Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/6443fbf7-e7c2-3b07-9012-298b346b9299.roa
File:                     6443fbf7-e7c2-3b07-9012-298b346b9299.roa (raw, json)
Hash identifier:          1eCrKjupLtGfdxmSVENj9+zUqPkvMQjhOmrRavqq3Q8=
Subject key identifier:   09:5B:F3:FE:E0:AB:8D:ED:42:D4:FD:40:16:F0:92:1A:A7:D7:D0:8A
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F432858473095E673F9630C3405484140
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/6443fbf7-e7c2-3b07-9012-298b346b9299.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     19197
IP address blocks:        69.41.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e6:73:f9:63:0c:34:05:48:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=3caf2506-5ea9-4095-b68e-e37ef92533de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:08:97:fa:da:83:d5:4c:5a:03:ea:a2:99:
                    4b:b3:44:6a:96:90:0b:fc:81:c2:87:ba:60:91:61:
                    9d:5b:9b:e4:5a:9c:63:28:5b:ba:39:2c:ac:0a:80:
                    5c:bc:32:f2:3d:09:b6:03:01:e7:fc:be:5b:2b:ae:
                    58:b4:bc:59:f7:70:27:53:23:cb:1a:c2:29:47:c8:
                    26:2a:8e:cb:ab:bc:2b:82:96:39:ea:b2:25:ac:fa:
                    96:0b:ea:95:ac:a5:63:53:5f:17:c2:44:98:38:a3:
                    46:83:dc:45:b6:c5:73:5e:2e:4d:07:8a:32:c1:e3:
                    2c:c1:cd:d5:35:fb:2a:25:96:c5:2a:d5:a8:90:bd:
                    50:61:89:e7:ea:49:a0:0e:a3:0d:e1:dd:9b:d3:bd:
                    ae:55:1b:9d:07:ba:b0:31:3d:34:3c:e4:60:9d:07:
                    bf:94:2c:b3:68:4c:a8:09:07:89:af:e2:4d:ab:c5:
                    58:c9:a3:ac:72:09:09:6c:2b:3f:47:a7:ae:b6:65:
                    3d:b6:32:3d:0f:1f:b5:81:85:c5:41:4f:2e:8b:97:
                    64:91:4a:19:59:44:3c:b9:ad:36:a0:f7:16:47:45:
                    6d:82:b2:06:ac:d4:1d:b0:02:ee:cd:05:4c:39:21:
                    f2:cd:7f:82:57:2f:27:b2:85:b5:da:88:8f:a8:89:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:F3:FE:E0:AB:8D:ED:42:D4:FD:40:16:F0:92:1A:A7:D7:D0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/6443fbf7-e7c2-3b07-9012-298b346b9299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:b4:52:b0:f6:a1:a5:f0:4e:be:a0:7f:90:04:63:69:dc:33:
         f9:cd:10:c8:02:04:ab:13:f8:93:0b:7d:6b:18:c1:4c:94:4c:
         33:a3:d0:cb:6f:a1:a2:89:ec:6c:12:4f:82:c2:c0:70:37:b8:
         82:4c:2d:ff:82:7d:eb:6a:96:6f:ee:35:31:2c:7b:a8:0c:10:
         67:85:20:f4:1b:4f:80:f6:c9:b8:ee:79:18:d1:26:e8:cf:73:
         ce:a4:12:87:78:6d:78:28:33:3b:42:55:b5:e3:d0:97:fd:28:
         a0:47:fa:4a:f9:04:19:1f:2c:3a:9b:32:88:f8:54:81:b7:3c:
         63:59:c0:37:8d:20:da:68:ed:67:93:d0:51:41:b3:49:7a:d8:
         04:f3:4f:87:30:f4:3a:b7:b6:99:5c:0d:ef:34:db:dc:08:2d:
         df:27:e7:0d:f3:8b:d4:2f:84:b6:de:be:45:80:fc:19:61:1f:
         89:ec:0d:db:8b:cd:70:ff:7e:85:d1:8b:e7:6a:4a:b6:48:91:
         d2:36:9c:15:17:a1:eb:55:88:f6:f0:ed:4e:98:fd:0e:63:ed:
         b9:1a:dc:ed:0d:96:c6:9c:62:b8:f2:6b:32:39:24:e4:4a:d0:
         74:c9:17:3a:2e:b5:ff:43:cc:e7:6a:16:5d:c4:52:c2:ee:be:
         d2:f3:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:03 2024 by rpki-client on console-ams.rpki-client.org