlen: 21
                          69.56.8.0/21 maxlen: 21
                          69.56.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:b8:ed:f1:52:f4:6c:ce:d2:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=d54e047c-62b1-4fd8-88de-fe5ea6016c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:ea:b3:81:12:b2:93:fd:f4:1e:db:d4:78:
                    16:07:64:7d:da:a4:0e:8c:87:26:72:b2:09:79:ea:
                    6c:76:e9:8c:0e:7a:5c:6c:e2:3e:16:c8:70:d5:53:
                    84:8c:f5:18:35:54:2e:48:c1:28:98:d2:c8:96:d1:
                    fd:4f:e5:a3:f1:dc:0b:b8:ff:fd:69:38:61:44:30:
                    57:19:0d:dd:02:f0:5b:75:97:25:f9:c9:da:97:07:
                    7c:f1:66:f6:9d:00:35:21:58:af:b6:01:ec:df:1c:
                    96:11:49:0d:2e:36:ba:17:a8:dc:95:05:28:e4:88:
                    7f:df:5a:33:f0:5d:15:ea:0c:f9:db:62:62:39:38:
                    92:e3:34:6d:2b:d5:b3:e8:ee:6b:d7:ce:24:a6:97:
                    74:ab:50:0a:70:5b:9f:0c:c1:2c:b1:97:61:39:30:
                    b7:d7:1f:99:5b:38:e7:db:52:ec:1b:a1:3c:43:5b:
                    e9:c0:54:09:ed:42:56:a4:40:6f:73:ce:73:75:cc:
                    ac:cd:ea:cf:c8:2b:87:71:89:87:2e:5b:82:d7:95:
                    47:78:06:33:de:0c:09:f5:9a:98:b2:51:ed:ec:03:
                    2b:94:c5:35:ff:c6:b3:a3:c0:a4:9d:49:93:8b:c9:
                    2a:b9:eb:d5:8e:13:3d:cc:b9:87:f7:ad:1b:f9:5a:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:56:E5:5A:D8:21:77:4D:0D:B8:58:2D:3D:17:98:22:9B:05:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/b770c0c1-0b91-3630-b1b6-95ae9724bd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.0.0-69.56.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:58:1c:98:2b:c0:86:d2:7f:96:8f:5b:9d:59:59:cf:1f:cc:
         4c:f6:5a:41:06:1e:bc:a4:34:de:fc:ee:44:7d:9e:87:f0:88:
         97:15:6a:a1:33:bf:96:f3:d9:ed:ee:54:5f:0c:d1:fc:5a:ec:
         ed:3a:8c:75:76:a1:83:35:c6:34:de:19:8f:4f:b8:5f:2c:d6:
         22:4d:aa:f9:ab:30:8b:2d:78:ad:46:49:12:78:16:36:b7:90:
         5e:4e:f1:c3:cf:25:03:dd:c8:e4:13:0f:bf:a6:79:a7:37:b0:
         c2:d2:b1:91:34:43:61:00:f6:2d:a3:b4:1e:a0:80:46:85:de:
         12:de:dd:00:01:45:d1:fc:2f:58:66:04:a0:e0:3e:9f:3c:fb:
         ec:7f:f7:a9:77:88:15:24:19:75:62:79:93:2b:cb:a9:34:44:
         b4:5c:7d:68:8d:ad:8a:70:bc:28:26:9d:91:0c:57:ad:dc:9e:
         8f:a0:f0:73:30:ce:3e:40:2d:bb:c2:39:7e:d9:2b:9e:63:66:
         bb:00:ae:51:b1:d9:ba:f2:d5:5d:4b:f2:5b:9d:93:1c:55:97:
         67:0c:6e:70:be:85:31:54:b3:88:b0:f9:b9:e1:c2:8d:6a:d8:
         d6:20:8e:7f:93:b2:d8:fd:82:0f:b0:31:1c:a0:9d:15:54:c4:
         27:af:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:58:44 2024 by rpki-client on console-fra.rpki-client.org