Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa
File:                     ed51f9d5-3719-308d-96cb-590fd7335460.roa (raw, json)
Hash identifier:          VMaoAohmTwe0EnmvhPNfcvAgaq6c30EzTf+wkwezixw=
Subject key identifier:   85:83:1B:1D:51:B6:5D:43:BE:04:86:40:1C:E9:5B:C7:D5:88:06:79
Certificate issuer:       /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial:       010D0C9F432858472C65DB954A13148EE9DBBDC0
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     40771
IP address blocks:        173.249.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:db:95:4a:13:14:8e:e9:db:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=1b925480-bc9b-44a7-b704-e92004f48696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:46:e0:88:56:87:69:dc:b0:1e:c3:18:75:
                    15:e9:77:06:cc:18:a8:d3:90:63:67:91:2e:80:2f:
                    2f:35:51:b1:9c:e0:b2:56:d7:81:56:23:c7:41:89:
                    cd:51:18:a6:d5:25:10:ad:20:cf:99:32:bc:52:d5:
                    ef:0f:4f:e3:36:d6:d0:b0:dc:55:bf:51:60:d4:cc:
                    d9:71:39:30:29:01:3b:cc:e8:1c:4b:6b:ae:58:3a:
                    4e:a8:1e:67:82:24:71:85:1f:f8:5c:fd:f7:28:13:
                    32:af:2b:b8:86:97:af:d5:68:f7:8f:80:61:01:b4:
                    54:9e:ca:67:d8:0c:1b:26:88:d4:4e:63:96:dd:64:
                    66:de:e3:88:5e:b8:c4:dd:f2:53:80:92:fa:8b:82:
                    8d:d4:fa:5e:3c:98:9b:81:34:e9:6d:f3:a1:08:40:
                    7a:04:3d:f5:cc:d8:30:74:d2:c1:ab:e0:45:79:39:
                    c2:7d:e3:89:bb:98:12:67:a0:21:f0:3b:55:57:5f:
                    df:1b:78:24:d5:16:5c:4f:4a:73:ae:43:16:25:d3:
                    41:be:9b:5a:3c:f2:33:77:38:4a:e9:32:82:49:07:
                    46:46:24:d7:30:b2:06:84:3b:46:a4:67:ec:6d:4f:
                    f4:19:33:fc:a3:63:48:02:44:97:42:70:59:34:c3:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:83:1B:1D:51:B6:5D:43:BE:04:86:40:1C:E9:5B:C7:D5:88:06:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl

            X509v3 Authority Key Identifier:
                keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:03:2f:c2:1a:6a:d8:56:6a:b7:9d:25:e3:15:7a:a5:6f:
         63:b5:79:37:7d:70:1c:79:30:2b:84:ef:78:30:fb:a9:60:6b:
         78:e7:e1:d9:0c:9b:33:db:64:5a:12:8a:97:63:c3:93:63:9a:
         e3:a3:9a:05:80:3a:6b:c1:49:25:f6:59:35:dc:0f:17:3d:e8:
         c1:00:c2:fa:39:03:67:f8:67:a7:22:6f:85:97:cc:2f:b3:f7:
         51:80:4c:f7:59:9c:0e:d5:ad:1b:92:5a:51:d0:b1:08:7b:38:
         e6:19:76:d4:38:03:0c:a0:9d:99:69:85:cc:9f:83:e8:a1:d5:
         71:c7:8c:c6:c1:5c:55:61:6f:7d:34:10:5e:97:0d:d1:96:f4:
         3d:2d:4d:ce:20:d0:97:07:3f:c0:82:d8:d0:03:ca:21:33:26:
         15:73:af:49:c5:6b:d0:89:75:41:ce:a3:28:7c:3d:f6:16:0e:
         2f:d2:d8:2b:d4:71:a7:f8:02:7c:6d:58:43:55:1f:68:0d:08:
         40:cd:fc:1d:6a:66:8c:fe:1f:48:10:e3:a6:2f:ad:5d:b5:01:
         39:1d:10:55:2a:3f:3d:c2:99:c0:22:63:9a:70:d4:67:15:f6:
         17:e6:38:ed:97:9a:41:a6:77:d2:11:16:32:8f:58:44:5d:4e:
         48:53:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:34:56 2024 by rpki-client on console-fra.rpki-client.org