Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa55d7f8-41ac-37b3-9ba8-71cbd03e3de3.roa
File:                     fa55d7f8-41ac-37b3-9ba8-71cbd03e3de3.roa (raw, json)
Hash identifier:          vOArttOzoyA/nH1JYca5XfkTJxuMi78EpeYG9GXTYVM=
Subject key identifier:   6E:7C:F7:18:78:A5:C8:58:E6:2A:39:99:2E:08:66:B3:C9:93:F9:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D64AC4C4F50A3820B50A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa55d7f8-41ac-37b3-9ba8-71cbd03e3de3.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        69.78.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4a:c4:c4:f5:0a:38:20:b5:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=989e70c9-311b-4e30-b2d6-69a4a22bfa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:64:00:0a:5f:7b:43:c9:2e:a6:d3:b7:88:
                    b8:d3:14:2a:fc:86:03:87:df:51:64:ac:96:61:91:
                    6e:e2:e7:68:cd:92:39:cd:de:c2:b7:aa:d0:a3:38:
                    03:9f:08:bb:b4:f3:68:d6:14:84:43:da:3e:03:7a:
                    a1:44:3d:38:a0:d3:0c:99:d9:28:02:3e:e2:10:ac:
                    a4:b2:0f:73:b2:b1:79:95:6b:bc:85:40:d1:8e:57:
                    d7:01:cd:16:3b:fa:9d:e0:f0:fb:2a:fc:5c:c1:37:
                    34:1a:dc:e4:73:c3:f2:57:b7:2b:9b:09:e5:92:97:
                    f3:84:0d:77:eb:50:63:35:1b:ae:d3:c3:6d:b5:20:
                    f7:40:65:a8:d9:ad:51:a3:88:2f:c5:ca:26:7e:bd:
                    c5:a5:71:35:82:d4:b5:b8:b5:99:49:6d:f1:07:19:
                    42:a0:63:0d:05:d8:68:cc:ab:48:b2:28:b8:56:79:
                    0a:d9:40:1e:3a:1e:b1:d7:6f:6c:8f:0f:b7:c5:79:
                    ab:f8:54:86:3f:6f:a6:e1:45:fa:bf:59:0b:9e:32:
                    18:b1:c9:d5:76:a4:d6:5c:93:10:89:60:fd:52:a0:
                    b9:3c:4c:e4:2b:fe:9d:16:cc:81:4b:76:84:1a:03:
                    a7:0a:db:67:ce:16:8f:ea:53:66:75:7a:b6:d4:7d:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7C:F7:18:78:A5:C8:58:E6:2A:39:99:2E:08:66:B3:C9:93:F9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa55d7f8-41ac-37b3-9ba8-71cbd03e3de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:77:8c:ab:ba:b7:9a:30:64:48:aa:29:f5:3e:12:fd:d5:20:
         5f:0c:77:f0:0c:1a:5a:67:d5:37:82:a4:f1:d7:31:2a:ae:4f:
         98:9f:45:f5:d5:71:90:c9:26:fb:62:71:d5:d2:8f:0b:44:36:
         ad:8a:21:b6:9d:5a:a6:cc:76:95:c3:6b:81:78:4a:63:40:52:
         4c:4d:f4:70:6e:de:76:e0:37:88:ad:a6:c5:50:07:38:94:a3:
         af:ab:7b:02:0e:0e:98:1e:32:5f:6e:69:c8:b3:a3:09:fa:34:
         d5:85:c1:fa:be:ac:53:72:28:c1:22:fc:3e:dc:b5:bd:a3:3e:
         0b:17:3c:6a:e5:6b:76:c9:1a:02:10:19:f2:a8:39:fc:2b:0d:
         54:8b:33:df:91:fc:14:e4:88:ae:6a:0a:f3:de:32:6d:ae:24:
         00:34:97:77:1d:a2:be:27:c5:a5:19:1d:d8:7f:99:7c:85:0b:
         72:33:c6:06:c9:ee:1c:9d:ba:ea:e8:52:36:4e:ed:5a:f6:35:
         96:2a:54:af:c2:20:d6:2f:fb:2a:cb:b2:a8:4b:d0:40:06:b6:
         63:9e:9a:ae:da:23:b2:4a:ad:a7:8f:cd:68:4c:e6:31:5e:7a:
         53:c7:c0:cd:78:4b:18:69:bc:ea:f8:37:e9:42:e6:a4:c3:e8:
         99:ef:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:03 2024 by rpki-client on console-fra.rpki-client.org