Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa
File:                     14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa (raw, json)
Hash identifier:          9N3fQHvIGE6yeFS4e/HAebVVU8RVIi2Mb3KFTa4Sepg=
Subject key identifier:   CC:D5:A6:EB:75:E8:BE:AA:7E:25:81:4E:93:2C:80:3C:11:45:E4:3E
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F432858476C9DB3F5C8CF360827CBD8F8
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     397444
IP address blocks:        69.59.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b3:f5:c8:cf:36:08:27:cb:d8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=afdcc1d1-b74b-4881-b5cc-7789a8e12644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:ee:c2:16:81:d3:a7:69:b4:1e:e3:4f:e9:
                    4b:ad:06:d8:be:8b:a3:6c:41:9a:93:05:35:30:68:
                    d0:51:47:c3:5f:83:e2:8f:e1:2d:4b:d0:b2:56:ba:
                    a5:ff:65:7e:37:90:4b:33:a5:40:c5:1d:c7:0f:48:
                    4c:59:29:fb:61:1d:39:51:78:4e:8d:46:92:c3:6f:
                    91:6f:61:eb:72:91:8d:86:c9:2d:72:fe:bc:81:fd:
                    92:cb:47:88:ed:3d:52:4d:6e:f4:74:e4:b9:ff:e2:
                    8c:6e:0b:23:10:f6:ae:1d:60:de:4c:fd:12:80:ab:
                    5d:df:d3:d5:82:82:80:ef:ae:23:48:cb:b5:b9:11:
                    cf:1a:1f:6c:0b:77:7b:01:c9:5f:24:d4:59:5d:e8:
                    e6:07:8c:91:3e:ed:12:2d:b1:bd:74:82:21:c3:ac:
                    8c:ab:a1:c7:0e:f6:8a:a4:a8:93:1c:98:d4:1c:2a:
                    66:ca:bf:35:5f:89:02:93:27:9f:82:c4:36:9c:b6:
                    09:d9:92:35:9a:6b:11:13:d4:3b:77:83:48:e3:7b:
                    f1:3c:3e:fc:50:0e:fe:10:0d:db:d4:da:1d:42:02:
                    4d:75:b8:39:a1:53:ab:04:5e:18:7e:41:95:c0:e6:
                    e9:0f:75:13:bb:d6:7c:43:8c:dc:52:41:c7:77:fd:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D5:A6:EB:75:E8:BE:AA:7E:25:81:4E:93:2C:80:3C:11:45:E4:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:34:64:92:98:e0:15:aa:c6:ac:72:d7:e7:cf:0c:4a:05:d9:
         6c:4d:23:dc:ef:7c:7d:16:57:81:06:7c:02:91:15:19:fd:92:
         b4:75:b6:c1:04:ac:b2:47:91:ed:66:72:cc:40:45:8b:50:a5:
         f3:20:d9:c8:db:e7:12:71:94:3b:64:a8:ce:e5:41:16:2e:46:
         27:6d:a2:c1:f4:1f:f5:25:bf:64:b5:5b:c5:f6:03:da:c6:18:
         ce:d6:fc:51:3e:a4:ce:c5:3c:8f:79:b6:34:a0:e4:60:d5:e1:
         55:30:9c:d5:ce:43:5d:56:7c:4f:5a:b0:b5:52:54:f2:95:49:
         e1:9e:44:4e:f0:ec:65:88:36:31:af:92:c3:ba:49:6f:2a:77:
         2f:e4:c6:4f:33:b2:ee:2c:94:c6:94:89:c9:57:d6:96:fb:05:
         30:a7:e2:bc:5c:c3:7b:a6:00:90:e1:1c:0c:25:2d:08:b6:1b:
         64:9a:58:88:b7:63:d4:2b:53:42:8a:0b:dd:66:c4:20:51:29:
         ee:1d:8d:d0:54:f5:0a:ea:52:cb:13:94:22:24:4b:39:76:2c:
         7a:fe:c0:8d:c9:2b:97:8f:4f:37:78:0e:42:f4:33:2e:05:3a:
         6a:ff:28:bf:1a:bb:fe:45:4e:1f:ff:00:4c:56:77:03:e0:eb:
         00:cd:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:49:15 2024 by rpki-client on console-ams.rpki-client.org